# changelog

author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Simone Caronni <negativo17@gmail.com> - 1.17-16
changelog:
  - Update SPEC, remove obsolete tags, fix formatting.
  - Add patch for pkg config (libtomcrypt.pc).
  - Add correct build requirements for Fedora 19+ and RHEL 7+.


author: Simone Caronni <negativo17@gmail.com> - 1.17-20
changelog:
  - Make doc package noarch.
  - Remove executable bits from LICENSE file and source files.
  - Require isaed library for devel subpackage.
  - Require CVE fixed libtommath library.


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Derbyshev Dmitry' <dderbyshev@virtuozzo.com> 7.0.14
changelog:
  - vcmmd_config: node_list and cpu_list fields added
   - vcmmd_config: string values in config
   - vcmmd_config: prepare for string values in config


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.15
changelog:
  - add VCMMD_VE_CONFIG_GUARANTEE_TYPE to ve config (#PSBM-55018)
   - add VCMMD_ERROR_TOO_MANY_REQUESTS


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.16
changelog:
  - Revert "add VCMMD_ERROR_TOO_MANY_REQUESTS"
   - Revert "add VCMMD_VE_CONFIG_GUARANTEE_TYPE to ve config"


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vz7.32.2
changelog:
  - DROP: qemu: handle storage/virtlogd hanging #VSTOR-27947
  - FIXUP: qemu: migration: implement shared workaround #PSBM-99724


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.4
changelog:
  - FIXUP: on removing checkpoint delete bitmap in transaction #VSTOR-28700
  - log: in case of OOM at least try to log something on error


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.6
changelog:
  - DROP: qemu: wait blockjob finishing if it is absent in qemu #VSTOR-28575
  - qemu: wait blockjob finishing if it is absent in qemu #VSTOR-28575


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.7
changelog:
  - FIXUP: api/qemu: introduce hv-vss freeze/thaw
  - FIXUP: pull: qemu: support disks quiesce
  - FIXUP: qemu: support explicit disk backing in input


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.8
changelog:
  - qemu: add reconnect params for nbd network disks #VSTOR-28845
  - FIXUP: qemu: handle host usb device add/del udev events


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.9
changelog:
  - FIXUP: qemu: agent: don't log error when monitor EOF is expected #VSTOR-29559
  - FIXUP: qemu: don't log error when monitor EOF is expected #VSTOR-29559


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-10.vl7.32.10
changelog:
  - qemu: support 'preserve' option for 'on_poweroff' #VSTOR-29060
  - qemu: query blockjob presence after daemon restart
  - netdaemon: fix deadlock on stopping libvirtd when VM is starting #VSTOR-29392
  - qemu: kill partially started domain immediately on reconnect #VSTOR-29393
  - qemu: disable snapshot explicitly when block snapshot is in progress #VSTOR-29840


author: Jiri Denemark <jdenemar@redhat.com> - 3.7.0-1
changelog:
  - Rebased to libvirt-python-3.7.0 (rhbz#1472265)
  - The rebase also fixes the following bugs:
      rhbz#1463188


author: Jiri Denemark <jdenemar@redhat.com> - 3.8.0-1
changelog:
  - Rebased to libvirt-python-3.8.0 (rhbz#1472265)
  - The rebase also fixes the following bugs:
      rhbz#1472265, rhbz#1496517


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-1
changelog:
  - Rebased to libvirt-python-3.9.0 (rhbz#1472265)
  - The rebase also fixes the following bugs:
      rhbz#1472265


author: Jiri Denemark <jdenemar@redhat.com> - 4.4.0-1
changelog:
  - Rebased to libvirt-python-4.4.0 (rhbz#1563171)
  - The rebase also fixes the following bugs:
      rhbz#1542358, rhbz#1578337


author: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com> - vz-4.5.0-1.vz7.1
changelog:
  - Add pull backup API
  - Add IO latency API
  - Add stub for VIR_DOMAIN_EVENT_ID_BLOCK_JOB_ERROR_X event
  - Skip API not yet implemented in this library


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 7.0.42
changelog:
  - Sort hwids alphabetically #PSBM-79971
   - Fixed uninitialized memory while reading mn hwid #PVA-37164


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 7.0.47
changelog:
  - Enable SSL debug to stderr for feature testing (temporary)
   - Enable SSL cert and hostname validation #PSBM-65419


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 7.0.50
changelog:
  - conditional debug log based on /var/log/vzlic-debug.log existance
   - xmlrpc: report http error code before xml parsing


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Jaromir Capik <jcapik@redhat.com> - 0.3.0-5
changelog:
  - Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
  - Resolves: rhbz#1127230


author: Rex Dieter <rdieter@fedoraproject.org> - 1.11-4
changelog:
  - fix fpath (use autoreconf -f)
  - -devel: tighten deps via %{?_isa}, drop Requires: pkgconfig (add explicit BR: pkgconfig)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7.1-2
changelog:
  - Fixes for
    CVE-2018-15864, CVE-2018-15863, CVE-2018-15862, CVE-2018-15861,
    CVE-2018-15859  CVE-2018-15857, CVE-2018-15856, CVE-2018-15855,
    CVE-2018-15854, CVE-2018-15853


author: Rui Matos <rmatos@redhat.com> - 5.4-7
changelog:
  - Explicitly disable vala bindings support
  Resolves: #1246040 - error: Installed (but unpackaged) file(s) found


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.28-3
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Remi Collet <remi@fedoraproject.org> - 0.10-1
changelog:
  - update to 0.10
  - apply patch with changes from php bundled lib (thanks spot)
  - handle multiarch headers (ex from MySQL)


author: Rex Dieter <rdieter@fedoraproject.org> 0.10.1-4
changelog:
  - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954)


author: Andrey Ponomarenko <aponomarenko@virtuozzo.com> 0.5
changelog:
  - Code cleaning. Save uppercase key in the gui spoke.
   - Accept lowercase symbols at license screen, see #PSBM-58445


author: Andrey Ponomarenko <aponomarenko@virtuozzo.com> 0.6
changelog:
  - Removed obsolete LICENSE and ChangeLog files. Fixed copyrights. Fixed help
  file.
   - Added l18n files (Denis Silakov <dsilakov@virtuozzo.com>)
   - Fixed spec-file.
   - Added l10n facility (Denis Silakov <dsilakov@virtuozzo.com>)


author: Andrey Ponomarenko <aponomarenko@virtuozzo.com> 0.10
changelog:
  - Fix ru.po (Denis Silakov <dsilakov@virtuozzo.com>)
   - Improve l10n (Denis Silakov <dsilakov@virtuozzo.com>)


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-6.20160601gitf9185e5
changelog:
  - Fix License field capitalization
  - Resolves: rhbz#1577175
  - Add detection of AMD Ryzen w/ Vega graphics
  - Resolves: rhbz#1569542
  - Fix issues found by Coverity Scan
  - Resolves: rhbz#1578007


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-13
changelog:
  - fix #1393247 - migration of state file from previous versions of logrotate
  - fix #1374331 - preserve SELinux context with 'compress' and 'sharedscripts'
  - fix #1377335 - make 'createolddir' preserve sticky bit
  - fix #1369438 - heap buffer overflow when using long date format
  - fix #1375638 - make olddir respect the missingok flag


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Mikhail Feoktistov <mfeoktistov@virtuozzo.com> 3.8.6-18
changelog:
  - Add a lock to be sure that logrotate is running exclusively
    We need this because logrotate is moved from cron.daily to cron.hourly
    We can get huge log files if logrotate checks them only once a day.
    VSTOR-30059 VSTOR-26472


author: Petr Pisar <ppisar@redhat.com> - 0.616-5
changelog:
  - Fix GCC 6 warnings (bug #1306292)
  - Add a simple test
  - Specify all dependencies
  - Disable tests on ARM (bug #1309772)
  - Enable JIT only on x86 and x86_64 architectures (bug #1309772)


author: Petr Oros <poros@redhat.com> - B.02.18-8
changelog:
  - Proper detect vendor_id/device_id for virtual functions
  - Sync SMBIOS with latest specification
  - Resolves: #1445473


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.184-2
changelog:
  - Add support for vgsplit with cached devices.
  - Fix conversion of cache pool to RAID1 (2.02.184).
  - Fix signal delivery checking race in libdaemon (lvmetad).
  - Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-1
changelog:
  - Fix change of monitoring in clustered volumes.
  - Improve -lXXX%VG modifier which improves cache segment estimation.
  - Add synchronization with udev before removing cached devices.
  - Fix missing growth of _pmspare volume when extending _tmeta volume.
  - Automatically grow thin metadata, when thin data gets too big.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-2
changelog:
  - Fix cluster conversions from linear to mirror.
  - Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
  - Prevent shared active mirror LVs with lvmlockd.
  - Parsing of cache status understand no_discard_passdown.


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Nikola Forró <nforro@redhat.com> - 12.5-13
changelog:
  - fix SIGSEGV crash in smtp_auth_var()
  - add warning message for empty from variable
    resolves: #1113611


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: DJ Delorie <dj@redhat.com> - 1:3.82-24
changelog:
  - Change fatal() to error() when a mix of explicit and implicit
    targets (in that order) is detected.
    Resolves: #1582545


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Honza Horak <hhorak@redhat.com> - 3.0.5-3
changelog:
  - Add -config sub-package that delivers system-wide /etc/my.cnf and
    /etc/my.cnf.d directory, that other packages should use
    This package also obsoletes mariadb-config


author: Honza Horak <hhorak@redhat.com> - 3:10.1.14-4
changelog:
  - Revert Update to 10.1.15, this release is broken
    https://lists.launchpad.net/maria-discuss/msg03691.html


author: Michele Baldessari <michele@acksyn.org> - 3:10.1.18-2
changelog:
  - Back out upstream commit 7497ebf8a49bfe30bb4110f2ac20a30f804b7946 as it
    breaks the resource agent


author: Michael Bayer <mbayer@redhat.com> - 3:10.1.20-1
changelog:
  - Update to version 10.1.20
  - Add explicit EVR requirement in main package for -libs
    Related: #1406320
  - Use correct macro when removing doc files
    Resolves: #1400981
  - JdbcMariaDB.jar test removed
  - PCRE version check added
    Related: #1382988, #1396945, #1096787
  - added temporary support to build with OpenSSL 1.0 on Fedora >= 26
  - added krb5-devel pkg as Buldrquires to prevent gssapi failure


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
  - attempt to fix segfault while passing messages to widgets (#907045, #912033)
  - fix possible segfault when freeing a VFS (#923415)


author: Prarit Bhargava <prarit@redhat.com> - 3:144.1.94d853b2ea81
changelog:
  - update NVR to 144 to match upstream
  - add Denverton SoC support [1273768]
  - add Kabylake U/Y support, 0x8E [1310954]
  - add Kabylake H/S support, 0x9E [1310955]
  - add Knights Mill support [1381316]
  - mcelog didn't remove /var/run/mcelog-client when exitting [1362123]


author: Prarit Bhargava <prarit@redhat.com> - 3:144.10.94d853b2ea81
changelog:
  - mcelog: Deduce channel number for Haswell/Broadwell/Skylake systems [1641043]
  - mcelog: Add decoding for Optane DC persistent memory mode [1645345]


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.28-1
changelog:
  - update to 1.4.28
  - listen only on loopback interface by default (#1182542)
  - use upstream unit file (#1350939)
  - remove obsolete macros and scriptlet


author: Sebastian Kisela <skisela@redhat.com> - 4.4.2-6
changelog:
  - Stop using deprecated python macros: https://fedoraproject.org/wiki/Packaging:Python
  - Add gcc build time dependency, as gcc was removed from default buildroot package set.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-52
changelog:
  - Remove disclaimer, as it is not as important now to justify kmsg/log
    pollution; its contents are partially adopted in README.caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.1
changelog:
  - Intel CPU microcode update to 20190918.
  - Add new disclaimer, generated based on relevant caveats.
  - Resolves: #1758572.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.3
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764050, #1764070, #1764949,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.
  - Rework dracut hook to address dracut's early initramfs generation
    behaviour.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.4
changelog:
  - Package the publicy available microcode-20191112 release (#1773962):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.5
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-53.6
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.33-1
changelog:
  - Update to 8.33
  - Added the configure arguments --enable-pcre8 --enable-pcre16 --enable-pcre32
    (the pcre16 one is needed by mingw-qt5-qtbase)
  - Use a more verbose filelist


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.38-1
changelog:
  - Update to 8.38
  - Fixes various CVE's:
    RHBZ #1236660, #1249905, #1250947, #1256453, #1256454, #1287616,
    RHBZ #1287619, #1287626, #1287628, #1287631, #1287634, #1287640,
    RHBZ #1287642, #1287648, #1287650, #1287656, #1287658, #1287661,
    RHBZ #1287663, #1287668, #1287670, #1287673, #1287675, #1287692,
    RHBZ #1287694, #1287698, #1287700, #1287704, #1287706, #1287720,
    RHBZ #1287722


author: Kalev Lember <kalevlember@gmail.com> - 1.0-8
changelog:
  - Renamed the source package to mingw-srvany (#801031)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-13
changelog:
  - Switch to upstream version instead of fork.
  - There is no documentation upstream, but include a COPYING file.
  - The program is called 'rhsrvany.exe' (not srvany, which is a MSFT program).
  - Run rpmlint and fix problems.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-14
changelog:
  - Various packaging fixes (RHBZ#1117291).
  - Put git version into release tag.
    https://fedoraproject.org/wiki/Packaging:NamingGuidelines#Release_Tag


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-15
changelog:
  - Update to 20150115.
  - Includes fix for out of bounds array read (RHBZ#1187226).
  - Set macros so we only build the 32 bit target.


author: Kalev Lember <kalevlember@gmail.com> - 1.3.1-12
changelog:
  - Renamed the source package to mingw-termcap (#801034)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.5-7
changelog:
  - Rebuild against the mingw-w64 toolchain
  - Use the correct RPM macros
  - Fix FTBFS against the latest binutils caused by the use of an invalid .def file


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.5-10
changelog:
  - Added win64 support
  - Simplified the build process by using autotools and a hacked version of libtool
  - Made the package compliant with the new MinGW packaging guidelines


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
  - Update to mlocate-0.26
  - Drop no longer necessary %clean and %defattr commands.
  - Enable hardened build
    Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
  - Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
    Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
  - don't index fuse.glusterfs filesystems (#1331870)
  - don't index files on ceph filesystem (#1333152)
  - update link to upstream repository (#1502361)


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 10-0.1
changelog:
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Marek Skalický <mskalick@redhat.com> - 2.6.12-4
changelog:
  - Remove 0-length files created by MongoDB logRotate after logrotating
  - Update excluded architectures


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-1
changelog:
  - Update to upstream version mpich-3.2 with patches from Fedora.
  - Keep 3.0.4 as 'mpich-3.0' for backwards compatibility.
  - Resolves: rhbz1091532
  - Resolves: rhbz1142117
  - Resolves: rhbz1148992


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-2
changelog:
  - Remove bad rpath in two binaries in mpich-3.2.
  - Restore trimming of shebang lines in config files in mpich-3.0-devel.
  - Related: rhbz1091532


author: Honggang Li <honli@redhat.com> - 4.11.0-5
changelog:
  - Rebase to latest upstream release v4.11.0-5
  - mstconfig support for prio_tag and ttl_wa
  - Resolves: bz1694703


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Jarod Wilson <jarod@redhat.com> - 2.2-1.5
changelog:
  - Update mvapich23 (TrueScale) bits to 2.3 release
  - Fix libmpi.a being built w/o -fPIC
  - Resolves: #1625672


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.5.0-2
changelog:
  - Patch nagios-3.4.3-spaces-to-plus-signs.patch (#952139)
    (upstream http://tracker.nagios.org/view.php?id=407)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.5.0-3
changelog:
  - Add cfg_dir=/etc/nagios/conf.d to the main nagios configuration file
    (nagios-3.5.0-conf.d-configuration-directory.patch) (#907145#c5)
  - Own the configuration directory /etc/nagios/conf.d (#907145#c5)
  - Ship the internet.cfg configuration file as documentation (#907145#c5)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.5.0-5
changelog:
  - Build package with PIE flags (#965529)
  - Insecure temporary file usage in nagios.upgrade_to_v3.sh (#958292)


author: Peter Lemenkov <lemenkov@gmail.com> - 1.4.16-10
changelog:
  - Remove EL4 and EL5 support
  - Backport patches to fix check_linux_raid in case of resyncing (rhbz #504721)
  - Fix smart attribute comparison (rhbz #913085)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.5-1
changelog:
  - Update to version 1.5
  - New project homepage and source download locations
  - Disabled patches 1, 6, 8, and 9.
  - No linux_raid subpackage (the contrib directory was removed)


author: Sam Kottler <skottler@fedoraproject.org> - 2.0.1-1
changelog:
  - Update to 2.0.1
  - Moved SSD-specific patch which landed upstream
  - Update patch to binary paths in plugins-scripts/check_log.sh so it applies
  - Add -uptime subpackage


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-1
changelog:
  - New stable version 1.2.3.
  - Add patch to work around libvirt problem with relative socket paths.
  - Add patch to fix the xz plugin test with recent guestfish.
  - Fix version in VDDK plugin spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-1
changelog:
  - New stable version 1.2.4.
  - Remove upstream patches.
  - Enable tarball signatures.
  - Add upstream patch to fix tests when guestfish not available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Add all upstream patches since 1.2.4 was released.
  - Drop example4 and tar plugins since they depend on Perl.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New stable version 1.2.5.
  - Enable VDDK plugin on x86-64 only.
  - Small refactorings in the spec file.


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-35
changelog:
  - Add fsync to prevet data lose on power failure (#1520761)
  - Add ZFS support (#1533943)
  - Fix man page (#1537460)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-39
changelog:
  - adjust logging of statfs (#1314610)
  - link libnetsnmptrapd against MYSQL LIBS (#1468084)
  - expand SNMPCONFPATH (#1514501)
  - remove date in mailheader (#1585940)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.25.20131004git
changelog:
  - Resolves: #1632905 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Konstantin Volkov <wolf@virtuozzo.com> - 1.8.6-2.20
changelog:
  - Change default bonding interface IPv4 parameter from Manual to Disabled, see #VSTOR-21471
  - Hide non-tested bonding types, see #VSTOR-22305


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: VZ Auto Builder <dsilakov@virtuozzo.com> 2.5.5.6
changelog:
  - Build both brandings at once (Repo syncer <syncer@virtuozzo.com>)
   - Added targets.list, see #VSTOR-4818 (Konstantin Volkov <wolf@virtuozzo.com>)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.56
changelog:
  - exportfs: move ro/rw option back to secinfo_flag_displaymap table (bz 1532688)
  - nfsdcltrack: getopt_long() fails on a non x86_64 archs (bz 1551903)
  - Fixed typo in nfsmount.conf (bz 1592235)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.57
changelog:
  - rpc.gssd: truncates 32-bit UIDs/GIDs to 16 bits architectures (bz 1602836)
  - Added back lockd vars to nfs-utils_env.sh and sysconfig (bz 1413272)
  - Document nfs v4 mounts will use Kerberos we available (bz 1334510)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.63
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1677403)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
  - nfs-server: Use reload not restart to start gssproxy (bz 1644169)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.12.2-1
changelog:
  - update to upstream release 1.12.2
  - Resolves: #1468584 - (CVE-2017-7529) CVE-2017-7529 nginx: Integer
    overflow in nginx range filter module leading to memory disclosure


author: Stephen Gallagher <sgallagh@redhat.com> - 1:6.9.4-2
changelog:
  - Enable DTrace support.
  - Eliminate newlines from CFLAGS due to broken dtrace shim
    https://sourceware.org/bugzilla/show_bug.cgi?id=21063
    Thanks to Kinston Hughes for the fix.


author: Stephen Gallagher <sgallagh@redhat.com> - 1:6.10.0-1
changelog:
  - Update to 6.10.0
  - https://nodejs.org/en/blog/release/v6.10.0/
  - New patch for handling system CA certificates


author: Kevin Fenzi <kevin@scrye.com> 2.14-3
changelog:
  - Apply patch from bug 860988 to handle RHEL versions and systemd
  - Apply patch from bug 957567 to fix condrestart so nrpe restarts on upgrade.
  - Rework systemd and service scriptlets and requires.
  - Harden Fedora 19+ builds


author: Peter Lemenkov <lemenkov@gmail.com> - 2.14-5
changelog:
  - Allow building for aarch64 (rhbz #926244)
  - Allow user to redefine default commands (rhbz #963703)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
  - Don't override date in man-pages
  - Revert the change to use XDG basedirs (mozilla#818686)
  - Enable SSL2 compatible ClientHello by default
  - Disable SSL3 and RC4 by default


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Rebase to NSS 3.44
  - Restore fix-min-library-version-in-SSLVersionRange.patch to keep
    SSL3 supported in the code level while it is disabled by policy
  - Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
  - Skip sysinit gtests properly
  - Fix shell syntax error in tests/ssl/ssl.sh
  - Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
changelog:
  - back out out-of-bounds patch (patch for nss-softokn).
  - Fix segfault on empty or malformed ecdh keys (#1777712)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
changelog:
  - Increase timeout on ssl_gtest so that slow platforms can complete when
     running on a busy system.


author: Kamil Páral <kparal@redhat.com> - 2:2017.3.23-10
changelog:
  - add Recommends: ntfs-3g-system-compression. That allows people with
    Windows 10 to read system files.


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-26
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
  - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
  - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
  - fix crash in parsing of received address in ntpq (#1616250)
  - avoid reading freed memory after disabling netlink socket (#1555401)
  - don't disable netlink socket on ENOBUFS error (#1555413)
  - replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Jeff Moyer <jmoyer@redhat.com> - 1.5.1-1.el7
changelog:
  - rebase to pmdk 1.5.1
    - libpmemobj C++ bindings moved to separate package
    - pmempool convert is now a thin wrapper around pmdk-convert
    - add ownership information for libpmemobj headers directory
    - remove broken pmemcto library
  - Related: rhbz#1634347


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22
changelog:
  - Update to last 4.01 version from OCaml git.
  - Fix bug in argument parsing
    resolves: rhbz#1139803


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22.2
changelog:
  - Use -fno-strict-aliasing when building the compiler
  - ppc, ppc64, ppc64le: Mark stack as non-executable.
    resolves: rhbz#990521
  - Provides ocaml(runtime) 4.01.1.
    related: rhbz#1098459


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Rebase to 4.05.0 (same as Fedora Rawhide).
  - Adds support for POWER, z/VM.
  - Improves support for aarch64.
    resolves: rhbz#1447988


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
  - correctly check the error returned from getpwnam_r(), so that we don't
    miss an ERANGE error (#1098616, part of #1108398)
  - add a note to pam_oddjob_mkhomedir's manual pointing to where the
    configuration would actually go (part of #1108398)
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
    proprocessor-input file as a reference, since we're patching it now


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-3
changelog:
  - Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
  - gdk_set_allowed_backends() is available in version 3.10 and later only.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-1
changelog:
  - Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
  - Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
  - Removed wayland-crash.patch which is no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 10-2.5-3
changelog:
  - ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
  - Resolves: bz#1601559
    ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el7
changelog:
  - ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
  - ovt-Fix-RELRO-flag.patch [bz#1678576]
  - Resolves: bz#1662278
    ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
  - Resolves: bz#1678576
    ([ESXi][RHEL7.6] Several files lost Full RELRO)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el7_7.1
changelog:
  - ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
  - ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
  - ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
  - Resolves: bz#1772825
    ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])


author: Sandro Mani <manisandro@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Fixes: CVE-2016-3183, CVE-2016-3181, CVE-2016-3182, CVE-2016-4796, CVE-2016-4797, CVE-2015-8871


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Jarod Wilson <jarod@redhat.com> - 1.10.7-3
changelog:
  - Update openmpi3 sub-package to OpenMPI v3.1.3
  - Resolves: #1637247
  - Rebuild against latest opensm
  - Resolves: #1670688


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2
changelog:
  - invalidate supplemental group cache used by temporarily_use_uid()
    when the target uid differs (#1583735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
    timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.5
changelog:
  - Add nova driver with block device mapping support. VSTOR-25378 (Alexey
  Ivanchuk <alexey.ivanchuk@virtuozzo.com>)
   - Add cinderclient requires


author: Dmitry Andreev <dandreev@virtuozzo.com> 4.0.0.6
changelog:
  - Update nova driver with block device mapping, remove volume_from bdm_v2
  payload. VSTOR-25378 (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Dmitry Andreev <dandreev@virtuozzo.com> 4.0.0.7
changelog:
  - Update unittests for nova driver with block device mapping. VSTOR-25378
  (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)
   - Update nova driver with block device mapping, remove volume_from bdm_v2
  payload. VSTOR-25378 (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.9
changelog:
  - Assign member's protocol port using pool's default_protocol_port. VSTOR-25350
  (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)
   - Fix diskimage-create to use actual repo and ref (Alexey Ivanchuk
  <alexey.ivanchuk@virtuozzo.com>)
   - Add the DIB_REPO* variables to the README.rst (Michael Johnson
  <johnsomor@gmail.com>)
   - Force DIB Python version for py2 in diskimage-create (Gregory Thiemonge
  <gthiemon@redhat.com>)
   - Build amphora image using centos-minimal element (Carlos Goncalves
  <cgoncalves@redhat.com>)
   - Make Ubuntu bionic the default for amphora images (Michael Johnson
  <johnsomor@gmail.com>)
   - Add cloud-init-datasources DIB element (Carlos Goncalves
  <cgoncalves@redhat.com>)
   - Switch the default Ubuntu kernel to -virtual (Michael Johnson
  <johnsomor@gmail.com>)
   - Specify the linux-image-kvm kernel for ubuntu (Michael Johnson
  <johnsomor@gmail.com>)
   - Add a note about nova hardware architectures (Michael Johnson
  <johnsomor@gmail.com>)
   - Add RHEL 8 amphora support (Carlos Goncalves <cgoncalves@redhat.com>)
   - Adding changes to support ppc64le amphora builds with CentOS (Trevor Vardeman
  <tvardema@redhat.com>)
   - Fix diskimage-create tox, add ``build`` and ``test`` targets (Frode Nordahl
  <frode.nordahl@canonical.com>)
   - Add default_protocol_port to pool and compute_server_id to member VSTOR-25350
  (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.11
changelog:
  - Fix lb_algorithm column migration. VSTOR-27117 (Alexey Ivanchuk
  <alexey.ivanchuk@virtuozzo.com>)
   - Fix migration of tls_certificate_id conlumn datatype. VSTOR-27117 (Alexey
  Ivanchuk <alexey.ivanchuk@virtuozzo.com>)
   - Make barbican_acl auth keystone session respect insecure config option.
  VSTOR-27117 (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.12
changelog:
  - Add /metrics endpoint for prometheus statistic export (Alexey Ivanchuk
  <alexey.ivanchuk@virtuozzo.com>)
   - Add per member statistics. Extend stats API. VSTOR-27748 (Alexey Ivanchuk
  <alexey.ivanchuk@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.13
changelog:
  - Remove unneded foreign keys constraints from member_statistics table to fix
  loadbalancer cascade deletion (Alexey Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.0.14
changelog:
  - Fix metrics: add project_id, hide deleted balancers. VSTOR-27117 (Alexey
  Ivanchuk <alexey.ivanchuk@virtuozzo.com>)


author: Timothy Redaelli <tredaelli@redhat.com> - 2.9.0-4
changelog:
  - Align with with RHEL "Fast Datapath" 2.9.0-15
  - Backport "rhel: don't drop capabilities when running as root"
  - Change owner of /etc/openvswitch during upgrade
  - Use DPDK as shared library


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-2
changelog:
  - Don't run tests during build
  - add new source
  - remove old patches, add new patch
  - Resolves: #1174391


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-5
changelog:
  - Run backup functions on s390x instead of emulation
  - Fix load of parameters smaller than 64 bits
  - Related: rhbz#1249506


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
  - Fix a bug in recent btrfs patch when an extended partition is examined. 
    (H.J. Lu) (bug #906847)
  - Fix naming of /boot partitions according to their fstab entry (bug #893472)
  - Don't generate .btrfsfix files which will be included in final rpm
  - Fix wrong boot partition set by linux-boot-prober when / and /boot are
    mounted (bug #906886)
  - Factor out 'logger', so that it is run once and logs are piped to it (John
    Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Colin Walters <walters@redhat.com> - 2018.1-2
changelog:
  - New upstream version for 7.5.0
  - https://github.com/ostreedev/ostree/releases/tag/v2018.1
  - https://github.com/ostreedev/ostree/releases/tag/v2017.15


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
  - Avoid reference to thread-unsafe strerror rhbz#1378947
  - Fix PKCS#11 OAEP interface rhbz#1191209
  - Update documentation to follow RFC7512 rhbz#1165977


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
  - Don't rebuild documentation for each platform. Doing so creates unique 
  document files which are shared and conflict on multilib installations.


author: Bob Relyea <rrelyea@redhat.com> 0.6.2.29
changelog:
  - Coverity and compilier warning fixes
  - Use the PKIX validator
  - Fix crash when ldap connection fails and debugging is enabled.


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Brian C. Lane <bcl@redhat.com> - 3.1-30
changelog:
  - partprobe: always close dev when probing disks
    Resolves: rhbz#1551411
  - tests: Add t4201 to test partprobe with 1025 devices
    Related: rhbz#1551411


author: Brian C. Lane <bcl@redhat.com> - 3.1-31
changelog:
  - Backport patches for dasd on virtio
    fdasd: geometry handling updated from upstream s390-tools
    dasd: enhance device probing
    parted: fix build error on s390
    fdasd.c: Safeguard against geometry misprobing
    Resolves: rhbz#1676604
  - Add part-label documentation to mkpart command
    Resolves: rhbz#1686659


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Jiri Kucera <jkucera@redhat.com> - 0.79-5
changelog:
  - Backport ca46cac (allow passwords longer than 79 characters)
    Backport Steve Grubb's patches
    - stop double auditing, use appropriate record types, update op field in
      audit events, don't audit status check, fix password aging logging
    Backport 02d4478 (better document -S option)
    Fix URL and Source tags
    Resolves: #1276570, #1489086, #1638105, #1145256, #1472567


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Robert Relyea <rrelyea@redhat.com - 1.4.10-13
changelog:
  - Add support for missing readers (broadcom, cherry).
  - mark deprecated readers as unsupported and needing an update


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.23
changelog:
  - Add -D_FORTIFY_SOURCE=2 to CFLAGS since our build env also sets this flag
   - Fix unused variables errors during build
   - Move branding to separate file, see #PSBM-58317 (Konstantin Volkov
  <wolf@virtuozzo.com>)
   - Drop SysV pdrsd script: unused (Konstantin Volkov <wolf@virtuozzo.com>)


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.25
changelog:
  - Restore license-handling logic, removed in fb65c6618 (PSBM-73365)
   - Correctly null-terminate buffer in id_set()


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.27
changelog:
  - Add additional logging to node list loaders (PSBM-73680)
   - Recalculate reserved ram on each update of node list (PSBM-73680)


author: Jarod Wilson <jarod@redhat.com> - 3.0-6
changelog:
  - Update to upstream 3.0-3.1.gb36a595 tarball for upstream fixes
  - Add in manpages
  - Related: rhbz#1365750
  - Resolves: rhbz#948476


author: Jarod Wilson <jarod@redhat.com> - 3.0-7
changelog:
  - Address a myriad more coverity/clang warnings
  - Add raw_ethernet_* man page symlinks
  - Related: rhbz#1273176
  - Related: rhbz#948476


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
  - Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
  - Removed tests which fails due to changes openssl 1.0.1h and later


author: Daniel P. Berrange <berrange@redhat.com> - 1.2.8-4
changelog:
  - Add agent lifecycle event callbacks & constants (rhbz #1167392)
  - Fix docs for get_time method (rhbz #1164972)
  - Fix docs for GET_ALL_STATS constnats (rhbz #1170481)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
  - Modernize spec file
  - Specify all dependencies
  - Change license to "(Copyright only) and (Artistic or GPL+)" because of
    ppport.h


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-293
changelog:
  - Add SSL support to Net::SMTP (bug #1557574)
  - Do not overload ".." in Math::BigInt (bug #1497734)
  - Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Devrim Gündüz <devrim@gunduz.org> - 1.9.0-3
changelog:
  - Change/Fix pgBouncer systemd configuration, per Peter:
    https://redmine.postgresql.org/issues/4398


author: Remi Collet <rcollet@redhat.com> - 5.4.16-38
changelog:
  - curl: add options to enable TLS #1291667
  - mysqli: fix segfault in mysqli_stmt::bind_result() when
    link is closed #1096800
  - fpm: fix incorrectly defined SCRIPT_NAME variable when
    using Apache #1138563
  - core: fix segfault when a zend_extension is loaded twice #1289457
  - openssl: change default_md algo from MD5 to SHA1 #1073388
  - wddx: fix segfault in php_wddx_serialize_var #1131979


author: Remi Collet <rcollet@redhat.com> - 5.4.16-41
changelog:
  - gd: fix integer overflow in _gd2GetHeader() resulting in
    heap overflow CVE-2016-5766
  - gd: fix integer overflow in gdImagePaletteToTrueColor()
    resulting in heap overflow CVE-2016-5767
  - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
    CVE-2016-5768


author: Remi Collet <rcollet@redhat.com> - 5.4.16-43
changelog:
  - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
  - gd: Signed Integer Overflow gd_io.c CVE-2016-10168


author: Remi Collet <rcollet@redhat.com> - 5.4.16-44
changelog:
  - fix php should provide php(httpd) #1215429
  - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
    default value is "yes", preserving previous behaviour
  - openssl: fix default_socket_timeout does not work with SSL #1378196


author: Dmitry Mishin <dim@virtuozzo.com> 7.0.22
changelog:
  - call custom action script after ioctl(PLOOP_IOC_PUSH_BACKUP_INIT) #PSBM-53862
  (Igor Sukhih <igor@virtuozzo.com>)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.28
changelog:
  - Redirect error messages to stderr #PSBM-88176
   - Report error on ioctl(PLOOP_IOC_PUSH_BACKUP_INIT) failure
   - Update copyrights ( #PSBM-58317 ) (Andrey Bondrov <abondrov@virtuozzo.com>)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.160
changelog:
  - ploop_balloon_complete(): use keep_intact = 2 to query state
   - ploop_balloon_relocation(): wait for PLOOP_IOC_RELOCBLKS completion
  \#PSBM-96143


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.25.20140113
changelog:
  - Read OS string from PRETTY_NAME instead of REDHAT_BUGZILLA_PRODUCT
    again, this time munging it to get rid of parts we want to hide.
    Related: #911553
    Resolves: #1306543


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
  - Fix color of text progress bar
    Related: #1167735
  - Fix escape key during media check of live image
    Resolves: #1167735


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.28.20140113
changelog:
  - Don't change file mode of boot.log.  Instead, remember what mode
    the admin set it to.
    Related: #916704
  - Don't unlink boot.log before opening it.
    Related: #916704


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.29.20140113
changelog:
  - Fall back to text mode if /dev/dri/card0 can't modeset
    Resolves: #1431141
  - Remove unnecessary post scripts that rpm -V output
    Resolves: #1266085


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-24
changelog:
  - Stop rejecting SCTP and DCCP in sepolicy.info
  - semanage: Replace bare except with specific one (#1598444)
  - semanage: Fix logger class definition (#1598444)
  - semanage: Stop rejecting aliases in semanage commands (#1544793)
  - sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
  - semanage: Stop logging loginRecords changes (#1294663)
  - Use file_contexts.local in fixfiles restore (#1559808)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-30
changelog:
  - semanage/seobject: Fix listing boolean values (#1391605)
  - sepolicy: Make policy files sorting more robust
  - semanage: Fix setting alternative policy store (#1558033)
  - semanage: Load a store policy and set the store SELinux policy root
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: import sepolicy only when it's needed
  - semanage: move valid_types initialisations to class constructors
  - semanage/seobject: Fix indentation issues
  - scripts/fixfiles: Do not fail on file_contexts.local (#1647714)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-31
changelog:
  - semanage: Start exporting "ibendport" and "ibpkey" entries (#1657196)
  - semanage: Do not show "None" levels when using a non-MLS policy (#1400482)
  - semanage: Include MCS/MLS range when exporting local customizations (#1400482)


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-33
changelog:
  - Only embed mime data for gray/rgb/cmyk colorspaces
  - if image decode map is identity
  - Resolves: #1636103


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-38
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688417


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-7
changelog:
  - Fixed haproxy with TLS
    Resolves: rhbz#1370455
  - Fixed documentation about canonical maps
    Resolves: rhbz#1381871
  - Fixed build with kernel-4.*
    Resolves: rhbz#1575658


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
  - fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
  - change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.3
changelog:
  - Workaround unimplemented API and features of PrlDisk_*, #PSBM-44036 (Maxim
  Perevedentsev <mperevedentsev@virtuozzo.com>)


author: Dmitry Mishin <dim@virtuozzo.com> 7.0.5
changelog:
  - bug #PSBM-63445 aka prl_backup_client: symbol lookup error (Sergey Galas
  <shrike@virtuozzo.com>)
   - Rebuild in 7.3 environment (Konstantin Volkov <wolf@virtuozzo.com>)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.43
changelog:
  - Do not touch dirty bitmaps created through libvirt during full backup
  \#PSBM-80868 (Konstantin B. Bukharov <bkb@virtuozzo.com>)


author: Igor Sukhih <igor@virtuozzo.com> 7.0.45
changelog:
  - PSBM-86470 Report backup block job error to client Add small event handler
  for  VIR_DOMAIN_EVENT_ID_BLOCK_JOB_ERROR_X  to print error message (bkb
  <bkb@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 7.0.2
changelog:
  - Add Makefile.version, see #PSBM-53215
   - Improve Makefile, see #PSBM-53215
   - Makefile cleanup, see #PSBM-53215


author: Jan Rybar <jrybar@redhat.com> 22.20-13
changelog:
  - fuser manpage: note about invisible other PIDs moved to RESTRICTIONS section
  - Resolves: rhbz#1400126


author: VZ Auto Builder <dsilakov@virtuozzo.com> 1.0.67.2
changelog:
  - Add targets.list file for vzbuild
   - Set vendor, product for disks (#VSTOR-15643) (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Wim Taymans <wtaymans@redhat.com> - 6.0-4
changelog:
  - Add more Requires to avoid testing multiple versions
  - enable hardened build
  - Fix missing %endif
  - Resolves: #1174548


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-7
changelog:
  - better autostart.patch, handle case were autospawn is disabled
    (or otherwise doesn't work, like for root user)
  - Resolves: #1269104


author: Wim Taymans <wtaymans@redhat.com> - 10.0-4
changelog:
  - Add support for usb audio in the Dell dock TB16
  - Add patches to improve default sinks
  - Resolves: #1457385


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-9
changelog:
  - Disable python-coverage tests on s390x
    Related: rhbz#1057626
  - Fix python-coverage tests (some disabled that are not working)
    Resolves: rhbz#1057626


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-14
changelog:
  - Update URLs to point to github.com since that's where upstream lives
    these days
    Resolves: rhbz#1502389


author: Russell Bryant <russellb@fedoraproject.org> - 2.0.0-2
changelog:
  - Remove unnecessary cleaning of the buildroot in %install section
  - Add %check section to run the unit tests
  - Rename package from python-sendfile to pysendfile


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 2.0.0-2
changelog:
  - Fix the license as the package has some Public Domain files
  - Ensure the .so files are not executable


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 2.0.0-3
changelog:
  - Add conflicts to py-bcrypt since they both provide a bcrypt python module
  - Fix macro that were using %{module} instead of %{modname}
  - In fact the .so files must be executable, so ensure they are such


author: Paul Howarth <paul@city-fan.org> - 2.5-1
changelog:
  - Update to 2.5
    - Added PKCS#1 encryption schemes (v1.5 and OAEP); we now have a decent,
      easy-to-use non-textbook RSA implementation
    - Added PKCS#1 signature schemes (v1.5 and PSS); v1.5 required some
      extensive changes to Hash modules to contain the algorithm-specific ASN.1
      OID, and to that end we now always have a (thin) Python module to hide the
      one in pure C
    - Added 2 standard Key Derivation Functions (PBKDF1 and PBKDF2)
    - Added export/import of RSA keys in OpenSSH and PKCS#8 formats
    - Added password-protected export/import of RSA keys (one old method for
      PKCS#8 PEM only)
    - Added ability to generate RSA key pairs with configurable public
      exponent e
    - Added ability to construct an RSA key pair even if only the private
      exponent d is known, and not p and q
    - Added SHA-2 C source code (fully from Lorenz Quack)
    - Unit tests for all the above
    - Updates to documentation (both inline and in Doc/pycrypt.rst)
    - Minor bug fixes (setup.py and tests)
  - Upstream no longer ships python-3-changes.txt


author: Paul Howarth <paul@city-fan.org> - 2.5-2
changelog:
  - Add upstream fixes for issues found by Dave Malcolm's experimental static
    analysis tool (#790584)


author: Paul Howarth <paul@city-fan.org> - 2.6-1
changelog:
  - Update to 2.6
    - Fix insecure ElGamal key generation (launchpad bug #985164, CVE-2012-2417)
    - Huge documentation cleanup
    - Added more tests, including test vectors from NIST 800-38A
    - Remove broken MODE_PGP, which never actually worked properly
    - A new mode, MODE_OPENPGP, has been added for people wishing to write
      OpenPGP implementations (see also launchpad bug #996814)
    - Fix: getPrime with invalid input causes Python to abort with fatal error
      (launchpad bug #988431)
    - Fix: Segfaults within error-handling paths (launchpad bug #934294)
    - Fix: Block ciphers allow empty string as IV (launchpad bug #997464)
    - Fix DevURandomRNG to work with Python3's new I/O stack
    - Remove automagic dependencies on libgmp and libmpir; let the caller
      disable them using args
    - Many other minor bug fixes and improvements
  - Drop upstream patches


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-65
changelog:
  - Fix hanging of all threads when trying to access an inaccessible NFS server.
  Resolves: rhbz#1520068


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-68
changelog:
  - Add Conflicts tag with old virtualenv versions due to new behaviour of
    httplib (patch 295)
  Resolves: rhbz#1483438


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-2
changelog:
  - Fixed reporting of more IPv4 addresses per interface
  Resolves: rhbz#1027685
  - Make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#1027678


author: Carl George <carl.george@rackspace.com> - 0.3.0-1
changelog:
  - Upstream 0.3.0
  - Add patch1 to fix GH#558
  - Update to new packaging guidelines
  - Add new test suite dependencies
  - Call nosetests directly


author: Carl George <carl.george@rackspace.com> - 0.3.0-4
changelog:
  - Specify minimum version of python-six
  - Change python3 control macros to a bcond macro
  - Add bcond macro to optionally require explicit python2 names


author: Carl George <carl.george@rackspace.com> - 1.0.0-1
changelog:
  - Latest upstream
  - Patch002 and Patch003 fixed upstream
  - Patch004 added to make test suite pass with old version of mimeparse


author: Jesse Keating <jkeating@redhat.com> - 0.5.4-1
changelog:
  - Upstream release to fix licensing issues
  - Use real upstream release instead of git checkout
  - No tests shipped in release, remove %check


author: Kevin Fenzi <kevin@scrye.com> 0.4.7-2
changelog:
  - Re-enable tests on secondary arches. Fixes #1252899
  - Applied patch to build on ppc64le. Fixes #1252900


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.7.5-2
changelog:
  - Removed unneeded rm -rf %{buildroot}.
  - Placed all files under the %{python_sitearch}.
  - Filtered provide of the .so file.


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
  - Add syncrepl_refreshdone() method to SyncreplConsumer class.
    Need by FreeIPA, subsequently accepted upstream.
  - Resolves: rhbz#1122495


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
  - Bugs fixed
  -
  -  * Crash when merging text nodes in element.remove().
  -  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
  - 3.0 (2012-10-08)
  - ================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * End-of-file handling was incorrect in iterparse() when reading from
  -   a low-level C file stream and failed in libxml2 2.9.0 due to its
  -   improved consistency checks.
  -
  - Other changes
  - -------------
  -
  - * The build no longer uses Cython by default unless the generated C files
  -   are missing.  To use Cython, pass the option "--with-cython".  To ignore
  -   the fatal build error when Cython is required but not available (e.g. to
  -   run special setup.py commands that do not actually run a build), pass
  -   "--without-cython".
  -
  -
  - 3.0beta1 (2012-09-26)
  - =====================
  -
  - Features added
  - --------------
  -
  - * Python level access to (optional) libxml2 memory debugging features
  -   to simplify debugging of memory leaks etc.
  -
  - Bugs fixed
  - ----------
  -
  - * Fix a memory leak in XPath by switching to Cython 0.17.1.
  -
  - * Some tests were adapted to work with PyPy.
  -
  - Other changes
  - -------------
  -
  - * The code was adapted to work with the upcoming libxml2 2.9.0 release.
  -
  -
  - 3.0alpha2 (2012-08-23)
  - ======================
  -
  - Features added
  - --------------
  -
  - * The .iter() method of elements now accepts tag arguments like "{*}name"
  -   to search for elements with a given local name in any namespace.  With
  -   this addition, all combinations of wildcards now work as expected:
  -   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
  -   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
  -   applies to the .getiterator(), .itersiblings(), .iterancestors(),
  -   .iterdescendants(), .iterchildren() and .itertext() methods,  the
  -   strip_attributes(), strip_elements() and strip_tags() functions as well
  -   as the iterparse() function.
  -
  - * C14N allows specifying the inclusive prefixes to be promoted to
  -   top-level during exclusive serialisation.
  -
  - Bugs fixed
  - ----------
  -
  - * Passing long Unicode strings into the feed() parser interface failed to
  -   read the entire string.
  -
  - Other changes
  - -------------
  -
  -
  - 3.0alpha1 (2012-07-31)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Initial support for building in PyPy (through cpyext).
  -
  - * DTD objects gained an API that allows read access to their
  -   declarations.
  -
  - * xpathgrep.py gained support for parsing line-by-line (e.g.
  -   from grep output) and for surrounding the output with a new root
  -   tag.
  -
  - * E-factory in lxml.builder accepts subtypes of known data
  -   types (such as string subtypes) when building elements around them.
  -
  - * Tree iteration and iterparse() with a selective tag
  -   argument supports passing a set of tags.  Tree nodes will be
  -   returned by the iterators if they match any of the tags.
  -
  - Bugs fixed
  - ----------
  -
  - * The .find*() methods in lxml.objectify no longer use XPath
  -   internally, which makes them faster in many cases (especially when
  -   short circuiting after a single or couple of elements) and fixes
  -   some behavioural differences compared to lxml.etree.  Note that
  -   this means that they no longer support arbitrary XPath expressions
  -   but only the subset that the ElementPath language supports.
  -   The previous implementation was also redundant with the normal
  -   XPath support, which can be used as a replacement.
  -
  - * el.find('*') could accidentally return a comment or processing
  -   instruction that happened to be in the wrong spot.  (Same for the
  -   other .find*() methods.)
  -
  - * The error logging is less intrusive and avoids a global setup where
  -   possible.
  -
  - * Fixed undefined names in html5lib parser.
  -
  - * xpathgrep.py did not work in Python 3.
  -
  - * Element.attrib.update() did not accept an attrib of
  -   another Element as parameter.
  -
  - * For subtypes of ElementBase that make the .text or .tail
  -   properties immutable (as in objectify, for example), inserting text
  -   when creating Elements through the E-Factory feature of the class
  -   constructor would fail with an exception, stating that the text
  -   cannot be modified.
  -
  - Other changes
  - --------------
  -
  - * The code base was overhauled to properly use 'const' where the API
  -   of libxml2 and libxslt requests it.  This also has an impact on the
  -   public C-API of lxml itself, as defined in etreepublic.pxd, as
  -   well as the provided declarations in the lxml/includes/ directory.
  -   Code that uses these declarations may have to be adapted.  On the
  -   plus side, this fixes several C compiler warnings, also for user
  -   code, thus making it easier to spot real problems again.
  -
  - * The functionality of "lxml.cssselect" was moved into a separate PyPI
  -   package called "cssselect".  To continue using it, you must install
  -   that package separately.  The "lxml.cssselect" module is still
  -   available and provides the same interface, provided the "cssselect"
  -   package can be imported at runtime.
  -
  - * Element attributes passed in as an attrib dict or as keyword
  -   arguments are now sorted by (namespaced) name before being created
  -   to make their order predictable for serialisation and iteration.
  -   Note that adding or deleting attributes afterwards does not take
  -   that order into account, i.e. setting a new attribute appends it
  -   after the existing ones.
  -
  - * Several classes that are for internal use only were removed
  -   from the lxml.etree module dict:
  -   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  -   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  -   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  -   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  -   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  -   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  -   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  -   _ParserSchemaValidationContext, _XPathContext,
  -   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
  -
  - * Several internal classes can no longer be inherited from:
  -   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  -   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  -   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  -   _XPathContext, _XSLTResolverContext, _XSLTContext,
  -   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
  - 3.0.1 (2012-10-14)
  - Bugs fixed
  -
  -  * LP#1065924: Element proxies could disappear during garbage collection
  -    in PyPy without proper cleanup.
  -  * GH#71: Failure to work with libxml2 2.6.x.
  -  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
  - 3.1.0 (2013-02-10)
  - ==================
  -
  - Features added
  - --------------
  -
  - * GH#89: lxml.html.clean allows overriding the set of attributes that it
  -   considers 'safe'.  Patch by Francis Devereux.
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
  -   a copy of the attributes as a plain Python dict.
  -
  - * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
  -   always used the first namespace mapping that was provided for each
  -   path expression instead of using the one that was actually passed
  -   in for the current run.
  -
  - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  -   without threading support.  Patch by Ulrich Seidl.
  -
  - Other changes
  - -------------
  -
  -
  - 3.1beta1 (2012-12-21)
  - =====================
  -
  - Features added
  - --------------
  -
  - * New build-time option ``--with-unicode-strings`` for Python 2 that
  -   makes the API always return Unicode strings for names and text
  -   instead of byte strings for plain ASCII content.
  -
  - * New incremental XML file writing API ``etree.xmlfile()``.
  -
  - * E factory in lxml.objectify is callable to simplify the creation of
  -   tags with non-identifier names without having to resort to getattr().
  -
  - Bugs fixed
  - ----------
  -
  - * When starting from a non-namespaced element in lxml.objectify, searching
  -   for a child without explicitly specifying a namespace incorrectly found
  -   namespaced elements with the requested local name, instead of restricting
  -   the search to non-namespaced children.
  -
  - * GH#85: Deprecation warnings were fixed for Python 3.x.
  -
  - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
  -
  - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``_ObjectifyElementMakerCaller`` was
  -   removed from the module API of lxml.objectify.
  -
  - * LP#1075622: lxml.builder is faster for adding text to elements with
  -   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
  - 3.2.0 (2013-04-28)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#690319: Leading whitespace could change the behaviour of the string
  -   parsing functions in ``lxml.html``.
  -
  - * LP#599318: The string parsing functions in ``lxml.html`` are more robust
  -   in the face of uncommon HTML content like framesets or missing body tags.
  -   Patch by Stefan Seelmann.
  -
  - * LP#712941: I/O errors while trying to access files with paths that
  -   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
  -   of properly reporting the ``IOError``.
  -
  - * LP#673205: Parsing from in-memory strings disabled network access in the
  -   default parser and made subsequent attempts to parse from a URL fail.
  -
  - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
  -   of overwriting the current value.
  -
  - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  -   allowed by the user provided whitelist.  Patch by Christine Koppelt.
  -
  - 3.1.2 (2013-04-12)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1136509: Passing attributes through the namespace-unaware API of
  -   the sax bridge (i.e. the ``handler.startElement()`` method) failed
  -   with a ``TypeError``.  Patch by Mike Bayer.
  -
  - * LP#1123074: Fix serialisation error in XSLT output when converting
  -   the result tree to a Unicode string.
  -
  - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
  -   by properly exported API function ``xmlBufUse()``.
  -
  - 3.1.1 (2013-03-29)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
  -   an AttributeError in Py3.
  -
  - * Illegal memory access during cleanup in incremental xmlfile writer.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``lxml.etree._BaseParser`` was removed
  -   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
  - 3.2.1 (2013-05-11)
  - ==================
  -
  - Features added
  - --------------
  -
  - * The methods ``apply_templates()`` and ``process_children()`` of XSLT
  -   extension elements have gained two new boolean options ``elements_only``
  -   and ``remove_blank_text`` that discard either all strings or
  -   whitespace-only strings from the result list.
  -
  - Bugs fixed
  - ----------
  -
  - * When moving Elements to another tree, the namespace cleanup mechanism
  -   no longer drops namespace prefixes from attributes for which it finds
  -   a default namespace declaration, to prevent them from appearing as
  -   unnamespaced attributes after serialisation.
  -
  - * Returning non-type objects from a custom class lookup method could lead
  -   to a crash.
  -
  - * Instantiating and using subtypes of Comments and ProcessingInstructions
  -   crashed.


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.7.0-3
changelog:
  - Update patch to build against system libs and add compress_fast method
  - Add BR for python[3]-nose
  - Run bundled test in %check


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.7.0-6
changelog:
  - Spec file cleanup
  - Add use of python_provide macro
  - Remove python 3 conditional build - always build
  - Use standard python packaging build and install macros


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Use new upstream URL
  - Drop upstreamed patch
  - Use PyPi source url with hash, for now


author: Dominik Mierzejewski <rpm@greysector.net> - 2.0.0-0.1.b4
changelog:
  - Update to 2.0.0b4
  - Drop upstreamed or obsolete patches
  - python-cycler >= 0.10.0 is required
  - move around Requires and BRs and sort more or less alphabetically
  - don't ship baseline images for tests (like Debian)
  - Require stix fonts only when they're not bundled
  - disable HTML doc building for bootstrapping 2.0.x series
  - relax image rendering tests tolerance due to freetype version differences
  - disable some failing tests on aarch64 for now


author: Adam Williamson <awilliam@redhat.com> - 2.0.0-0.7.rc2
changelog:
  - Update to 2.0.0rc2
  - Fix more big-endian integer issues
  - Apply the 'aarch64' test tolerance patch on ppc64 also (it's affected by same issues)
  - Tweak the 'i686' test tolerance patch a bit (some errors are gone, some new ones)
  - Re-enable test suite for all arches
  - Note a remaining quasi-random test issue that causes build to fail sometimes


author: John Dennis <jdennis@redhat.com> - 0.14-1
changelog:
  External Changes:
    -----------------

    The primary enhancements in this version is support of certifcate
    validation, OCSP support, and support for the certificate "Authority
    Information Access" extension.

    Enhanced certifcate validation including CA certs can be done via
    Certificate.verify() or Certificate.is_ca_cert(). When cert
    validation fails you can now obtain diagnostic information as to why
    the cert failed to validate. This is encapsulated in the
    CertVerifyLog class which is a iterable collection of
    CertVerifyLogNode objects. Most people will probablby just print the
    string representation of the returned CertVerifyLog object. Cert
    validation logging is handled by the Certificate.verify() method.
    Support has also been added for the various key usage and cert type
    entities which feature prominently during cert validation.


    * Certificate() constructor signature changed from

      Certificate(data=None, der_is_signed=True)

      to

      Certificate(data, certdb=cert_get_default_certdb(), perm=False, nickname=None)

      This change was necessary because all certs should be added to the
      NSS temporary database when they are loaded, but earlier code
      failed to to that. It's is not likely that an previous code was
      failing to pass initialization data or the der_is_signed flag so
      this change should be backwards compatible.

    * Fix bug #922247, PKCS12Decoder.database_import() method. Importing into
      a NSS database would sometimes fail or segfault.

    * Error codes and descriptions were updated from upstream NSPR & NSS.

    * The password callback did not allow for breaking out of a password
      prompting loop, now if None is returned from the password callback
      the password prompting is terminated.

    * nss.nss_shutdown_context now called from InitContext destructor,
      this assures the context is shutdown even if the programmer forgot
      to. It's still best to explicitly shut it down, this is just
      failsafe.

    * Support was added for shutdown callbacks.

    * The following classes were added:
      - nss.CertVerifyLogNode
      - nss.CertVerifyLog
      - error.CertVerifyError (exception)
      - nss.AuthorityInfoAccess
      - nss.AuthorityInfoAccesses


    * The following class methods were added:
      - nss.Certificate.is_ca_cert
      - nss.Certificate.verify
      - nss.Certificate.verify_with_log
      - nss.Certificate.get_cert_chain
      - nss.Certificate.check_ocsp_status
      - nss.PK11Slot.list_certs
      - nss.CertVerifyLogNode.format_lines
      - nss.CertVerifyLog.format_lines
      - nss.CRLDistributionPts.format_lines

    * The following class properties were added:
      - nss.CertVerifyLogNode.certificate
      - nss.CertVerifyLogNode.error
      - nss.CertVerifyLogNode.depth
      - nss.CertVerifyLog.count

    * The following module functions were added:
      - nss.x509_cert_type
      - nss.key_usage_flags
      - nss.list_certs
      - nss.find_certs_from_email_addr
      - nss.find_certs_from_nickname
      - nss.nss_get_version
      - nss.nss_version_check
      - nss.set_shutdown_callback
      - nss.get_use_pkix_for_validation
      - nss.set_use_pkix_for_validation
      - nss.enable_ocsp_checking
      - nss.disable_ocsp_checking
      - nss.set_ocsp_cache_settings
      - nss.set_ocsp_failure_mode
      - nss.set_ocsp_timeout
      - nss.clear_ocsp_cache
      - nss.set_ocsp_default_responder
      - nss.enable_ocsp_default_responder
      - nss.disable_ocsp_default_responder

    * The following files were added:
        src/py_traceback.h
        doc/examples/verify_cert.py
        test/test_misc.py

    * The following constants were added:
      - nss.KU_DIGITAL_SIGNATURE
      - nss.KU_NON_REPUDIATION
      - nss.KU_KEY_ENCIPHERMENT
      - nss.KU_DATA_ENCIPHERMENT
      - nss.KU_KEY_AGREEMENT
      - nss.KU_KEY_CERT_SIGN
      - nss.KU_CRL_SIGN
      - nss.KU_ENCIPHER_ONLY
      - nss.KU_ALL
      - nss.KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION
      - nss.KU_KEY_AGREEMENT_OR_ENCIPHERMENT
      - nss.KU_NS_GOVT_APPROVED
      - nss.PK11CertListUnique
      - nss.PK11CertListUser
      - nss.PK11CertListRootUnique
      - nss.PK11CertListCA
      - nss.PK11CertListCAUnique
      - nss.PK11CertListUserUnique
      - nss.PK11CertListAll
      - nss.certUsageSSLClient
      - nss.certUsageSSLServer
      - nss.certUsageSSLServerWithStepUp
      - nss.certUsageSSLCA
      - nss.certUsageEmailSigner
      - nss.certUsageEmailRecipient
      - nss.certUsageObjectSigner
      - nss.certUsageUserCertImport
      - nss.certUsageVerifyCA
      - nss.certUsageProtectedObjectSigner
      - nss.certUsageStatusResponder
      - nss.certUsageAnyCA
      - nss.ocspMode_FailureIsVerificationFailure
      - nss.ocspMode_FailureIsNotAVerificationFailure

    * cert_dump.py extended to print NS_CERT_TYPE_EXTENSION

    * cert_usage_flags, nss_init_flags now support optional repr_kind parameter

    Internal Changes:
    -----------------

    * Reimplement exception handling
      - NSPRError is now derived from StandardException instead of
        EnvironmentError. It was never correct to derive from
        EnvironmentError but was difficult to implement a new subclassed
        exception with it's own attributes, using EnvironmentError had
        been expedient.

      - NSPRError now derived from StandardException, provides:
        * errno (numeric error code)
        * strerror (error description associated with error code)
        * error_message (optional detailed message)
        * error_code (alias for errno)
        * error_desc (alias for strerror)

      - CertVerifyError derived from NSPRError, extends with:
        * usages (bitmask of returned usages)
        * log (CertVerifyLog object)

    * Expose error lookup to sibling modules

    * Use macros for bitmask_to_list functions to reduce code
      duplication and centralize logic.

    * Add repr_kind parameter to cert_trust_flags_str()

    * Add support for repr_kind AsEnumName to bitstring table lookup.

    * Add cert_type_bitstr_to_tuple() lookup function

    * Add PRTimeConvert(), used to convert Python time values
      to PRTime, centralizes conversion logic, reduces duplication

    * Add UTF8OrNoneConvert to better handle unicode parameters which
      are optional.

    * Add Certificate_summary_format_lines() utility to generate
      concise certificate identification info for output.

    * Certificate_new_from_CERTCertificate now takes add_reference parameter
      to properly reference count certs, should fix shutdown busy problems.

    * Add print_traceback(), print_cert() debugging support.


author: John Dennis <jdennis@redhat.com> - 0.14.0-2
changelog:
  - resolves: bug#1002589
  - resolves: bug#1003979

  - Rewrite setup_certs.py. No longer behaves like an expect script
    which was fragile. By default now creates a sql style database.
  - By default all examples & tests use new sql format for NSS database
  - db-name is now used instead of dbdir to provide distinction between
    the database directory and it's scheme (e.g. 'sql:')
  - all examples and tests now default db-name to 'sql:pki'
  - replaced legacy getopt & optparse command line argument handling
    with modern argparse.


author: John Dennis <jdennis@redhat.com> - 0.14.0-3
changelog:
  - resolves: bug#1003979
  - In coordination with QE with regards to bz 1019934 it was requested
    the unittest patches be enhanced with a more robust version of
    test_pkcs12, no actual bug, just better testing.


author: John Dennis <jdennis@redhat.com> - 0.15.0-1
changelog:
  - resolves: bug#1109769 rebase to 0.15.0
  - includes fixes for 1087031 and 1060314
    See doc/Changelog for details


author: John Dennis <jdennis@redhat.com> - 0.16.0-1
changelog:
  - resolves: bug#1155703 - Add API call for SSL_VersionRangeSet (rebase)
    rebased to 0.16.0
  - The primary enhancements in this version is adding support for the
    setting trust attributes on a Certificate, the SSL version range API,
    information on the SSL cipher suites and information on the SSL connection.

    * The following module functions were added:

      - ssl.get_ssl_version_from_major_minor
      - ssl.get_default_ssl_version_range
      - ssl.get_supported_ssl_version_range
      - ssl.set_default_ssl_version_range
      - ssl.ssl_library_version_from_name
      - ssl.ssl_library_version_name
      - ssl.get_cipher_suite_info
      - ssl.ssl_cipher_suite_name
      - ssl.ssl_cipher_suite_from_name

    * The following deprecated module functions were removed:

      - ssl.nssinit
      - ssl.nss_ini
      - ssl.nss_shutdown

    * The following classes were added:

      - SSLCipherSuiteInfo
      - SSLChannelInfo

    * The following class methods were added:

      - Certificate.trust_flags
      - Certificate.set_trust_attributes

      - SSLSocket.set_ssl_version_range
      - SSLSocket.get_ssl_version_range
      - SSLSocket.get_ssl_channel_info
      - SSLSocket.get_negotiated_host
      - SSLSocket.connection_info_format_lines
      - SSLSocket.connection_info_format
      - SSLSocket.connection_info_str
  	
      - SSLCipherSuiteInfo.format_lines
      - SSLCipherSuiteInfo.format

      - SSLChannelInfo.format_lines
      - SSLChannelInfo.format

    * The following class properties were added:

      - Certificate.ssl_trust_flags
      - Certificate.email_trust_flags
      - Certificate.signing_trust_flags

      - SSLCipherSuiteInfo.cipher_suite
      - SSLCipherSuiteInfo.cipher_suite_name
      - SSLCipherSuiteInfo.auth_algorithm
      - SSLCipherSuiteInfo.auth_algorithm_name
      - SSLCipherSuiteInfo.kea_type
      - SSLCipherSuiteInfo.kea_type_name
      - SSLCipherSuiteInfo.symmetric_cipher
      - SSLCipherSuiteInfo.symmetric_cipher_name
      - SSLCipherSuiteInfo.symmetric_key_bits
      - SSLCipherSuiteInfo.symmetric_key_space
      - SSLCipherSuiteInfo.effective_key_bits
      - SSLCipherSuiteInfo.mac_algorithm
      - SSLCipherSuiteInfo.mac_algorithm_name
      - SSLCipherSuiteInfo.mac_bits
      - SSLCipherSuiteInfo.is_fips
      - SSLCipherSuiteInfo.is_exportable
      - SSLCipherSuiteInfo.is_nonstandard

      - SSLChannelInfo.protocol_version
      - SSLChannelInfo.protocol_version_str
      - SSLChannelInfo.protocol_version_enum
      - SSLChannelInfo.major_protocol_version
      - SSLChannelInfo.minor_protocol_version
      - SSLChannelInfo.cipher_suite
      - SSLChannelInfo.auth_key_bits
      - SSLChannelInfo.kea_key_bits
      - SSLChannelInfo.creation_time
      - SSLChannelInfo.creation_time_utc
      - SSLChannelInfo.last_access_time
      - SSLChannelInfo.last_access_time_utc
      - SSLChannelInfo.expiration_time
      - SSLChannelInfo.expiration_time_utc
      - SSLChannelInfo.compression_method
      - SSLChannelInfo.compression_method_name
      - SSLChannelInfo.session_id

    * The following files were added:

      - doc/examples/cert_trust.py
      - doc/examples/ssl_version_range.py

    * The following constants were added:
      - nss.CERTDB_TERMINAL_RECORD
      - nss.CERTDB_VALID_PEER
      - nss.CERTDB_TRUSTED
      - nss.CERTDB_SEND_WARN
      - nss.CERTDB_VALID_CA
      - nss.CERTDB_TRUSTED_CA
      - nss.CERTDB_NS_TRUSTED_CA
      - nss.CERTDB_USER
      - nss.CERTDB_TRUSTED_CLIENT_CA
      - nss.CERTDB_GOVT_APPROVED_CA
      - ssl.SRTP_AES128_CM_HMAC_SHA1_32
      - ssl.SRTP_AES128_CM_HMAC_SHA1_80
      - ssl.SRTP_NULL_HMAC_SHA1_32
      - ssl.SRTP_NULL_HMAC_SHA1_80
      - ssl.SSL_CK_DES_192_EDE3_CBC_WITH_MD5
      - ssl.SSL_CK_DES_64_CBC_WITH_MD5
      - ssl.SSL_CK_IDEA_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC4_128_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC4_128_WITH_MD5
      - ssl.SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_NULL_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_RC4_128_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_WITH_RC4_128_MD5
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_EMPTY_RENEGOTIATION_INFO_SCSV
      - ssl.TLS_FALLBACK_SCSV
      - ssl.TLS_NULL_WITH_NULL_NULL
      - ssl.TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
      - ssl.TLS_RSA_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_RSA_WITH_IDEA_CBC_SHA
      - ssl.TLS_RSA_WITH_NULL_MD5
      - ssl.TLS_RSA_WITH_NULL_SHA
      - ssl.TLS_RSA_WITH_NULL_SHA256
      - ssl.TLS_RSA_WITH_RC4_128_MD5
      - ssl.TLS_RSA_WITH_RC4_128_SHA
      - ssl.TLS_RSA_WITH_SEED_CBC_SHA
      - ssl.SSL_VARIANT_DATAGRAM
      - ssl.SSL_VARIANT_STREAM
      - ssl.SSL_LIBRARY_VERSION_2
      - ssl.SSL_LIBRARY_VERSION_3_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_1
      - ssl.SSL_LIBRARY_VERSION_TLS_1_2
      - ssl.SSL_LIBRARY_VERSION_TLS_1_3
      - ssl.ssl2
      - ssl.ssl3
      - ssl.tls1.0
      - ssl.tls1.1
      - ssl.tls1.2
      - ssl.tls1.3

     * The following methods were missing thread locks, this has been fixed.

       - nss.nss_initialize
       - nss.nss_init_context
       - nss.nss_shutdown_context


author: John Dennis <jdennis@redhat.com> - 0.16.0-3
changelog:
  - Resolves: #1225212
    Reads from file like objects actually only worked for file objects
  - Resolves: #1179573
    python-nss-doc package is missing the run_tests script
  - Resolves: #1194349
    test_pkcs12.py does not works in FIPS mode


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.0-3
changelog:
  - Python 2 binary package renamed to python2-pyeclib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: John Kacur <jkacur@redhat.com> - 0.4-5
changelog:
  - Add man pages for pchrt and ptaskset
  - Fix and update usage messages for pchrt and ptaskset
  - Resolves:rhbz#948381


author: John Kacur <jkacur@redhat.com> - 0.4-6
changelog:
  - python-schedutils-Update-URL-in-python-schedutils.sp.patch
  - schedutils.c-added-support-for-SCHED_DEADLINE.patch
  Resolves: rhbz#1298388


author: Konstantin Volkov <wolf@virtuozzo.com> - 3.2.7-1.2
changelog:
  - Added restore_all_signals and chroot_path Popen options to avoid
    most of anaconda PyOS_AfterFork() calls, see #PSBM-76668


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.2-5
changelog:
  - Update provides filter
  - Ship python2 package
  - Use %python3_pkgversion for EPEL7 compatibility
  - Use current python macros


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 15.1.0-1
changelog:
  - Update to 15.1.0 (RHBZ#1187921,RHBZ#1192707)
  - Require python-service-identity (RHBZ#1119067)
  - Obsolete python-twisted-core-doc (RHBZ#1187025)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 16.1.1-3
changelog:
  - Drop tkinter dependency (only required for tkconch)
  - Use python3 conditionals
  - Move BR under the proper subpackage


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.10.10-4
changelog:
  - Python 2 binary package renamed to python2-wrapt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Julien Enseme <jujens@jujens.eu> - 0.6.2-5
changelog:
  - Fix tests in mock
  - Use %py2_build, %py3build, %py2_install and %py2_install
  - Make a python2 subpackage


author: Orion Poplawski <orion@cora.nwra.com> - 3.4.3-4
changelog:
  - Make relocating Python by changing _prefix actually work
  - Disable test_gdb on aarch64 (rhbz#1196181), it joins all other non x86 arches


author: Tomas Orsava <torsava@redhat.com> - 3.4.3-5
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1348973, rhbz#1348982


author: Charalampos Stratakis <cstratak@redhat.com> 3.4.5-4
changelog:
  - Do not exclude bundled setuptools and pip from the installation
    when rewheel is disabled(rhbz#1263057)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-5
changelog:
  - Remove the python36-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3-3 to python36-devel (will come into effect once python36
    is the main Python 3 version in EPEL 7)
  - Move /usr/bin/idle and idlelib to python36-idle
  - Provide python36-tools from python36-idle


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-6
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommending the main package from libs is not possible since rich
    dependencies are not available in EPEL7
  Resolves: rhbz#1547131


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.8
changelog:
  - DROP: block: check for read-only on copy-on-read option #VSTOR-10294
  - DROP: qmp: add x-block-set-copy-on-read command #VSTOR-10294
  - DROP: block/stream: refactor stream_run: drop goto
  - DROP: block/stream: use BDRV_REQ_FAKE_READ
  - DROP: block/stream: use aio task pool
  - DROP: block: add trace points for copy-on-read enable/disable
  - block/stream: refactor stream_run: drop goto
  - block/stream: use BDRV_REQ_FAKE_READ
  - block/stream: use aio task pool
  - block: add trace points for copy-on-read enable/disable


author: Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.12
changelog:
  - block: move bdrv_can_store_new_dirty_bitmap to block/dirty-bitmap.c
  - block/dirty-bitmap: return int from bdrv_remove_persistent_dirty_bitmap
  - block/qcow2: proper locking on bitmap add/remove paths


author: Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.14
changelog:
  - block/qcow2-bitmap: fix bitmap migration
  - iotests: add new test cases to bitmap migration
  - blockdev: blockdev-change-medium: support change bs in non-empty blk
  - blockdev: save dirty bitmaps on qmp blockdev-change-medium #PSBM-99765


author: Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.14.2
changelog:
  * Sat Dec 07 2019 Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.14.1
  - block: improve tracked_request_report_long to show node
  - block/qcow2-bitmap: fix crash bug in qcow2_co_remove_persistent_dirty_bitmap #VSTOR-29045
  - block/qcow2-bitmap: don't load inconsistent bitmaps #PSBM-100079
  - migration/dirty-bitmaps: change bitmap enumeration method #PSBM-100093
  - io/channel: track long write to io channel
  - nbd: allow reconnect on open, with corresponding new options #VSTOR-28844
  - iotests: add 1000002 to test reconnect on nbd open #VSTOR-28844


author: Denis V. Lunev <den@openvz.org> - vz-2.12.0-33.vz7.14.4
changelog:
  - DROP: migration/dirty-bitmaps: change bitmap enumeration method #PSBM-100093
  - DROP: block/qcow2-bitmap: remove inconsistent bitmaps before loading
  - block/qcow2-bitmap: remove inconsistent bitmaps before loading
  - migration/block-dirty-bitmap: fix bdrv_next loop #PSBM-100093


author: Doug Ledford <dledford@redhat.com> - 0.4.6-6
changelog:
  - Fix the fact that qperf was using the wrong PF_RDS define now that RDS
    is integrated upstream and its assigned number is no longer temporary


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.17.0-8
changelog:
  - Python 2 binary package renamed to python2-qpid-proton
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Darryl L. Pierce <dpierce@redhat.com> - 0.28-28
changelog:
  - Removed qpidtoollibs from python-qpid-qmf.
  - * This will be provides by the qpid-tools package in future.


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-18
changelog:
  - Distinguish between none quota limits and no allocated resources in quota(1)
    tool (bug #1601109)


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Resolves: rhbz#1515647
  - Resolves: rhbz#1517208
  - Resolves: rhbz#1523201
  - Resolves: rhbz#1541751


author: Jarod Wilson <jarod@redhat.com> 17.1-3
changelog:
  - Grab latest stable-v17 fixes from upstream
  - Fix Provides/Obsoletes on removed libibcm
  - Fix Provides/Obsoletes on removed libehca
  - Straighten out SW parsing feature support for DPDK
  - Fix mlx5 rate-limiting support
  - Resolves: rhbz#1588096
  - Resovles: rhbz#1534856
  - Resolves: rhbz#1589525


author: Jarod Wilson <jarod@redhat.com> 17.2-2
changelog:
  - Restore SysV Initscripts ib ifup and ifdown helpers
  - Adjust MTU limit for IPoIB in datagram mode via ifup-ib
  - Resolves: rhbz#1593426
  - Resolves: rhbz#1593334


author: Jarod Wilson <jarod@redhat.com> 22-1
changelog:
  - Rebase to upstream rdma-core v22
  - Resolves: rhbz#1641921
  - Add mlx5 IB Device Memory support (MEMIC)
  - Resolves: rhbz#1644697
  - Add mlx5 Tunnel protocol RX decap/encap offload
  - Resolves: rhbz#1644709
  - Add mlx5 Tunnel protocol TX decap/encap offload
  - Resolves: rhbz#1644778
  - Add support for mlx5 infiniband flow counters
  - Resolves: rhbz#1644714
  - Add mlx5 DEVX interface
  - Resolves: rhbz#1644722
  - Add libbnxt_re support for SRQ
  - Resolves: rhbz#1570393


author: Jarod Wilson <jarod@redhat.com> 22.1-1
changelog:
  - Update to upstream v22.1 release with stable-v22 branch fixes
  - Add support for Broadcom 57500 RoCE adapter
  - Resolves: rhbz#1678274


author: Konstantin Volkov <wolf@virtuozzo.com> 0.5
changelog:
  - Removed obsolete LICENSE and ChangeLog files. Fixed copyrights. Fixed help
  file. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - Added l18n files (Denis Silakov <dsilakov@virtuozzo.com>)
   - Fixed spec-file. Added intltool build requirement. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Removed obsolete LICENSE and ChangeLog files. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Added l10n facility (Denis Silakov <dsilakov@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.6
changelog:
  - Fix charset (Denis Silakov <dsilakov@virtuozzo.com>)
   - Added Russian l10n (Denis Silakov <dsilakov@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 7.52
changelog:
  - update: Do not report an error if there are no RK patches for the kernel
  (Evgenii Shatokhin <eshatokhin@virtuozzo.com>)
   - A few fixes for removal of "native" kpatch (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>)
   - Removed unused variable (Evgenii Shatokhin <eshatokhin@virtuozzo.com>)
   - Restored the output of package version and release in "readykernel info"
  (Evgenii Shatokhin <eshatokhin@virtuozzo.com>)
   - Do not change $PATCHPACKAGE in update_patches() (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>)
   - Do not call load_replace on update (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>)
   - Fix pre requires
   - Use pre script
   - Update to 7.48
   - Allow installation upon standalone readykernel-scan script
   - Ship readykernel-scan
   - Rebuild deb


author: Denis Silakov <dsilakov@virtuozzo.com> 7.57
changelog:
  - Do not try to install updates for the not installed kernels (Evgenii
  Shatokhin <eshatokhin@virtuozzo.com>) (#PSBM-82714)
   - Make sure 'readykernel' uses the correct path in sysfs (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>) (#PSBM-83096)


author: Denis Silakov <denis.silakov@rosalab.ru> 7.58
changelog:
  - Do not try to access readykernel.com (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>) (#PSBM-86454)
   - Fix checking if the packages are available (Evgenii Shatokhin
  <eshatokhin@virtuozzo.com>) (#PSBM-86454)
   - Do not run 'yum clean' for each kernel when looking for RK patches (Evgenii
  Shatokhin <eshatokhin@virtuozzo.com>) (#PSBM-86454)


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
  - Resolves: rhbz#1258745
  - Resolves: rhbz#1258488
  - Resolves: rhbz#1267563
  - Resolves: rhbz#1293390
  - Resolves: rhbz#1273924
  - Resolves: rhbz#1274368
  - Resolves: rhbz#1291924


author: Sumit Bose <sbose@redhat.com> - 0.16.1-10
changelog:
  Use current Samba options and read NetBIOS name from keytab
  - Resolves: rhbz#1484072
  - Resolves: rhbz#1370457


author: David Shea <dshea@redhat.com> - 0.8.9-1
changelog:
  - backup old product id certificates before installation of new ones (jdornak)
    Resolves: rhbz#1148783


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Robert Kuska <rkuska@redhat.com> - 3.4.2-8
changelog:
  - Add patch for unrestricted decompression in XMLRPC CVE-2013-1753 
  - Add patch to enable HTTPS verify by default CVE-2014-9365
  - Enable set -e inside scl enable while calling tests
  - Skip failing test_readline test
  Resolves: rhbz#1187793 
  Resolves: rhbz#1187795


author: Slavek Kabrda <bkabrda@redhat.com> - 3.4.2-9
changelog:
  - Build debug build with -O1 to improve GDB backtraces
  Resolves: rhbz#1204169
  - Fix tempfile.NamedTemporaryFile being closed while iterating
  Resolves: rhbz#1203236


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-10
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-11
changelog:
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in http.client (upstream patch)
  Resolves: rhbz#1346360


author: Tomas Orsava <torsava@redhat.com> - 3.4.2-12
changelog:
  - Replace 512 bit dh key with a 1024 bit one (upstream change)
  - Python upstream issue #24985: https://bugs.python.org/issue24985
    python SSL test fails due to minimum key size being increased in OpenSSL
  Resolves: rhbz#1356506


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-1
changelog:
  - Update to 3.1.0 (#1571015)
  - Drop Python 2 subpackage (upstream does not support Python 2 any more)


author: Miro Hrončok <mhroncok@redhat.com> - 3.5.0-2
changelog:
  - Subpackage python2-cinderclient has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Howarth <paul@city-fan.org> - 2.6.1-22
changelog:
  - When creating ElGamal keys, the generator wasn't a square residue: ElGamal
    encryption done with those keys cannot be secure under the DDH assumption
    https://bugzilla.redhat.com/show_bug.cgi?id=1542313 (CVE-2018-6594)
    https://github.com/TElgamal/attack-on-pycrypto-elgamal
    https://github.com/Legrandin/pycryptodome/issues/90
    https://github.com/dlitz/pycrypto/issues/253
    https://github.com/dlitz/pycrypto/pull/256


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.2-1
changelog:
  - Update to Python 3.6.2
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Replace the "--verbose" flag with "-wW" and add "--slowest" flag
  Resolves: rhbz#1463715


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-2
changelog:
  - Hard-code RUNPATH (not RPATH) into the executables and C libraries so that
    Python can be run without first running scl enable
  Resolves: rhbz#1479406


author: Carl George <carl@george.computer> - 1.6.1-1
changelog:
  - Latest upstream
  - Add patch0 to remove pytest-{cov,runner} deps
  - Share doc and license dir between subpackages
  - Enable EPEL PY3 build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.6-5
changelog:
  - Python 2 binary package renamed to python2-mako
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-9
changelog:
  - Make python-beaker an optional dependency
  - Add missing python_provide for python3-mako
  - Conditionalize the Python 2 subpackage
  - Modernize the specfile


author: Miro Hrončok <mhroncok@redhat.com> - 6.7.0-2
changelog:
  - Subpackages python2-neutronclient, python2-neutronclient-tests have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.0-3
changelog:
  - Python 2 binary package renamed to python2-os-testr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Carl George <carl@george.computer> - 0.8.0-8
changelog:
  - Remove all shebangs to prevent incorrect dependencies rhbz#1391119
  - Remove python3-os-testr-doc subpackage (duplicate content of python-os-testr-doc)


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.0-10
changelog:
  - Subpackage python2-os-testr has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-6
changelog:
  - Subpackage python2-osprofiler has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Fix a security flaw (GH#1175, CVE-2018-7750) in Paramiko's server mode
      (this does not impact client use) where authentication status was not
      checked before processing channel-open and other requests typically only
      sent after authenticating
    - Ed25519 auth key decryption raised an unexpected exception when given a
      unicode password string (typical in python 3) (GH#1039)


author: Paul Howarth <paul@city-fan.org> - 2.4.2-1
changelog:
  - Update to 2.4.2
    - Fix exploit (GH#1283, CVE-2018-1000805) in Paramiko’s server mode (not
      client mode) where hostile clients could trick the server into thinking
      they were authenticated without actually submitting valid authentication
    - Modify protocol message handling such that Transport does not respond to
      MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED; this behavior probably
      didn’t cause any outright errors, but it doesn’t seem to conform to the
      RFCs and could cause (non-infinite) feedback loops in some scenarios
      (usually those involving Paramiko on both ends)
    - Add *.pub files to the MANIFEST so distributed source packages contain
      some necessary test assets (GH#1262)
  - Test suite now requires mock ≥ 2.0.0


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 2.0.3-1
changelog:
  - Update to 2.0.3 (#1316101).
  - Use the python_provides macro and rename python-paste to python2-paste.
  - Drop conditionals on building python3-paste.
  - Use the license macro.
  - Dropped py3 fixes patch, since it is included in the upstream 2.0.3 release.
  - Update URL, since old one doesn't load anymore.
  - Reorganize spec file.
  - Don't rm the buildroot before install.
  - Drop some .orig files.
  - Add BuildRequires on six.
  - Drop unneeded clean section.
  - Drop unneeded defattr in the files sections.
  - Don't use * to select files in the Python sitelib, list them explicitly.


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-4
changelog:
  - Subpackage python2-prometheus_client has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/06/17/psycopg-275-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-4
changelog:
  - drop python2* on f30+ (rhbz#1634973)
  - use proper compiler/linker flags (rhbz#1631713)
  - correct the (build)requires


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-5
changelog:
  - prepare --without=debugrpms option (rhbz#1635166)
  - get the python2 packages back for a while (rhbz#1634973)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-2
changelog:
  - Rebuilt for Python 3.7
  - Prolong the deadline for tests on s390x
  - Don't ignore the test results on arm, do the same as on s390x


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.4.1-3
changelog:
  - Python 2 binary package renamed to python2-routes
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.10-4
changelog:
  - Python 2 binary package renamed to python2-setproctitle
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.10-11
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.32.12-4
changelog:
  - Python 2 binary package renamed to python2-sqlalchemy-utils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.0.20-10
changelog:
  - Python 2 binary package renamed to python2-testrepository
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Robert-André Mauchin <zebob.m@gmail.com> - 18.4.0-1
changelog:
  - Update to 18.4.0
  - Default binaries to Python 3
  - Drop old Obsoletes/Provides
  - Refresh BR
  - Remove useless macros
  - Use python_enable_dependency_generator


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.7
changelog:
  - Manage DROP rules in filter table VZ_IN_TAIL is always the last one in INPUT
  chain It contains necessary rules for conntrack and "drop all" as a default
  action. We add this chain to be sure that such rules are not missed, for example
  when user calls 'iptables -F'. If admin wants to allow all traffic he should
  exec 'iptables -I INPUT -j ACCEPT' instead of 'iptables -F' VSTOR-22834 (Mikhail
  Feoktistov <mfeoktistov@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.9
changelog:
  - Fix wrong order of source/destination parameters in raw table for
  PREROUTING(incoming) we must use ipaddress of the local interface in
  'destination' parameter for OUTPUT in 'source' parameter (Mikhail Feoktistov
  <mfeoktistov@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.10
changelog:
  - Do not track only those packets for private network that goes to/from the
  same subnet. Because only for this case we have 'allow all traffic' rule The
  host may send DNS request to the remote DNS server to the different subnet in
  this case we must track this request to be able to accept responce. VSTOR-27174
  (Mikhail Feoktistov <mfeoktistov@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.0.33
changelog:
  - Add CUSTOM chain This chain is always the first one in INPUT chain We add it
  for internal use. All rules in this chain are managed by admin. VSTOR-3513


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.12
changelog:
  - Add CUSTOM chain This chain is always the first one in INPUT chain We add it
  for internal use. All rules in this chain are managed by admin. VSTOR-3513
  (Mikhail Feoktistov <mfeoktistov@virtuozzo.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.13
changelog:
  - [VSTOR-26799] improve pick_files - using target with file path, not only
  directory (Maxim.Malov <maxim.malov@acronis.com>)


author: Maxim Nestratov <mnestratov@virtuozzo.com> 1.1.14
changelog:
  - Convert dict key iterator to a list We need this because we may delete a key
  inside the loop Fix RuntimeError: dictionary changed size during iteration
  TTASK-30740 (Mikhail Feoktistov <mfeoktistov@virtuozzo.com>)


author: John Eckersberg <eck@redhat.com> - 4.2-0.1.b4
changelog:
  - New upstream beta release 4.2b4
  - Replaces 4.1 which was retracted upstream
    See https://mail.python.org/pipermail/python-announce-list/2018-June/011977.html
  - Add BuildRequires for gcc
    See https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
  - Add popt-based options --setcaps and --restore (#1550745)
  - Improve hardlink handling in disk space calculation (#1491786)
  - Remove perl dependencies that are provided in the same file (#1570181)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
  - New version
    Resolves: rhbz#966639
  - Updated and defuzzified patches
  - Still use lua-5.1 (fedoras < f20)


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
  - resolves: RHBZ #737244 #896583 #947213
  - migrate from xinetd to systemd configuration
  - close pam session correctly when client does not ask for separate error channel
  - fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
  - unit files must not be marked as config files
  - fix handling of non-native IPv6 connections via AF_INET6 socket


author: Michal Ruprich <mruprich@redhat.com> - 0.17-78
changelog:
  - Resolves: #1502657 - Copying remote file to local dir fails with "rcp: protocol screwup: expected control record"
  - Resolves: #1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd
  - Resolves: #1477207 - rlogin killed when changing run level
  - Resolves: #1503112 - rexecd Could not allocate space for cmdbuf
  - Resolves: #1505226 - have a proposed patch for rsh-0.17-76.el7_1.1


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-32
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with no log on EACCES
    resolves: rhbz#1531295
  - removed now needless build-deps


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-33
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with extended symlink watching
    resolves: rhbz#1531295
  - updated mmkubernetes patch to accept dots in pod name
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-35
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing memory corruption in omfwd module
    resolves: rhbz#1632659
  - added patch fixing imfile sopping monitor after rotation
    resolves: rhbz#1649250
  - added patch addressing imptcp CVE-2018-16881
    resolves: rhbz#1658288


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-36
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing mmkubernetes halt after pod deletition
    resolves: rhbz#1622767


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-37
changelog:
  RHEL 7.7 ERRATUM
  - edited patch fixing mmkubernetes halt after pod deletition
    (covscan found an issue in previous version)
    resolves: rhbz#1622767
  - added patch stopping flooding logs with journald errors
    resolves: rhbz#1632211
  - added patch stopping flooding logs with symlink false-positives
    resolves: rhbz#1685901
  - added patch stopping memory leak when processing internal msgs
    resolves: rhbz#1666365
  - added documentation patch with info about CRI-O to mmkubernetes
    resolves: rhbz#1625935


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41.1
changelog:
  RHEL 7.7.z ERRATUM
  - added patch resolving possible segfault in core-ratelimiter
    resolves: rhbz#1746497


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41.2
changelog:
  RHEL 7.7.z ERRATUM
  - edited imjournal memleaks patch to fix introduced regression
    resolves: rhbz#1752424


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1484423 - Require at least krb5 version 1.15.1
  - resolves: #1484713 - Fix password changes for users via smbpasswd
  - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: Thomas Spura <tomspur@fedoraproject.org> - 0.16.1-3
changelog:
  - Add patch to fix ctypes test
  - Move requires to correct python2 subpackage
  - Add FFLAGS also in %install


author: Björn Esser <besser82@fedoraproject.org> - 0.16.1-4
changelog:
  - Discard results of testsuite on %{arm} for now
    Segfaults on non-aligned memory test (expected for arm)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: VZ Auto Builder <dsilakov@virtuozzo.com> 3.4.0.7470.15
changelog:
  - VSTOR-22495 (Sergey Lysanov <slysanov@virtuozzo.com>)
   - VSTOR-22495 (Sergey Lysanov <slysanov@virtuozzo.com>)


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - rebase to current upstream release to bring newuidmap and newgidmap
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
  - ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.42
changelog:
  - Apparently, LOG_CRIT is not available for pcs_log(), use LOG_ERR
   - PSBM-67910 Node is always rebooted several seconds after vstorage-mount is
  killed shaman shouldn't be silent applying final action (Konstantin Bukharov
  <bkb@virtuozzo.com>)


author: Igor Bazhitov <ibazhitov@virtuozzo.com> 7.0.44
changelog:
  - Add 'import copy' for #VSTOR-8473 (Denis Silakov <dsilakov@virtuozzo.com>)
   - Save conduit._conf.installroot in yum plugin (Denis Silakov
  <dsilakov@virtuozzo.com>)
   - Call sync of  / and /boot  before enabling shaman after yum transaction, see
  \#VSTOR-5970 (Denis Silakov <dsilakov@virtuozzo.com>)
   - Do not fence old master if pcs_api_delete(SHAMAN_MASTER) fails with -ENOENT
  (VSTOR-5898) (#VSTOR-5898)
   - Execute fence script from execute_final_action()
   - Move fence to functions for later reuse
   - Sync relevant log files' contents onto disk in shamand-monitor
   - Change '~' directive to 'stop' in rsyslog.conf since the former is deprecated
   - Added python-subprocess32 to requires, see #PSBM-69634 (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.  Again.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.
    Again, but without breaking aarch64 this time.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Fix a couple more things that are breaking reproducability, and thus
    breaking external review.
    Related: rhbz#1649270


author: Daniel Axelrod <daxelrod@datto.com> - 1:7.0-6
changelog:
  - Remove unused patches
  - Drop pre script for migrating from unsupported Fedora versions
  - Replace sed with configure switch


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Brian Behlendorf <behlendorf1@llnl.gov> - 0.6.5-1
changelog:
  - Released 0.6.5-1, detailed release notes are available at:
  - https://github.com/zfsonlinux/zfs/releases/tag/zfs-0.6.5


author: Ned Bass <bass6@llnl.gov> - 0.6.5.2-1
changelog:
  - Released 0.6.5.2-1
  - Fix PAX Patch/Grsec SLAB_USERCOPY panic zfsonlinux/zfs#3796
  - Always remove during dkms uninstall/update zfsonlinux/spl#476


author: Ned Bass <bass6@llnl.gov> - 0.6.5.3-1
changelog:
  - Fix CPU hotplug zfsonlinux/spl#482
  - Disable dynamic taskqs by default to avoid deadlock zfsonlinux/spl#484


author: Ned Bass <bass6@llnl.gov> - 0.6.5.4-1
changelog:
  - Build fixes on SPARC and some kernels
  - Fix taskq dynamic spawning deadlock
  - Fix builtin kernel builds
  - Fix crash due to overflow in P2ROUNDUP macro
  - Fix deadlock during direct memory reclaim


author: Ned Bass <bass6@llnl.gov> - 0.6.5.5-1
changelog:
  - Linux 4.5 compatibility zfsonlinux/spl#524
  - Create working debuginfo packages on Red Hat zfsonlinux/zfs#4224
  - Allow copy-builtin to run multiple times zfsonlinux/spl#526
  - Use safer flags for in-kernel memory allocations zfsonlinux/spl#523
  - Fix potential deadlock in cv_wait() zfsonlinux/zfs#4106
  - Fix livelock in shrinker zfsonlinux/zfs#3936


author: Ned Bass <bass6@llnl.gov> - 0.6.5.6-1
changelog:
  - Remove artificial architecture restrictions in packaging
  - Add support for s390[x] zfsonlinux/spl#537


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-5
changelog:
  - Optional separation of TLS client key and certificate files
  - Add patch enabling verification of TLS server (  #864894 )


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-7
changelog:
  - remove world readable permissions of the config file (#962988)
  - revive the authpass patch (#970123)
  - revive improved default config settings which were lost during rebase (#895708)


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.1
changelog:
  - Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                             config option for known domains [rhel-7.7.z]


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: Andrey Bondrov <abondrov@virtuozzo.com> - 4.56-6.2
changelog:
  - Create symlinks for /etc/nsswitch.conf, /etc/resolv.conf, /etc/localtime,
    /dev/zero and /dev/null in working directory


author: Jerry James <loganjerry@gmail.com> - 1.2.0-7
changelog:
  - Fix -python3 dependency on /usr/bin/python (bz 1342508)
  - Comply with latest python packaging guidelines
  - Drop workaround for bz 1251568, now fixed


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
  - add -f flag to force fdatasync() after sa file update (#1662094)
  - don't call filesystem count functions when we are not collecting fs statistics (#1670060)
  - skip autofs when gathering filesystem statistics (#1670060)
  - fix use of incorrect preposition in sar man page (#1624410)
  - fix CPU usage reporting (#1618688)


author: Konstantin Volkov <wolf@virtuozzo.com> - 219-63.8
changelog:
  - Set default swapoff timeout to 15 minutes, call systemd-swapoff.sh wrapper with timeout parameter, see #VSTOR-23607


author: Lukas Nykryn <lnykryn@redhat.com> - 219-67.1
changelog:
  - return error value on failure (#1729226)
  - revert local changes made during backport of the test (#1729226)
  - core/timer: Prevent timer looping when unit cannot start (#1729230)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
  - core: rerun GC logic for a unit that loses a reference (#1729228)
  - pid1: rename unit_check_gc to unit_may_gc (#1729228)
  - pid1: include the source unit in UnitRef (#1729228)
  - pid1: fix collection of cycles of units which reference one another (#1729228)
  - pid1: free basic unit information at the very end, before freeing the unit (#1729228)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
  - service: relax PID file symlink chain checks a bit (#8133) (#1729414)
  - path-util: fix more path_is_mount e792e890f fallout (#1279231)


author: David Smith <dsmith@redhat.com> - 3.1-3
changelog:
  - Added patches for:
  - rhbz1425568 task_dentry_path() fix
  - rhbz1431263 arm64 hardware breakpoint crash fix
  - rhbz1430828 replace task_exe_file() with current_exe_file()
  - rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
  - rhbz1433391 workaround parser issue in nfs_proc.stp
  - rhbz1428120 update lookup_bad_addr()


author: Frank Ch. Eigler <fche@redhat.com> - 3.2-3
changelog:
  - rhbz1506230 (netif_receive_skb_internal probing)
  - rhbz1490862 (f2fs tracepoint header workarounds)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Rex Dieter <rdieter@fedoraproject.org> 1.8-1
changelog:
  - taglib-1.8

  -* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.2-2
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment


author: David Kaspar <dkaspar@redhat.com> - 6.18.01-8
changelog:
  - Upstream's $anyerror variable re-introduced. (#1123854)
  - Fix for hang inside the 'wait' built-in of tcsh added. (#1181682)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
  - 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
  - Quote backslashes properly to preserve them in `...` expressions. (#1319816)
  - Fix for tcsh being interruptible while waiting for child process. (#1269370)
  - Fix of memory leak when using the 'source' built-in command.      (#1273513)
  - Print error message on stderr (instead of stdout).                (#1273498)
  - Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
  - Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
    Related: #1334751

  - Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
    Related: #1273498


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Than Ngo <than@redhat.com> - 2:2012-39.20130427_r30134
changelog:
  - Resolves: #1320337 - dependiency on texlive-xetex-def
  - Resolves: #1350485 - updmap from texlive-tetex-bin cannot be executed
  - Resolves: #1337925 - scriptlet errors
  - Resolves: #1186825 - add coreutils for post/unpost


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-14
changelog:
  - Fix rendering on big endian system
    Resolves: bz#1618777

    Do not automatically kill sessions
    Resolves: bz#1646889


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Jiri Kucera <jkucera@redhat.com> - 2.11-6
changelog:
  - Added --fuser option support.
  - Fixed bad URL, Source0, and bogus date in spec.
    Resolves: #1330328


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5d-11
changelog:
  - install man pages using the correct file name suffix
  - provide the fig2ps2tex.sh man page as a symlink


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
  - Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
  - Patch from Peter Robinson <pbrobinson@redhat.com>


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Jiri Kucera <jkucera@redhat.com> - 1.111-6
changelog:
  - Fix inconsistent capitalization in userhelper.8
    Fix URL and Source
    Fix bogus dates
    Resolves: #1349840, #1502441


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Karel Zak <kzak@redhat.com> 2.23.2-60
changelog:
  - fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login


author: Karel Zak <kzak@redhat.com> 2.23.2-61
changelog:
  - #1203378 - Cannot use swapon with fallocated XFS swapfile
  - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
  - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
  - #1639465 - Bad formatting in agetty.8 man page
  - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
  - #1678451 - Unable to mount to a directory that matches a dm device under /dev


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
  - drop last man page change, that option is just for compatibility
  - fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Jorge A Gallegos <kad@blegh.net> - 2.0.16-1
changelog:
  - Conditionally disable router-access for tcp_wrappers deprecation (Jorge Gallegos)
  - Updated to 2.0.16 which includes fix for CVE-2018-6758 (Jorge Gallegos)


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.10-14
changelog:
  - backport bugfix that eliminates unused-local-typedefs warning
  - backport security fix: Fix Hydrogen bounds check elimination (CVE-2013-6668; RHBZ#1086120)
  - backport fix to segfault caused by the above patch


author: Artem Silenkov <asilenkov@mirantis.com> - 1:3.14.5.10-21~mos8.0.1
changelog:
  - Make source local
  - Rebuild for centos7 Liberty
  - Spec taken from http://koji.fedoraproject.org/koji/buildinfo?buildID=686695


author: Igor Yozhikov <iyozhikov@mirantis.com> - 3.14.5.10-21~mos1
changelog:
  - 67a3f68 Suffix update for v8  * Modification made according to https://github.com/openstack/fuel-specs/blob/master/specs/8.0/separate-mos-from-centos.rst#rpm-packages-versioning
  - 73de0b2 v8 packaged for centos7 Liberty
  - 9dc9278 Added .gitreview


author: Konstantin Volkov <wolf@virtuozzo.com> 0.20
changelog:
  - Fixed call to network.check_ip_address, see #PSBM-64601. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Validate IPaddr and Hostname, see #PSBM-64601. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.21
changelog:
  - Fixed code style. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - - Deny return from spoke if input values are invalid, see #PSBM-64601 -
  Strictly check for IPv4 format, see #PSBM-64601 (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.22
changelog:
  - Deny setting the same IP for VA and Storage UI, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.23
changelog:
  - Define _host_ips in __init__, see #PSBM-73654. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Added/Fixed translations according to the review, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)
   - Regenerated po files. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - Deny user to select node's IP addr for va-mn CT, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.24
changelog:
  - Show error status of the spoke and warning message on exit if no network
  devices available or no network devices active, see #PSBM-73605. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.25
changelog:
  - Fixed translations according to the review, see #PSBM-74011, #PSBM-73605 and
  \#PSBM-65770. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.27
changelog:
  - Make IP address label more clear, see #PSBM-79326
   - Make hostname label more clear, see #PSBM-79326


author: Konstantin Neumoin <<kneumoin@virtuozzo.com>> 7.0.157
changelog:
  - Revert "policies: Disable THP in NoOpPolicy" (Andrey Ryabinin
  <aryabinin@virtuozzo.com>)
   - scripts/vz: set swappiness to zero for vstorage cgroup (Andrey Ryabinin
  <aryabinin@virtuozzo.com>) (#PSBM-89802)


author: Konstantin <kneumoin@virtuozzo.com> 7.0.162
changelog:
  - Add logging. (Konstantin Neumoin <kneumoin@virtuozzo.com>) (#PSBM-94621)
   - Revert "Temporary disable storage policy" (Konstantin Neumoin
  <kneumoin@virtuozzo.com>)
   - Temporary disable storage policy (Konstantin Neumoin
  <kneumoin@virtuozzo.com>)


author: Konstantin <kneumoin@virtuozzo.com> 7.0.163
changelog:
  - Re-raise last exception. (Konstantin Neumoin <kneumoin@virtuozzo.com>)
   - Fix unhandled exception. (Konstantin Neumoin <kneumoin@virtuozzo.com>) (#PSBM-94621)


author: Konstantin <kneumoin@virtuozzo.com> 7.0.164
changelog:
  - Add new option for cache size configuration for storage services. (Konstantin
  Neumoin <kneumoin@virtuozzo.com>) (#PSBM-94761)
   - Fix typo (Konstantin Neumoin <kneumoin@virtuozzo.com>)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.2.3
changelog:
  - Set default turget to 3.5
   - VZNuma Policy Improvement. (#VSTOR-24977)
   - CHange log level for mem notification


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.2.6
changelog:
  - VSTOR-26590 fix old broken connection obj use after libvirt restart (Alexey
  Suponin <Alexey.Suponin@virtuozzo.com>)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.56
changelog:
  - add safe threshold for NUMA balancing (#PSBM-61969)
   - Move branding to separate file, see #PSBM-58317 (Konstantin Volkov
  <wolf@virtuozzo.com>)


author: Konstantin Neumoin <kneumoin@virtuozzo.com> 7.0.64
changelog:
  - fix memory pressure threshold
   - improving memory pressure diagnostic in policy (#PSBM-68779)
   - cosmetic fix
   - update requirements


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.13
changelog:
  - Add basic xor with hwid (VSTOR-29326), use separate tries for log writing and
  sending - otherwise we will write the same info twice if fail to send report


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.14
changelog:
  - Do not mess data with all hwids, only with the one which is send to server
   - Add basic xor with hwid (VSTOR-29326), use separate tries for log writing and
  sending - otherwise we will write the same info twice if fail to send report


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.15
changelog:
  - BE more careful with log sending
   - Do not mess data with all hwids, only with the one which is send to server
   - Add basic xor with hwid (VSTOR-29326), use separate tries for log writing and
  sending - otherwise we will write the same info twice if fail to send report


author: Denis Silakov <dsilakov@virtuozzo.com> 0.0.16
changelog:
  - Fix service type
   - BE more careful with log sending
   - Do not mess data with all hwids, only with the one which is send to server
   - Add basic xor with hwid (VSTOR-29326), use separate tries for log writing and
  sending - otherwise we will write the same info twice if fail to send report
   - Move services to unitdir


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: Jiri Kucera <jkucera@redhat.com> - 0.3.9-9
changelog:
  - Backport ecef526 (Stop using crypt_get_error)
    Backport 23a1ff0 (Fix nonsensical error messages on missing keys)
    Fix License, URL and Source0 tags
    Resolves: #1502399, #1574988, #1593855, #1454358


author: VZ Auto Builder <dsilakov@virtuozzo.com> 2.7.29
changelog:
  - VSTOR-27974 (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - VSTOR-28508 (Denis Greshilov <Denis.Greshilov@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 2.7.37
changelog:
  - [ABGW][BUILD] Updated dependencies to vstorage-libs-shared >= 7.10.135 and
  backup-archive3 >= 1.8.80. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW][BUILD] Adjusted makefiles to account for a change of libpcs_io's major
  version. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [TESTS] Block SIGPIPE in longhaul.go. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] Default storage.experimental.fiemap to 'no'. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [TESTS] Make default values of memory limits equal to default values in
  archive3 (Kirill Akimov <Kirill.Akimov@acronis.com>)
   - [ABGW] Allow proxied deletions of files that are migration sources. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] Return certificate verification error from fes_jwt_get_scopes() if no
  scopes match $dc_uid. (Denis Golikov <denis.golikov@acronis.com>)
   - [ABGW] Return -PCS_ERR_PEER_CERTIFICATE_REJECTED instead of -PCS_ERR_AUTH on
  failed JWT checks (Denis Golikov <denis.golikov@acronis.com>)
   - [ABGW] Reference proxied session/req ctx in the logs for requests of relay
  session (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] Add abgw_session->peer_str (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: check pcs_co_sleep_cancelable() result in fes_certs_load().
  (Denis Golikov <denis.golikov@acronis.com>)
   - [ABGW] minor: made pcs_co_sleep_cancelable() to respect context expiration.
  (Denis Golikov <denis.golikov@acronis.com>) (#VSTOR-28880)
   - [ABGW][OSTOR] prepare_container_archive(): Close item if archive_commit()
  fails [VSTOR-29240] (Denis Greshilov <Denis.Greshilov@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 2.7.39
changelog:
  - Change targets.list to 3.5.1
   - [CI] test_claim_write_opened_with_hole: Don't close file if test is skipped
  because of fault injection (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] Increase limit on number of submitted ireqs for ABGW peer session
  (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: Add #define for maximum number of ireqs being executed in
  parallel (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] claim_write_opened: Don't discard pwrites from the previous session
  (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [CI] Added check for dirlist to test_jwt.c (Denis Golikov
  <denis.golikov@acronis.com>)
   - [ABGW] Stat replication backlog only on master. (Denis Golikov
  <denis.golikov@acronis.com>)
   - [CI] Added CI test for ABR-256424 (Roman Zavodskikh
  <Roman.Zavodskikh@acronis.com>)
   - [ABGW] Dropped ending slash in dirlist path when prefix is empty [ABR-256424]
  (Roman Zavodskikh <Roman.Zavodskikh@acronis.com>)
   - [ABGW] Make nr_{containers_validate_trees,containers_validate_segments,replic
  a_integrity_check}_fail stats gauges [VSTOR-29549] (Denis Greshilov
  <Denis.Greshilov@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 2.7.40
changelog:
  - [TOOLS] Check that replication for an account is enabled before disabling it.
  (Denis Golikov <denis.golikov@acronis.com>)
   - [TOOLS] Parallel execution for disable_replication. (Denis Golikov
  <denis.golikov@acronis.com>) (#VSTOR-29938)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 2.7.41
changelog:
  - [ABGW] handle_get_trust_secret(): Add a check for permissions (Denis
  Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] handle_set_trust_secret(): Don't require ASTOR_PERM_REPL when setting
  replication secret (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: fes_file_unlink(): Add a comment why not doing
  fes_file_writer_enter() for ABGW pull target (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ABGW] fes_req_handler_dirlist_regular(): Don't leak prefix in case of fault
  injection (Denis Greshilov <Denis.Greshilov@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 2.7.42
changelog:
  - [ABGW] Fixed the accounting of connections of clients that do no handshake.
  (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] Moved fes_conn_{recv,send}_handshake() to libastor_client. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] minor: removed some useless log messages. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: disable pcs_profiler when running on Valgrind. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: factored out get_account_prefix(). (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [CI] fix: move archive with logs to existing storage on Swiss farm (Roman
  Zavodskikh <Roman.Zavodskikh@acronis.com>)
   - [ABGW] abgw_session_alloc_proxy(): Don't do abgw_session_put() on partially
  initialised session [VSTOR-31248] (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: Set nr_ireqs_submitted_limit for abgw_session-s explicitly
  (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] Increase limit on number of submitted ireqs for ABGW peer session
  (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] fes_certs_load(): Fix error code if a certificate file was not found
  (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: use pcs_{malloc,free}_mmap(). (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW][BUILD] Updated the dependency on backup-archive3 to >= 1.8.86. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [RP] Use per-abgw_session maps of abgw_session_relays instead of a global map
  in struct fes. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] Fixed the interface of abgw_proxy_session_submit_req(). (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] Added a BUG_ON() to check that no proxy v2 fds are made available
  as v1 fds. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [VSTOR-8421] Do not call system() from the evloop thread. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: added some missing forward declarations and includes of
  archive_io. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] minor: removed some windows compatibility code that was never used.
  (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] minor: use pcs_co_mutex instead of pcs_co_sem with max 1 now that
  pcs_co_mutex_lock_cancelable() is available. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: allocate fes_file and fes_file->path as one block. (Artem
  Anisimov <artem.anisimov@acronis.com>)
   - [CI][VSTOR-31042] test_pipelined_read_timeouts: respect the global time
  limit. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [CI] test_v2_proxying: proxy requests via a client that claims itself as an
  ABGW peer. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] minor: use pcs_context_get_id() instead of inspecting struct
  pcs_context directly. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [PROTOv2] Check that only ABGW peers proxy requests. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [CI] Temporarily disabled test_ireqs_submitted_limit. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: got rid of fes_of_conn(). (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] Split fes_conn_wait_space() from fes_req_alloc() into a separate
  function. (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] Simplified the creation of connections. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: moved all ssl socket configuration into
  fes_conn_do_tls_handshake(). (Artem Anisimov <artem.anisimov@acronis.com>)
   - [ABGW] Removed a separate InstallJWT v1 request. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] Got rid of fes_serialisation.h. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: log writer_token in init_io. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: cleaned up some includes. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [ABGW] minor: cleaned up v2 dirlist implementation. (Artem Anisimov
  <artem.anisimov@acronis.com>)
   - [CI] fix: execute testcases with manually created msr_req's only without
  fault injections (Roman Zavodskikh <Roman.Zavodskikh@acronis.com>)
   - [CI] fix: do not call astor_client_put in testcases explicilty (Roman
  Zavodskikh <Roman.Zavodskikh@acronis.com>) (#VSTOR-31044)
   - [CI] test_ireqs_submitted_limit: Skip test if fault_inj_enabled (Denis
  Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] minor: fes_15_make_path(): Remove dead code (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [CI] Use go-archive3 package for go bindings (Roman Zavodskikh
  <Roman.Zavodskikh@acronis.com>) (#VSTOR-30977)
   - [CI] minor: change vstorage-mount args order to the order from help message
  (Roman Zavodskikh <Roman.Zavodskikh@acronis.com>)
   - [ABGW] handle_proxy_session_open(): Log proxy_session_open ctx and ABGW peer
  address in the context of created proxy session (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ABGW] Detach fes_file when setting ->write_error (Denis Greshilov
  <Denis.Greshilov@acronis.com>)
   - [ABGW] fes_fd_set_open_mode(): Forbid transitions between shared and
  normal/excl modes (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] Do fes_fd_create() under fes_file_writer_enter() in v1 req handlers
  and handle_open_replica() (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] Fix setting fes_file->write_error for open_write and
  claim_write_opened (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [ABGW] fes_req_alloc(): Don't set ->conn for req that may be freed by
  msr_req_put() [VSTOR-30880] (Denis Greshilov <Denis.Greshilov@acronis.com>)
   - [CI] fix versions of pstorage-core and backup-archive3 (Roman Zavodskikh
  <Roman.Zavodskikh@acronis.com>)
   - [ABGW] Added check for presence of data.item into a3f_punch_holes. (Denis
  Golikov <denis.golikov@acronis.com>)
   - [ABGW] Re-enabled schedule_for_compaction() in fes_crawler.c (Denis Golikov
  <denis.golikov@acronis.com>)
   - [ABGW] Added a call to archive_compact() into compaction_co. (Denis Golikov
  <denis.golikov@acronis.com>)
   - [ABGW] Simplified compaction eligibility check. (Denis Golikov
  <denis.golikov@acronis.com>)
   - [ABGW] Remove lock from struct a3f in both storage-local-a3.c and storage-
  ostor-a3.c (Denis Golikov <denis.golikov@acronis.com>)
   - [ABGW] Get rid of the ABGW in-house compaction mechanism. (Denis Golikov
  <denis.golikov@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.127
changelog:
  - [WIP] Remove alternative media class from fs context (Oleg Volkov
  <olegv@acronis.com>)
   - [WIP] Simplify zone allocation (Oleg Volkov <olegv@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.139
changelog:
  - Fix leak in mds client (Yuri Per <yuri@acronis.com>)
   - [PCS][RPC] referencing wrong memory (Alexey Kuznetsov <kuznet@acronis.com>)
   - Fix pcs_blog init order (Yuri Per <yuri@acronis.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.10.140
changelog:
  - [MDS] Always treat chunks owned by the dir as VOID (Oleg Volkov
  <olegv@acronis.com>) (#VSTOR-30463)
   - [MDS] Skip call to fm_recovery_min_replicas if we have no uptodate replicas
  at all (Oleg Volkov <olegv@acronis.com>) (#VSTOR-30463)
   - Merge spec template changes (VZ Auto Builder <dsilakov@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.10.152
changelog:
  - [MDS] Always treat chunks owned by the dir as VOID (Oleg Volkov
  <olegv@acronis.com>) (#VSTOR-30463)
   - [MDS] Skip call to fm_recovery_min_replicas if we have no uptodate replicas
  at all (Oleg Volkov <olegv@acronis.com>) (#VSTOR-30463)
   - up build version to 7.10.150 to reserve build number for sdi-3.5-hf1 branch
  (Andrey Zaitsev <azaitsev@virtuozzo.com>)
   - [MDS] Bugon and more comments in get_most_costly_node (Oleg Volkov
  <olegv@acronis.com>)
   - [MDS] Improving get_most_costly_node function (Oleg Volkov
  <olegv@acronis.com>)
   - [FUSED] Check if we need to trigger LSM journal merge on file open (Oleg
  Volkov <olegv@acronis.com>) (#VSTOR-30066)
   - update targets.list (Andrey Zaitsev <azaitsev@virtuozzo.com>)


author: Inga Pyass <ipyass@virtuozzo.com> 7.10.153
changelog:
  - io: RDMA/listen: avoid event channel destruction on failed connect (Pavel
  Borzenkov <pavel.borzenkov@acronis.com>) (#VSTOR-29187)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.54
changelog:
  - create /var/lib/ostor/maintenance folder on install (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)
   - [OSTOR] fix processing ban/unban requests in ostor-agend (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)
   - Fix payload hash check callback when no ostor_req (Peter Ginchev
  <peter.ginchev@acronis.com>)
   - add maintenance mode for host (Andrey Zaitsev <azaitsev@virtuozzo.com>)
   - [VSTOR-28406] [VSTOR-28201] [VSTOR-28193] [VSTOR-28191] [VSTOR-28102] S3
  Object Lock API response fixes. Added response codes, short and human-readable
  messages checks to tests. (Anastasiia Terenteva
  <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-28406] [VSTOR-28201] [VSTOR-28193] [VSTOR-28191] [VSTOR-28102] S3
  Object Lock API response fixes. - Added AWS compatible http errors. - Fixed
  error responses in code. - Fixed test on x-amz-bucket-object-lock-enabled: False
  - now considering it as a correct value. (Anastasiia Terenteva
  <Anastasiia.Terenteva@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.56
changelog:
  - VSTOR-22898 (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)
   - VSTOR-28671 (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)
   - VSTOR-28673 (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)
   - VSTOR-28301 (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.57
changelog:
  - Added build time check for stored object meta size so as to prevent it from
  change in future. (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-28100] Obect Lock Retention Granularity Fixes. Changes in object and
  bucket meta. - Now storing retain until date in a timestamp. - Extended the
  retention mode field from 1 bit to a byte. (Anastasiia Terenteva
  <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-22898] Fix Object Lock API response message on too big default bucket
  retention. (Anastasiia Terenteva <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-28671] Fixing case sensitivity in Object Lock XMLs. (Anastasiia
  Terenteva <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-28673] Fix status code on Object Delete. Returning 403 instead of 204
  on specific object version delete when object lock enabled. (Anastasiia
  Terenteva <Anastasiia.Terenteva@acronis.com>)
   - Fixed responces on invalid xml. (Anastasiia Terenteva
  <Anastasiia.Terenteva@acronis.com>)
   - [VSTOR-28301] Fixed Unix 2038 bug in Object Lock API. The problem was in
  implicit conversion of timestamp to 4 byte range. - Converted time to long int.
  - Added a test for Unix 2038 overflow. (Anastasiia Terenteva
  <Anastasiia.Terenteva@acronis.com>)
   - Merge spec template changes


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.61
changelog:
  - VSTOR-29750 (Andrey Zaitsev <azaitsev@virtuozzo.com>)
   - VSTOR-29595 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-29595)


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.62
changelog:
  - reset auth payload if it does not have actual addresses (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)
   - fix selection of address of next cfgd #VSTOR-29750 (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)
   - [FSAL] Cleanup FSAL resources before unload (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-29595)
   - Merge spec template changes


author: VZ Auto Builder <dsilakov@virtuozzo.com> 7.10.63
changelog:
  - VSTOR-30104 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-30104)
   - VSTOR-30106 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-30106)
   - VSTOR-30106 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-30106)
   - VSTOR-30106 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-30106)
   - VSTOR-30083 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-30083)
   - VSTOR-28109 (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-28109)


author: Inga Pyass <ipyass@virtuozzo.com> 7.10.64
changelog:
  - [fsmds] Fix double initialization of pcs_stor_fs_eng (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-30353)
   - new branch sdi-3.5u1, update targets.list (Andrey Zaitsev
  <azaitsev@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.33
changelog:
  - Fixed code style. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - Deny setting the same IP for VA and Storage UI, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.34
changelog:
  - Always ready in kickstart mode. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Deny user to select node's IP addr for vstorage-ui CT, see #PSBM-65770.
  (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.35
changelog:
  - Fixed translations according to the review, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)
   - Define _host_ips in __init__, see #PSBM-73654. (Andrey Ponomarenko
  <aponomarenko@virtuozzo.com>)
   - Added/Fixed translations according to the review, see #PSBM-65770. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)
   - Regenerated po files. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - Fixed translations. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)


author: Konstantin Volkov <wolf@virtuozzo.com> 0.36
changelog:
  - Removed unnecessary code. (Andrey Ponomarenko <aponomarenko@virtuozzo.com>)
   - Show error status of the spoke and warning message on exit if no network
  devices available or no network devices active, see #PSBM-73605. (Andrey
  Ponomarenko <aponomarenko@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.41
changelog:
  - Make labels a bit shorter
   - Make IP address label more clear, see #PSBM-79326
   - Make hostname label more clear, see #PSBM-79326


author: Maxim Nestratov <mnestratov@virtuozzo.com> 4.0.72
changelog:
  - VSTOR-29601: Add "Alerts" route to ext navigation map. (Radik.Aksyanov
  <Radik.Aksyanov@acronis.com>)
   - Remove duplicates (Konstantin Savkov <Konstantin.Savkov@acronis.com>)
   - Resolve text ambiguity (Konstantin Savkov <Konstantin.Savkov@acronis.com>)
   - VSTOR-29738 [L10N][ES] WebCP is unavailable after changing the language to
  Spanish (Konstantin Savkov <Konstantin.Savkov@acronis.com>)


author: Alexander Kurbatov <Alexander.Kurbatov@acronis.com> 4.1.1
changelog:
  - Fix ZH locale file (Radik.Aksyanov <Radik.Aksyanov@acronis.com>)
   - LOC-6541 Acronis Cyber Infrastructure 3.5 - PS - HO1 (CN) (Konstantin Savkov
  <Konstantin.Savkov@acronis.com>)
   - LOC-6542 Acronis Cyber Infrastructure 3.5 - PS - HO1 (JA) (Konstantin Savkov
  <Konstantin.Savkov@acronis.com>)


author: Alexander Kurbatov <Alexander.Kurbatov@acronis.com> 4.1.3
changelog:
  - VSTOR-29846: Fix bonding creation behavior (Radik.Aksyanov
  <Radik.Aksyanov@acronis.com>)
   - Fix license usage text (Radik.Aksyanov <Radik.Aksyanov@acronis.com>) (#VSTOR-26692 #VSTOR-26700)
   - VSTOR-29694: Sync AWS regions (Radik.Aksyanov <Radik.Aksyanov@acronis.com>)


author: Alexander Kurbatov <Alexander.Kurbatov@acronis.com> 4.1.4
changelog:
  - VSTOR-26692 Fix mistranslation "licencia espacio" in Spanish (Radik.Aksyanov
  <Radik.Aksyanov@acronis.com>)
   - VSTOR-30575: Fix multiple langs load (Radik.Aksyanov
  <Radik.Aksyanov@acronis.com>)


author: Alexander Kurbatov <Alexander.Kurbatov@acronis.com> 4.1.6
changelog:
  - Acronis Cyber Infrastructure 3.5.1 - PS - HO1 LOC-6775 LOC-6776 LOC-6777
  LOC-6778 LOC-6779 (Konstantin Savkov <Konstantin.Savkov@acronis.com>)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-1
changelog:
  - Update to 0.46.1
  - Drop upstreamed patches
  - Drop workaround for old GTK+ bug (#1238315)
  - Rebase downstream patches
  Resolves: #1387056


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-2
changelog:
  - Restore gnome-pty-helper
  - Add git.mk and other dependencies to regenerate the build scripts
  Resolves: #1443504


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 7.0.51
changelog:
  - Enable vzlicmon after update from valicutils #PVA-37061
   - Enable vzlicmon after update from vzlicutils from HotFix1 and earlier


author: Yuriy Pudgorodskiy <yur@virtuozzo.com> 7.0.55
changelog:
  - Fixed incorrect vm limit log message on combined license #PSBM-76143
   - Restart vzlicmon on failure (Pavel Vokhmyanin <pvokhmyanin@virtuozzo.com>)


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.13
changelog:
  - Drop debug commet
   - Support encrypt/decrypt for new get_rk_url algotrithm
   - USe shifting instead of XORing, otherwise we get unprintable chars
   - Adjust decryption test


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.14
changelog:
  - We use /usr/sbin in Vz6
   - Drop debug commet
   - Support encrypt/decrypt for new get_rk_url algotrithm
   - USe shifting instead of XORing, otherwise we get unprintable chars


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.16
changelog:
  - Make get_key a VZSM class method
   - Fix URL pushed to repo file, mark repo file with rk_repo flag, PSBM-95716


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.19
changelog:
  - Fix shift issue in crypto algorithm - 0 and z were coded into the same symbol
   - Make repo data configurable
   - Improve tests


author: Denis Silakov <dsilakov@virtuozzo.com> 2.0.22
changelog:
  - Roughly implement support for multiple HWIDs
   - Support RK on Vz7 activation using VZ7 key, PSBM-97586


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
  - Version 4.60.1 (bugfix release)
  - Added man-pages
  - The only patch was rebased
  - Small cosmetic spec-file cleanups


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
  - Compile with -fno-strict-aliasing
  - Resolves: rhbz#1174556
  - Update translations
  - Resolves: rhbz#1223643


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-6
changelog:
  - Don't strip debug info from bundled icu libraries, otherwise there
    will be conflicts between webkitgtk4-debuginfo and icu-debuginfo packages
  - Resolves: rhbz#1486771


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
  - Update to 2.20.4
  - Resolves: rhbz#1576544
  - WebKitWebProcess crashes when a11y is active
  - Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
  - webkitgtk4: Crash on Google login page when a11y is active
  - Resolves: rhbz#1503624
  - Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
  - Update to 2.20.5 - technically it was not necessary as the only difference
    between 2.20.4 and .5 was the revert of one change, that we already reverted
    while building 2.20.4. But it's better to stay with upstream.
  - Update the labels patch with the version that was pushed upstream.
  - Resolves: rhbz#1576544


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
  - Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
  - Run internal test suite during build (#1295846)
  - Fix -nv being documented as synonym for two options (#1147572)


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
  - Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
  - Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 3.0.2-12
changelog:
  - Remove python artifacts in bakefile dir, causes multilib devel conflict RH#1294712
  - Fix package devel not owning created wx3 backfile preset dir
  - Add support for MIPS to wx-config RH#1294895
  - Wayland Patch


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 3.0.2-15
changelog:
  - Backporting patches from rawhide, credit to Scott Talbert
  - Add patch to resolve issue with wxStaticText growing, fixes RH#1282142
  - Add patches to resolve issues under Wayland with window sizing, RH#1294229


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Dropped CVE-2009-1885 patch.
  - Use dos2unix -k instead of unrecognized option -U
  - Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
    no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
  - xfs_db: fix the source command when passed as -c option (#1510279)
  - xfs_metadump: allow much larger extent counts (#1502927)
  - xfs_db: fix crash when field list selector has garbage (#1532271)
  - mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
  - Update project URLs throughout the pkg, code and docs (#1550798)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-20
changelog:
  - xfs_quota: fix errors if project flag is not set on regular files (#1663502)
  - xfs_repair: initialize non-leaf finobt blocks with correct magic (#1670154)


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Hans de Goede <hdegoede@redhat.com> 7.7.1-1
changelog:
  - Update to latest git, this is the equivalent of 7.7.1 + fixes for use
    with xserver-1.19 (rhbz#1325613)
  - Rebuild against xserver-1.19


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-22.20160119
changelog:
  - xorg-x11-drv-intel hardly has any accel on skylake and newer, so make
    Xorg fallback to modesetting + glamor by returning FALSE from probe
  - Using glamor also gives us proper Xvideo support on skylake (rhbz#1305369)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-23.20160512
changelog:
  - Update to 20160512 snapshot
  - This fixes laptops with switchable graphics hanging after a dpms off of
    the lcd screen (rhbz#1334581)
  - Fix fd-leak when falling back to mode-setting on skylake, this fixes
    Xorg exiting with a "drmSetMaster failed" error when not using server
    managed fds (e.g. using a different login manager then gdm)
  - Fix duplicate binaries in -devel / intel-gpu-tools subpackages (rhbz#1323641)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-24.20160712
changelog:
  - Git snapshot du jour, bringing in a bunch of bugfixes
  - Fix dpi issues on Surface 3 (also needs some kernel fixes)
  - Hopefully fix rhbz#1354124


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
  - Fix crash due uninitialized pointer
    Resolves: rhbz#1690453
  - Call LeaveVt on shutdown to avoid racy situations
    Resolves: rhbz#1640918


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
  - Add Pressure2K option for backwards-compatibility with applications that
    hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
  - Fix hang after unplugging a device (#1496650)
  - Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-4
changelog:
  - xkbcomp: Fix generation of XKB directory listing, missing reset on file
    handler caused parse errors and incomplete directory listings


author: Kalev Lember <kalev@smartlink.ee> - 2.2.3-8
changelog:
  - Require fully versioned main package for -devel subpackage
  - Don't build static library
  - Removed library Requires which are automatically picked up by rpm
  - Removed spurious BR autoconf automake libtool
  - Build -doc subpackage as noarch
  - Install documentation with %doc macro
  - Use %{_prefix} instead of hardcoding /usr
  - Use parallel make
  - Various other spec file clean ups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.2.4-2
changelog:
  - revive xqilla from deprecated
  - add man page from debian for xqilla command-line tool
  - do not install bundled xqc.h and Requires: xqc


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Artem Silenkov <asilenkov@mirantis.com> - 0.5.1-11~mos8.0.1
changelog:
  - Make source local
  - Rebuild for centos7 Liberty
  - Spec taken from http://koji.fedoraproject.org/koji/buildinfo?buildID=680761


author: Igor Yozhikov <iyozhikov@mirantis.com> - 0.5.1-11~mos1
changelog:
  - 94a0bc1 Suffix update for yaml-cpp  * Modification made according to https://github.com/openstack/fuel-specs/blob/master/specs/8.0/separate-mos-from-centos.rst#rpm-packages-versioning
  - 481ad46 yaml-cpp packaged for centos7 Liberty
  - e05c666 Added .gitreview


author: Thomas Spura <tomspur@fedoraproject.org> - 4.0.5-3
changelog:
  - Cherry-pick patch for protocol downgrade attack (#1221666, CVE-2014-9721)
  - Remove Obsoletes:zeromq-utils
  - Remove %defattr


author: Ned Bass <bass6@llnl.gov> - 0.6.5.1-1
changelog:
  - Fix zvol corruption with TRIM/discard zfsonlinux/zfs#3798
  - Fix NULL as mount(2) syscall data parameter zfsonlinux/zfs#3804
  - Fix xattr=sa dataset property not honored zfsonlinux/zfs#3787


author: Ned Bass <bass6@llnl.gov> - 0.6.5.2-1
changelog:
  - Init script fixes zfsonlinux/zfs#3816
  - Fix uioskip crash when skip to end zfsonlinux/zfs#3806 zfsonlinux/zfs#3850
  - Userspace can trigger an assertion zfsonlinux/zfs#3792
  - Fix quota userused underflow bug zfsonlinux/zfs#3789
  - Fix performance regression from unwanted synchronous I/O zfsonlinux/zfs#3780
  - Fix deadlock during ARC reclaim zfsonlinux/zfs#3808 zfsonlinux/zfs#3834
  - Fix deadlock with zfs receive and clamscan zfsonlinux/zfs#3719
  - Allow NFS activity to defer snapshot unmounts zfsonlinux/zfs#3794
  - Linux 4.3 compatibility zfsonlinux/zfs#3799
  - Zed reload fixes zfsonlinux/zfs#3773
  - Fix PAX Patch/Grsec SLAB_USERCOPY panic zfsonlinux/zfs#3796
  - Always remove during dkms uninstall/update zfsonlinux/spl#476


author: Ned Bass <bass6@llnl.gov> - 0.6.5.3-1
changelog:
  - Don't import all visible pools in zfs-import init script zfsonlinux/zfs#3777
  - Fix use-after-free in vdev_disk_physio_completion zfsonlinux/zfs#3920
  - Fix avl_is_empty(&dn->dn_dbufs) assertion zfsonlinux/zfs#3865


author: Ned Bass <bass6@llnl.gov> - 0.6.5.4-1
changelog:
  - Linux 4.4 compat
  - Assorted stability fixes
  - Fixes for NFS-exported snapshots
  - Fix kernel warning in unlock_new_inode() and deadlock
  - Fix overflow in P2ROUNDUP_TYPED macro
  - Fix write performance issue due to bad zfs_dirty_data_max calculation
  - Fix builtin kernel builds
  - Fix deadlock during direct memory reclaim


author: Ned Bass <bass6@llnl.gov> - 0.6.5.5-1
changelog:
  - Linux 4.5 compatibility zfsonlinux/zfs#4228
  - Create working debuginfo packages on Red Hat zfsonlinux/zfs#4224
  - Make arc_summary.py and dbufstat.py compatible with python3
  - musl libc compatibility for option parsing zfsonlinux/zfs#4222
  - Prevent arc_c collapse and possible panic zfsonlinux/zfs#3904
  - Prevent duplicated xattr between SA and dir zfsonlinux/zfs#4153
  - Fix zsb->z_hold_mtx deadlock zfsonlinux/zfs#4106
  - Prevent SA header corruption zfsonlinux/zfs#4150


author: Ned Bass <bass6@llnl.gov> - 0.6.5.6-1
changelog:
  - Remove artificial architecture restrictions in packaging
  - Add support for s390[x] zfsonlinux/zfs#4425
  - Handle negative dentries in case insensitive filesystem zfsonlinux/zfs#4243
  - Fix casesensitivity=insensitive deadlock zfsonlinux/zfs#4136
  - Correctly parse zdb -R flag arguments zfsonlinux/zfs#4304
  - Fix lock order inversion with zvol_open() zfsonlinux/zfs#3681
  - Add support for asynchronous zvol minor operations zfsonlinux/zfs#2217
  - Make zvol minor functionality more robust zfsonlinux/zfs#4344
  - Prevent zpool_find_vdev() from truncating vdev path zfsonlinux/zfs#4312
  - Add -gLP to zpool subcommands for alt vdev names zfsonlinux/zfs#4341
  - Fix zpool list -v output for spares and log devices zfsonlinux/zfs#4313


author: Ned Bass <bass6@llnl.gov> - 0.6.5.7-1
changelog:
  - Fix user namespaces uid/gid mapping zfsonlinux/zfs#4177
  - Fix ZPL miswrite of default POSIX ACL zfsonlinux/zfs#4520
  - Linux 4.5 and 4.6 compatibility zfsonlinux/zfs#4537 zfsonlinux/zfs#4489
  - Ensure /dev/disk/by-partlabel gets correctly populated zfsonlinux/zfs#4517
  - Utilities now work reliably with newly created partitions zfsonlinux/zfs#3708
  - Import now reliably uses device names stored in label zfsonlinux/zfs#3043
  - Fix possible deadlock in zfs_secpolicy_write_perms ioctl zfsonlinux/zfs#4554
  - Fix inverted logic on none elevator comparison zfsonlinux/zfs#4507
  - Add 32 bit FS_IOC32_{GET|SET}FLAGS compat ioctls for PPC zfsonlinux/zfs#4477


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-11
changelog:
  - Fix CVE-2018-6541
  - Part of the original patch has already been applied in the past (CVE-2018-7726),
    so the bug should not be reproducible in a way described in the github 
    issue, even without this commit. Applying the rest of the original patch anyway.
  - https://github.com/gdraheim/zziplib/issues/16
  - Related: CVE-2018-6541


