# changelog

author: Dan Walsh <dwalsh@redhat.com> 1.7.13-1
changelog:
  - Upgrade to latest from NSA
    * Improved memory use by SELinux by both reducing the avtab 
      node size and reducing the number of avtab nodes (by not
      expanding attributes in TE rules when possible).  Added
      expand_avtab and expand_cond_av_list functions for use by
      assertion checker, hierarchy checker, compatibility code,
      and dispol.  Added new inline ebitmap operators and converted
      existing users of ebitmaps to the new operators for greater 
      efficiency.
      Note:  The binary policy format version has been incremented to 
      version 20 as a result of these changes.


author: Dan Walsh <dwalsh@redhat.com> 1.7.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed empty list test in cond_write_av_list.  Bug found by
      Coverity, reported by Serge Hallyn (IBM).
    * Merged patch to policydb_write to check errors 
      when writing the type->attribute reverse map from
      Serge Hallyn (IBM).  Bug found by Coverity.
    * Fixed policydb_destroy to properly handle NULL type_attr_map
      or attr_type_map.


author: Dan Walsh <dwalsh@redhat.com> 1.7.19-1
changelog:
  - Upgrade to latest from NSA
    * Changed to treat all type conflicts as fatal errors.
    * Merged several error handling fixes from 
      Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.20-1
changelog:
  - Upgrade to latest from NSA
    * Merged more fixes for resource leaks on error paths 
      from Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.22-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for memory leak in sepol_context_to_sid from
    Jason Tang (Tresys).
    * Merged fixes for resource leaks on error paths and
      change to scope_destroy from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.24-1
changelog:
  - Upgrade to latest from NSA
    * Fixed symtab_insert return value for duplicate declarations.
    * Merged fix for memory error in policy_module_destroy from
    Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed expand_avtab and expand_cond_av_list to keep separate
    entries with identical keys but different enabled flags.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged stddef.h patch and debug conversion patch from 
    Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged boolean record and memory leak fix patches from Ivan
    Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.8-1
changelog:
  - Upgrade to latest from NSA
    * Merged pointer typedef elimination patch from Ivan Gyurdiev.
    * Merged user list function, new mls functions, and bugfix patch
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged iterate patch from Ivan Gyurdiev.
    * Merged MLS in modules patch from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for check_assertions handling of no assertions
    from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed use of policydb_from_image/to_image to ensure proper
    init of policydb.
    * Isolated policydb internal headers under <sepol/policydb/*.h>.
    These headers should only be used by users of the static libsepol.
    Created new <sepol/policydb.h> with new public types and interfaces
    for shared libsepol.
    Created new <sepol/module.h> with public types and interfaces moved
    or wrapped from old module.h, link.h, and expand.h, adjusted for
    new public types for policydb and policy_file.
    Added public interfaces to libsepol.map.
    Some implementation changes visible to users of the static libsepol:
    1) policydb_read no longer calls policydb_init.
    Caller must do so first.
    2) policydb_init no longer takes policy_type argument.
    Caller must set policy_type separately.
    3) expand_module automatically enables the global branch.  
    Caller no longer needs to do so.
    4) policydb_write uses the policy_type and policyvers from the 
    policydb itself, and sepol_set_policyvers() has been removed.


author: Dan Walsh <dwalsh@redhat.com> 1.9.17-1
changelog:
  - Upgrade to latest from NSA
    * Hid sepol_module_package type definition, and added get interfaces.
    * Merged new callback-based error reporting system from Ivan
    Gyurdiev.
    * Merged support for require blocks inside conditionals from
    Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditional expression mapping fix in the module linking
    code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.19-1
changelog:
  - Upgrade to latest from NSA
    * Reworked link_packages, link_modules, and expand_module to use
    callback-based error reporting system rather than error buffering.


author: Dan Walsh <dwalsh@redhat.com> 1.9.21-1
changelog:
  - Upgrade to latest from NSA
    * Changed sepol_module_package_set_file_contexts to copy the
      file contexts data since it is internally managed.
    * Added sepol_policy_file_set_handle interface to associate
      a handle with a policy file.
    * Added handle argument to policydb_from_image/to_image.
    * Added sepol_module_package_set_file_contexts interface.
    * Dropped sepol_module_package_create_file interface.
    * Reworked policydb_read/write, policydb_from_image/to_image, 
      and sepol_module_package_read/write to use callback-based error
      reporting system rather than DEBUG.


author: Dan Walsh <dwalsh@redhat.com> 1.9.23-1
changelog:
  - Upgrade to latest from NSA
    * Added check flag to expand_module() to control assertion
      and hierarchy checking on expansion.
    * Reworked check_assertions() and hierarchy_check_constraints()
      to take handles and use callback-based error reporting.
    * Changed expand_module() to call check_assertions() and 
      hierarchy_check_constraints() prior to returning the expanded
      policy.


author: Dan Walsh <dwalsh@redhat.com> 1.9.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged users cleanup patch from Ivan Gyurdiev.
    * Merged user record memory leak fix from Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.

  - Need to check for /sbin/telinit


author: Dan Walsh <dwalsh@redhat.com> 1.9.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged context interface cleanup, record conversion code, 
      key passing, and bug fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.30-1
changelog:
  - Upgrade to latest from NSA
    * Removed processing of system.users from sepol_genusers and
      dropped delusers logic.
    * Removed policydb_destroy from error path of policydb_read,
      since create/init/destroy/free of policydb is handled by the
      caller now.
    * Fixed sepol_module_package_read to handle a failed policydb_read
      properly.
    * Merged query/exists and count patches from Ivan Gyurdiev.
    * Merged fix for pruned types in expand code from Joshua Brindle.
    * Merged new module package format code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.32-1
changelog:
  - Upgrade to latest from NSA
    * Added further checking and error reporting to 
      sepol_module_package_read and _info.
    * Merged sepol handle passing, DEBUG conversion, and memory leak
      fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.34-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, record bugfix, and set_roles patches 
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.35-1
changelog:
  - Upgrade to latest from NSA
    * Added src/dso.h and src/*_internal.h.
      Added hidden_def for exported symbols used within libsepol.
      Added hidden for symbols that should not be exported by
      the wildcards in libsepol.map.


author: Dan Walsh <dwalsh@redhat.com> 1.9.36-1
changelog:
  - Upgrade to latest from NSA
    * Merged context_to_string interface change patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.38-1
changelog:
  - Upgrade to latest from NSA
    * Removed sepol_port_* from libsepol.map, as the port interfaces
      are not yet stable.


author: Dan Walsh <dwalsh@redhat.com> 1.9.39-1
changelog:
  - Upgrade to latest from NSA
    Prepare for removal of booleans* and *.users files.
    * Cleaned up sepol_genbools to not regenerate the image if
      there were no changes in the boolean values, including the
      degenerate case where there are no booleans or booleans.local
      files.
    * Cleaned up sepol_genusers to not warn on missing local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.9.40-1
changelog:
  - Upgrade to latest from NSA
    * Merged module function and map file cleanup from Ivan Gyurdiev.
    * Merged MLS and genusers cleanups from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.2-2
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - support ordering of records in compare function
      - enable port interfaces
      - add interfaces for context validity and range checks
      - add include guards


author: Dan Walsh <dwalsh@redhat.com> 1.11.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged bugfix for sepol_port_modify from Russell Coker.
    * Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
    * Merged port ordering patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged further fixes from Russell Coker, specifically:
      - av_to_string overflow checking
      - sepol_context_to_string error handling
      - hierarchy checking memory leak fixes and optimizations
      - avrule_block_read variable initialization
    * Marked deprecated code in genbools and genusers.


author: Dan Walsh <dwalsh@redhat.com> 1.11.7-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Fixed hierarchy checker to only check allow rules.


author: Dan Walsh <dwalsh@redhat.com> 1.11.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged cond_expr mapping and package section count bug fixes
      from Joshua Brindle.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.  
    * Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged assertion copying bugfix from Joshua Brindle.
    * Merged sepol_av_to_string patch from Joshua Brindle.
    * Merged clone record on set_con patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.13-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged fix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Added a defined flag to level_datum_t for use by checkpolicy.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged node_expand_addr bugfix and node_compare* change from
      Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12-2
changelog:
  - Upgrade to latest from NSA
    * Updated version for release.
    * Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
    * Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
    * Merged sepol_policydb_mls_enabled interface and error handling
      changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.3-1
changelog:
  - Upgrade to latest from NSA
    * Fixed attr_convert_callback and expand_convert_type_set
      typemap bug.


author: Dan Walsh <dwalsh@redhat.com> 1.12.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for leak of optional package sections from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.6-1
changelog:
  - Upgrade to latest from NSA
    * Fixed cond_normalize to traverse the entire cond list at link time.


author: Dan Walsh <dwalsh@redhat.com> 1.12.9-1
changelog:
  - Upgrade to latest from NSA
    * Dropped tests from all Makefile target.
    * Merged fix warnings patch from Karl MacMillan.
    * Merged libsepol test framework patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.12.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
      Reworked to use calloc in the first place, and converted some other
      malloc/memset pairs to calloc calls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.12-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_policydb_compat_net() interface for testing whether
      a policy requires the compatibility support for network checks
      to be enabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
      based on bug report and suggested fix by Cedric Roux.
    * Merged sens_copy_callback, check_role_hierarchy_callback,
      and node_from_record fixes from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.17-1
changelog:
  - Upgrade to latest from NSA
    * Revert 1.12.16.
    * Merged cleaner fix for bool_ids overflow from Karl MacMillan,
      replacing the prior patch.
    * Merged fixes for several memory leaks in the error paths during
      policy read from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.19-1
changelog:
  - Upgrade to latest from NSA
    * Lindent.
    * Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.12.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged helpful hierarchy check errors patch from Joshua Brindle.
    * Merged semodule_deps patch from Karl MacMillan.
      This adds source module names to the avrule decls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol unit tests from Joshua Brindle.
    * Merged symtab datum patch from Karl MacMillan.
    * Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditionally expand neverallows patch from Jeremy Mowery.
    * Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged range transition enhancements and user format changes
      Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
    * Merged mls user and range_transition support in modules
      from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for version comparison that was preventing range
      transition rules from being written for a version 5 base policy
      from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl MacMillan for a segfault when linking
      non-MLS modules with users in them.


author: Dan Walsh <dwalsh@redhat.com> 1.15.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libselinux.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol segfault fix from Stephen Smalley for when
      sensitivities are required but not present in the base.
    * Merged patch to add errcodes.h to libsepol by Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl to remap booleans at expand time to 
      avoid holes in the symbol table.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 2.0.5-1
changelog:
  - Upgrade to latest from NSA
       * Fix sepol_context_clone to handle a NULL context correctly.
            This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
      to set the file context entry to "<<none>>".
  - Apply patch from Joshua Brindle to disable dontaudit rules


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Upgrade to latest from NSA
    * Eliminate unaligned accesses from policy reading code from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
    * Fixed module_package_read_offsets bug introduced by the prior patch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for the handle_unknown policydb flag from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Reject self aliasing at link time from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
    * Fixed bug in require checking from Stephen Smalley.
    * Added user hierarchy checking from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Upgrade to latest from NSA
    * clarify and reduce neverallow error reporting from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.18-1
changelog:
  - Upgrade to latest from NSA
    * Added support for policy capabilities from Todd Miller.
    * Prevent generation of policy.18 with MLS enabled from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.19-1
changelog:
  - Upgrade to latest from NSA
    * Add support for consuming avrule_blocks during expansion to reduce
      peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Upgrade to latest from NSA
    * Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.21-1
changelog:
  - Upgrade to latest from NSA
    * Fix invalid memory allocation in policydb_index_others() from Jason Tang.


author: Dan Walsh <dwalsh@redhat.com> 2.0.23-1
changelog:
  - Upgrade to latest from NSA
    * Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
    * Add support for open_perms policy capability from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Upgrade to latest from NSA
    * Drop unused ->buffer field from struct policy_file.
    * Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
    * Belatedly merge test for policy downgrade from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.30-1
changelog:
  - Upgrade to latest from NSA
    * Fix endianness bug in the handling of network node addresses from Stephen Smalley.
      Only affects big endian platforms.
      Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.32-1
changelog:
  - Upgrade to latest from NSA
    * Allow require then declare in the source policy from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Upgrade to latest from NSA
    * Add bounds support from KaiGai Kohei.
    * Fix invalid aliases bug from Joshua Brindle.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
changelog:
  * Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
  - Upgrade to latest from NSA
          * Fix alias field in module format, caused by boundary format change
            from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-3
changelog:
  - Apply Eparis Patch
    This patch add libsepol support for filename_trans rules.  These rules
  allow on to make labeling decisions for new objects based partially on
  the last path component.  They are stored in a list.  If we find that
  the number of rules grows to an significant size I will likely choose to
  store these in a hash, both in libsepol and in the kernel.  But as long
  as the number of such rules stays small, this should be good.


author: Dan Walsh <dwalsh@redhat.com> 2.0.44-1
changelog:
  -Update to upstream
  	* Fixes for new role_transition class field by Eric Paris.
  	* Add libsepol support for filename_trans rules by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  - Update to upstream 
  	* Only call role_fix_callback for base.p_roles during expansion.
  	* use mapped role number instead of module role number


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  -Update to upstream
  	* Skip writing role attributes for policy.X and
  	* Indicate when boolean is indeed a tunable.
  	* Separate tunable from boolean during compile.
  	* Write and read TUNABLE flags in related
  	* Copy and check the cond_bool_datum_t.flags during link.
  	* Permanently discard disabled branches of tunables in
  	* Skip tunable identifier and cond_node_t in expansion.
  	* Create a new preserve_tunables flag
  	* Preserve tunables when required by semodule program.
  	* setools expects expand_module_avrules to be an exported
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-2
changelog:
  -The filename_trans code had a bug where duplicate detection was being
  done between the unmapped type value of a new rule and the type value of
  rules already in policy.  This meant that duplicates were not being
  silently dropped and were instead outputting a message that there was a
  problem.  It made things hard because the message WAS using the mapped
  type to convert to the string representation, so it didn't look like a
  dup!


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  - Update to upstream 
  	* regenerate .pc on VERSION change
  	* Move ebitmap_* functions from mcstrans to libsepol
  	* expand: do filename_trans type comparison on mapped representation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
changelog:
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
changelog:
  - Fix off by one error that is causing file_name transition rules to be expanded- incorrectly on i686 machines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* reserve policycapability for redhat testing of ptrace child
  	* cosmetic changes to make the source easier to read
  	* prepend instead of append to filename_trans list
  	* Android/MacOS X build support
  	* allocate enough space to hold filename in trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* fix neverallow checking on attributes
  	* Move context_copy() after switch block in ocontext_copy_*().
  	* check for missing initial SID labeling statement.
  	* Add always_check_network policy capability
  	* role_fix_callback skips out-of-scope roles during expansion.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  - filename_trans: use some better sorting to compare and merge
  - coverity fixes
  - implement default type policy syntax
  - Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  - Richard Haines patch V1 Allow constraint denials to be determined.
  - Add separate role declarations as required by modern checkpolicy.


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Improve error message for name-based transition conflicts.
  	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
  	* Report source file and line information for neverallow failures.
  	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
  	* Add sepol_validate_transition_reason_buffer function from Richard Haines.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-10
changelog:
  - Check for too many permissions in classes and commons in CIL
  - Fix xperm mapping between avrule and avtab
  - tests: Fix mispelling of optimization option
  - Fix unused/uninitialized variables on mac build
  - Produce more meaningful error messages for conflicting type rules in CIL
  - make "make test" fail when a CUnit test fails
  - tests: fix g_b_role_2 test
  - Change which attributes CIL keeps in the binary policy
  - Port str_read() from kernel and remove multiple occurances of similar code
  - Use calloc instead of malloc for all the *_to_val_structs
  - Fix bugs found by AFL
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-3
changelog:
  - Fix neverallow bug when checking conditional policy
  - Destroy the expanded level when mls_semantic_level_expand() fails
  - Do not seg fault on sepol_*_key_free(NULL)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Dmitry V. Levin <ldv@fandra.org>
changelog:
  - filtering out -fno-rtti and -fno-exceptions options from $RPM_OPT_FLAGS
  - minor install section cleanup


author: Denis Leroy <denis@poolshark.org> - 2.2.4.1-1
changelog:
  - Update to upstream 2.2.4.1
  - Added devhelp book and necessary BRs
  - Split documentation into new subpackage
  - Moved documentation to gtk-doc dir


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Karel Klíč <kklic@redhat.com> - 0.0.0-2.git857fe28.el8_7
changelog:
  - Adapted to Ruby 1.9.3 (workaround for broken CMake in Fedora and
    ruby template correction in bindings)


author: Aleš Kozumplik <akozumpl@redhat.com> - 0.0.0-11.gitd39a42b.el8_7
changelog:
  - Rebase to upstream d39a42b.
  - Fix the epochs.
  - Move the ruby modules into vendorarch dir, where they are expected.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.0.0-17.git6c9d3eb
changelog:
  - Rebase to upstream 6c9d3eb.
  - Drop the solv.i stdbool.h fix integrated upstream.
  - Dropped the job reasons fix.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.3.0-5.git228d412
changelog:
  - Rebase to upstream 228d412.
  - Fixes hawkey github issue https://github.com/akozumpl/hawkey/issues/13


author: Jan Silhan <jsilhan@redhat.com> - 0.6.11-1
changelog:
  - new version fixing segfault
  - RbConfig fixed in the upstream (1928f1a), libsolv-ruby22-rbconfig.patch erased


author: Jan Silhan <jsilhan@redhat.com> - 0.6.11-3
changelog:
  - added compile flag to support rich dependencies
  - new version adding MIPS support
  - Distribute testsolv in -tools subpackage (Igor Gnatenko)
  - Enable python3 bindings for fedora (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.14-7
changelog:
  - Rebase to upstream b1ea392
  - Enable bz2 compression support (Mikolaj Izdebski <mizdebsk@redhat.com>) (RhBug:1226647)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.6.20-2
changelog:
  - Backport patch to fix crashing on reading some repos (RHBZ #1318662)
  - Backport patch to fix installing multilib packages with weak deps
    (RHBZ #1325471)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.6.22-1
changelog:
  - Update to 0.6.22
  - Backport patch which will help to not autoremove needed packages
    (RHBZ #1227066, #1284349)


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Matthias Clasen <mclasen@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - See http://mail.gnome.org/archives/gnome-announce-list/2010-February/msg00059.html


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Tom Callaway <spot@fedoraproject.org>
changelog:
  - api changes between 1.4.4 and 1.5.0, bump sover to 1.0.0
  - fix linking issue to make proper libsrtp.so.1


author: Thomas Woerner <twoerner@redhat.com> 1.38-1
changelog:
  - new version 1.38
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
    Merged from RHEL-4
  - enable tune2fs to set and clear feature resize_inode (#167816)
  - removed outdated information from ext2online man page (#164383)


author: Thomas Woerner <twoerner@redhat.com> 1.38-2
changelog:
  - splitted up libs from main package, into a new e2fsprogs-libs package
  - fixed requires and prereqs


author: Thomas Woerner <twoerner@redhat.com> 1.38-2.1
changelog:
  - fixed file conflicts between 32bit and 64bit packages (#168815)
  - fixed mklost+found crashes with buffer overflow (#157773)
    Thanks to Arjan van de Ven for the patch


author: Thomas Woerner <twoerner@redhat.com> - 1.39-1
changelog:
  - new version 1.39
  - dropped ext2online, because resize2fs is now able to do online resize
  - spec file cleanup
  - enabled checks for build


author: Eric Sandeen <esandeen@redhat.com> 1.39-14
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-3
changelog:
  - Update license tags
  - Fix one open-create caller with no mode
  - Protect ->open ops from glibc open-create-mode-checker
  - Fix source URL
  - Add gawk to BuildRequires


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-10
changelog:
  - Make (more) file timestamps match those in tarball for multilib tidiness 
  - Fix e2fsprogs-libs summary (shared libs not static)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-12
changelog:
  - Use upstream patch for blkid fat detection, avoids div-by-zero
    when encountering some BSD partitions (#398281)


author: Stepan Kasal <skasal@redhat.com> 1.40.2-13
changelog:
  - The -devel package now requires device-mapper-devel, to match
    the dependency in blkid.pc (#410791)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-15
changelog:
  - Drop resize_inode removal patch from tune2fs; ostensibly was
    for old kernels which could not mount, but seems to be fine.
  - Drop pottcdate removal patch, and don't rebuild .po files,
    causes multilib problems and we generally shouldn't rebuild.
  - Drop multilib patch; wrapper header should take care of this now.
  - Drop ->open rename, Fedora seems ok with this now.


author: Eric Sandeen <sandeen@redhat.com> 1.40.4-7
changelog:
  - Fix sb flag comparisons properly this time (#428893)
  - Make 256-byte inodes for the [default] mkfs case.
    This will facilitate upgrades to ext4 later, and help xattr perf.


author: Eric Sandeen <esandeen@redhat.com> 1.40.7-1
changelog:
  - New upstream version, special leap-day edition
  - Fix resize2fs losing inline xattrs when shrinking (#434893)
    and add patch to fix swap_inode_full in this case
  - Allow mke2fs & tune2fs to manipulate large_file feature (#258381)
  - Handle lvm error conditions in libblkid (#433857)
  - Allow tune2fs to clear the resize_inode feature (#167816)
  - Teach blkid to detect LVM2 physical volumes (#409321)
  - Show "mostly printable" xattrs as text in debugfs (#430621)
  - Trimmed pre-1.38 rpm changelog entries


author: Eric Sandeen <esandeen@redhat.com> 1.40.8-2
changelog:
  - Update ext2fs_swap_inode_full() fix to match upstream
  - Check more of swapv1 header in blkid detection (#442937)


author: Eric Sandeen <sandeen@redhat.com> 1.41.2-1
changelog:
  - New upstream version
  - Updated default dir hash (half_md4) for better perf & fewer collisions
  - Fixed ext4 online resizing with flex_bg
  - ext4 journal now in extents format and in middle of filesystem
  - fix unreadable e2image files
  - fix file descriptor leak in libcom_err (#464689)


author: Eric Sandeen <sandeen@redhat.com> 1.41.3-3
changelog:
  - Remove conservative "don't change journal location" patch for F11
  - Add btrfs recognition to blkid


author: Eric Sandeen <sandeen@redhat.com> 1.41.4-4
changelog:
  - Edit summary & description to include ext4 (#487469)
  - Fix blkid null ptr deref in initrd (#486997)


author: Karel Zak <kzak@redhat.com> 1.41.6-3
changelog:
  - temporary use BuildRequires: e2fsprogs-devel (we cannot install 
    new util-linux-ng with libblkid to buildroots without new e2fsprogs 
    without libblkid).


author: Eric Sandeen <sandeen@redhat.com> 1.41.6-5
changelog:
  - Update journal backup blocks in sb after resize (#505339)
  - Fix memory leak in extent handling functions
  - Fix bug in inode writing in extent code, clobbered i_extra_isize etc


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-8
changelog:
  - Fix up topology patch to build w/ new util-linux-ng
  - Fix endian swapping of backup journal blocks in sb


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-9
changelog:
  - Fix up stray output & re-enable make check
  - Fix dlopen issues for newer libreadline
  - Fix access beyond end of array in resize2fs


author: Eric Sandeen <sandeen@@redhat.com> 1.42.2-5
changelog:
  - Add broken system clock config to e2fsck.conf to let boot
    continue even if system clock very wrong.


author: Eric Sandeen <sandeen@redhat.com> 1.42.8-2
changelog:
  - Interpackage dependencies should be for same arch
  - Remove newly added but failing resize2fs tests for now


author: Dan Horák <dan@danny.cz> - 1.42.10-5
changelog:
  - Rebuilt for buggy rpm 4.12 alpha -
    https://lists.fedoraproject.org/pipermail/devel/2014-June/200633.html


author: Eric Sandeen <sandeen@redhat.com> 1.42.12-4
changelog:
  - Fix potential buffer overflow in closefs (#1193947, CVE-2015-1572)
  - Fix dumpe2fs segfault with no arguments (#1194063)
  - Don't require fsck prior to resize2fs -P (#1170803)


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Eduard Abdullin <eabdullin@almalinux.org> - 2.8.2-3.alma
changelog:
  - Apply 0005-watchdog-add-arm_watchdog-and-disarm_watchdog-calls
   0006-sbus-arm-watchdog-for-sbus_connect_init_send
   0007-sysdb-fix-string-comparison-when-checking-for-overrides patches


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


author: Tony Asleson <tasleson@redhat.com> 0.0.9-1
changelog:
  - Initial checkin of lio plug-in
  - System filtering via URI (smispy)
  - Error code mapping (ontap)
  - Fixed build so same build tarball is used for all binaries


author: Tony Asleson <tasleson@redhat.com> - 0.0.20-1
changelog:
  - New upstream release
  - Separate package for python libraries
  - Make timestamps match on version.py in library
  - Add python-paramiko requirement for IBM plug-in


author: Tony Asleson <tasleson@redhat.com> 0.0.21-1
changelog:
  - New upstream release
  - Put plug-ins in separate sub packages
  - Don't include IBM plug-in on RHEL > 6, missing paramiko


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Specify udev files to /usr/lib dir instead of /lib
  - Move command line python files to python package


author: Gris Ge <fge@redhat.com> - 1.2.1-1
changelog:
  - New upstream release 1.2.1.
  - Changed upstream URL and source URL to github.
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
          New plugin in 1.2.0 release.
      * libstoragemgmt-hpsa-plugin
          New plugin in 1.2.0 release.
  - Add bash-completion script for lsmcli.
  - New rpmbuild switch: 
      * '--without test'
          Use to skip 'make check' test to save debug time.
      * '--without megaraid'
          Don't compile megaraid plugin.
      * '--without hpsa'
          Don't compile hpsa plugin.
  - Remove PyYAML BuildRequires.
  - Add NEWS(changelog) to document folder.
  - Replace the hardcoded udev path with <percent>{_udevrulesdir}.
  - Fix rpmlint error 'dir-or-file-in-var-run'.
  - Mark /run/lsm and /run/lsm/ipc as <percent>ghost folder.
  - Fix rpmlint warnning 'W: non-standard-uid /run/lsm libstoragemgmt'.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.
  - Fix the incorrect use of <percent>bcond_with and <percent>bcond_without.
  - Removed autogen.sh which is not required for release version any more.


author: Gris Ge <fge@redhat.com> 1.2.3-1
changelog:
  - New upstream release 1.2.3:
      * Bug fixes:
          * lsmcli bash completion: Fix syntax error.
          * lsmcli bash completion: Fix volume-delete.
          * lsmcli bash completion: Add missing completions.
          * Fix: selinux dac_override
          * Manpage: Update hpsa and megaraid plugin manpages.
          * HP Smart Array Plugin: Fix pool querying on P410i.
          * MegaRAID Plugin: Fix bug when no volume configured.


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem(this rpm use pywbem instead).
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary packages renamed to python2-libstoragemgmt and python2-libstoragemgmt-clibs
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - %python_provide added for all four python subpackages


author: Gris Ge <fge@redhat.com> - 1.5.0-0
changelog:
  - New upstream release 1.5.0:
      * New sub-package libstoragemgmt-nfs-plugin, libstoragemgmt-arcconf-plugin,
        and libstoragemgmt-local-plugin.
      * C API manpages for libstoragemgmt-devel package.


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Doug Ledford <dledford@redhat.com> - 2.0.0-3
changelog:
  - Split the library and devel files out to libsysfs and leave the utils
    in sysfsutils.  This is for multilib arch requirements.


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-1
changelog:
  - Initial package based on package by Supphachoke Suntiwichaya
    and Kamthorn Krairaksa for the OLPC.


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-2
changelog:
  - Apply comments from Matthias Clasen (#222611) 
  - devel summary improvement
  - devel require pkgconfig
  - configure --disable-static
  - Add comments about the voodoo
  - Install docs in the right place


author: Daiki Ueno <dueno@redhat.com> - 0.1.19-1
changelog:
  - Update to 0.1.19
  - Fix bogus dates in %changelog
  - Remove libthai-0.1.9-doxygen-segfault.patch, which is no longer
    necessary with the latest Doxygen
  - Don't install man pages, as per upstream's default


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0beta2-2
changelog:
  - Put Obsoletes/Provides theora-exp-devel in the -devel package instead of in
    the -tools package (oops)
  - Install png2theora (bz 349951)


author: Hans de Goede <hdegoede@redhat.com> 1:1.0-1
changelog:
  - 1.0 final release
  - need epoch because we were not using the special pre-release
    version-release scheme used now a days in Fedora :(


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-7
changelog:
  - Remove no longer needed autoreconf call, %configure from redhat-rpm-config
    >= 9.1.0-42 updates config.guess and config.sub for new architecture support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-23
changelog:
  - Fix various CVEs
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: RHEL-5075 RHEL-5078 RHEL-5079 RHEL-5080 RHEL-5081


author: Robert Scheck <robert@fedoraproject.org> 0.9.3-1
changelog:
  - Upgrade to 0.9.3 (#466825, thanks to Hans de Goede)
  - Enabled libv4l support for the new gspca kernel driver


author: Robert Scheck <robert@fedoraproject.org> 0.9.8-1
changelog:
  - Upgrade to 0.9.8 (#530702, #567109, #567110, #567111)
  - Splitting of unicap into libunicap, libucil and libunicapgtk


author: Kamil Dudka <kdudka@redhat.com> 0.9.8-3
changelog:
  - fix SIGSEGV in ucil_alsa_fill_audio_buffer (#572966)
  - fix SIGSEGV in ucil_theora_encode_thread (#595863)


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Kamil Dudka <kdudka@redhat.com> 0.9.12-2
changelog:
  - build the package in %build
  - fix tons of compile-time warnings
  - fix some memory errors in the code


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Roozbeh Pournader <roozbeh@gmail.com> - 20080409-1
changelog:
  - Update to upstream 20080409: Unicode 5.1 support
  - Change package versioning scheme
  - Update summary and description
  - Add DistTag
  - Remove copy of GPL from RPM: the only file it applies to is not shipped


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-7
changelog:
  - merge review spec fixes (#226053)
  - create -static subpackage to ship static libs separately
  - don't use auto* stuff, drop automake, libtool deps
  - BuildRequire openjade, fix Requires


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-10
changelog:
  - optimize usb_find_devices() and use openat() instead of open()
   (#273901), thanks to Ulrich Drepper
  - BR gawk


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-12
changelog:
  - remove unnecessary 1ms wakeups while USB transfers are in progress,
    thanks to Scott Lamb (#408131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Miloslav Trmač <mitr@redhat.com> - 0.61-1
changelog:
  - Update to libuser-0.61, notably adding Python 3 bindings
    Resolves: #1014555
  - Filter out libuser plugin and Python extension Provides:


author: Stephen Gallagher <sgallagh@redhat.com> - 0.62-7
changelog:
  - Fix FTBFS on Fedora 26+
  - Add patch to fix issues with -Werror=format-security
  - Ensure that the python 3 tests use a locale guaranteed to be present


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.62-10
changelog:
  - Python 2 binary package renamed to python2-libuser
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-14
changelog:
  - Do not build python2-libuser at all in RHEL-8
  - Resolves: #1559103 - libuser: Drop Python 2 subpackage(s) from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-16
changelog:
  - Use 2048bit keys in tests
  - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Dmitry V. Levin <ldv@altlinux.ru> 0.5.2-alt3
changelog:
  - Specfile cleanup.
  - Owl-compatible changes:
    + added utempter group;
    + utempter binary moved to {_libdir}/utempter.d,
      owned by group utempter with 710 permissions.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.0-alt1
changelog:
  - Rewritten the code completely.
  - Renamed to libutempter.
  - Corrected the package description.
  - FHSificated (yes, there are no more {_sbindir}/utempter).
  - Libificated.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.3-alt1
changelog:
  - Added compatibility declarations to ease upgrade of old applications.
  - Added small README file.
  - Corrected provides.


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-0.2.git09b0222
changelog:
  - Fixes from package review
  - Removed doubly-listed include directory
  - Update git tarball to the latest upstream code


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.10.5-2
changelog:
  - Add patch to properly report soname version information
    This patch will be included upstream in 0.10.6 and can be dropped then.
  - Remove Bundles(ev) as this has not been true since 0.9.5


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.5-3
changelog:
  - don't sed the soname in the spec anymore; the patch takes care of it now
  - drop leftover global define for git revision


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Hans de Goede <hdegoede@redhat.com> 0.8.2-2
changelog:
  - Change tarbal to official upstream 0.8.2 release
  - This fixes multiple Makefile issues pointed out in the review (#671883)
  - Add ir-keytable config files
  - Explicitly specify CXXFLAGS so that qv4l2 gets build with rpm_opt_flags too


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Simone Caronni <negativo17@gmail.com> - 0.6-2
changelog:
  - Enable documentation by default.
  - Clean up spec file a bit; remove el5 tags.
  - Let %doc find the proper location for the documentation.


author: David Tardon <dtardon@redhat.com> - 0.1.5-5
changelog:
  - fix char background color in some cases
  - fix handling of bitmaps in Windows Bitmap format that contain a color
    palette


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.9-10
changelog:
  - include additional dependencies for x11vnc (#864947)
  - %build: --disable-silent-rules
  - cleanup spec, drop support for old rpm (el5)


author: Rex Dieter <rdieter@fedoraproject.org> 0.9.10-0.6.20140718git9453be42
changelog:
  - Security fixes (#1145878) ...
  - CVE-2014-6051 (#1144287)
  - CVE-2014-6052 (#1144288)
  - CVE-2014-6053 (#1144289)
  - CVE-2014-6054 (#1144291)
  - CVE-2014-6055 (#1144293)


author: Simone Caronni <negativo17@gmail.com> - 0.9.10-1
changelog:
  - Update to official 0.9.10 release, update configure parameters and remove
    upstreamed patches.
  - Trim changelog.
  - Clean up SPEC file.
  - Add license macro.
  - Remove very old obsolete/provides on pacakge with camel case (LibVNCServer).


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.11-2
changelog:
  - libvncclient sets +SRP in priority string (#1449605)
  - libvncserver blocks gtk-vnc clients >= 0.7.0 (#1451321)


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: - Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.5-0.2
changelog:
  - Requires only malaga-suomi-voikko, BR malaga-devel and malaga-suomi-voikko
  - Remove static archive


author: - Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.5-0.3
changelog:
  - libvoikko-devel: remove unneeded Requires: malaga-devel
  - install with -p so that timestamps are preserved


author: - Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.6-1
changelog:
  - libvoikko 1.6
  - Add versioned BuildRequires and Requires as per the Voikko release notes
    at http://voikko.sourceforge.net/releases.html


author: - Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.6-3
changelog:
  - Put voikkospell and voikkohyphenate into a separate voikko-tools
    subpackage to decrease the size of the binary libvoikko package


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.0-0.1.rc1
changelog:
  - New release candidate, including the new voikkogc tool in voikko-tools
  - Add defattr to voikko-tools
  - Drop upstreamed pkg-config patch


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.1-0.1.rc1
changelog:
  - New release candidate
  - Improvements on grammar checking and dictionary loading
  - Raise malaga-suomi-voikko dependency to 1.3-10, which has the new dictionary
    data directory layout needed by this version of libvoikko
  - Add BuildRequires python for running the trie compiler during build
  - Add patch for GCC 4.4 and glibc 2.90 compliance
  - Add patch to fix warn_unused_result errors


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2-0.1.rc1
changelog:
  - New release candidate
  - Improvements to spelling suggestions, grammar checker etc.
  - Libvoikko now uses its own internal implementation of malaga.
  - This prevents symbol conflicts such as https://bugzilla.redhat.com/502546
  - BuildRequires malaga removed and glib2-devel added.
  - Require malaga-suomi-voikko >= 1.4, libvoikko 2.2 expects the newer
    dictionary format
  - Add a patch to make it compile on Fedora with -Werror


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2.2-1
changelog:
  - Version 2.2.2 fixes a crash found in version 2.2.1 that can occur when the
    APIs that use wchar_t strings as arguments are used.


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.2.1-1
changelog:
  - New upstream release
  - Fixes handling of embedded null characters in input strings entered through
    Python or Java interfaces.


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.3.1-0.1.rc1
changelog:
  - New upstream release candidate, fixes a bug which crashed Firefox when
    using Finnish spell checking.


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.3.1-0.3.rc1
changelog:
  - Remove the isa macro from the malaga-suomi-voikko dependency,
    malaga-suomi-voikko is not a library and is thus not multilib'd. The previous
    change was a misunderstanding.


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.4-1
changelog:
  - Update to the latest upstream release:
  - A crash bug affecting grammar checker has been fixed.
  - New grammar checker rule for missing verbs has been added.


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.6.1-1
changelog:
  - New upstream release
  - Remove voikkovfstc from the package, it is not built by default anymore
  - Update upstream URLs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-5
changelog:
  - Mark data subpackage as noarch and make it a requirement for libwacom
  - Use generated udev rule file to list only known devices from libwacom
    database


author: Peter Hutterer <peter.hutterer@redhat.com> 0.5-2
changelog:
  - Fix gnome-control-center crash for Bamboo Pen & Touch
  - Generic styli needs to have erasers, default to two tools.


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-1
changelog:
  - get patches merged upstream
  - drop integrated libwmf-0.2.8.3-warnings.patch
  - drop integrated libwmf-0.2.8.3-noextras.patch
  - drop integrated libwmf-0.2.8.3-rh154813.patch


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-16
changelog:
  - I wrote it and still had to check the headers to see if I had
    cut and pasted "and later" into then


author: Ville Skyttä <ville.skytta at iki.fi> - 0.2.8.4-18
changelog:
  - Split libwmflite (WMF parser) into -lite subpackage (#432651).
  - Build with dependency tracking disabled.
  - Convert docs to UTF-8.


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-45
changelog:
  - Related: rhbz#1227244 CVE-2015-4695 meta_pen_create heap buffer overflow
  - Related: rhbz#1227244 CVE-2015-4696 wmf2gd/wmf2eps use after free


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-49
changelog:
  - Resolves: rhbz#1388451 (CVE-2016-9011) check max claimed record len
              against max seekable position


author: Caolán McNamara <caolanm@redhat.com> - 0.2.9-1
changelog:
  - Resolves: rhbz#1602602 new version with covscan warnings fixed
  - all cve fixes merged to that new upstream


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-2
changelog:
  - Updated the spec file to adhere to the upstream standard of breaking
  - the package in server, client, lib modules 
  - randfile.patch: when openwsmand daemon creates a certificate the
  - first time it needs a file which have random content it. This
  - is pointed to $HOME/.rnd in /etc/openwsman/ssleay.cnf. Changed this
  - random file to /dev/urandom. 
  - initscript.patch: patch to edit the init script so that the services
  - are not started by default.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-3
changelog:
  - authors.patch: Moved all the AUTHORS info to AUTHORS file.
  - Corrected the Source tag.
  - Corrected the package dependencies to break cyclic dependencies.
  - Fixed the default attributes.
  - Fixed the preun & postun scripts, to make sure the openwsmand service
  -    is stopped before the package is removed.
  - Added 'condrestart' function to the init script.
  - Had to let the *.so files be part of the openwsman-server becuase
  -    some of the source files explicitly call out for *.so files.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-6
changelog:
  - Fixed the version checking of swig and forced all the ruby files to be 
  -   installed into site{lib,arch} dirs


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-7
changelog:
  - Moved the certificate generation from init script. The user will have to 
  -   generate the certificate manually.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.4-1
changelog:
  - Update to openwsman-2.2.4
  - Add help2man generated manpage for openwsmand binary
  - Add missing openwsman headers to libwsman-devel
  - Add configuration file to openwsman-client


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-2
changelog:
  - Build with full relro
  - Fix provides/requires
  - Fix pam.d config (patch by Ales Ledvinka)
    Resolves: #1013018


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.4-1
changelog:
  - Update to openwsman-2.4.4
  - Provide rubygem-openwsman instead of openwsman-ruby (patch by Vit Ondruch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.1-1
changelog:
  - Update to openwsman-2.6.1
  - Review PAM rules
    (pam_pwcheck is replaced by pam_pwquality, pam_unix has no 'none' option)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.3-6.git4391e5c
changelog:
  - Python 2 binary package renamed to python2-openwsman
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-8.git4391e5c
changelog:
  - Spec file clean up (removed RPM Groups tags, removed obsolete chkconfig/initscripts
    dependencies, improved readability, fixed indentation)
  - Updated openssl-1.1 patch to support builds with older openssl versions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Björn Esser <besser82@fedoraproject.org> - 4.0.0-0.201.20171109git15447aa
changelog:
  - Use archful Obsoletes for libcrypt
  - Add versioned Requires on glibc packages not shipping libcrypt
  - Add comments about the packaging logic for replacing former libcrypt


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: Rex Dieter <rdieter@fedoraproject.org> - 0.4.2-1
changelog:
  - xkbcommon 0.4.2 (#1000497)
  - own %{_includedir}/xkbcommon/
  - -x11: +ldconfig scriptlets
  - -devel: don't include xkbcommon-x11.h
  - run reautoconf in %prep (instead of %build)
  - tighten subpkg deps via %_isa
  - .spec cleanup, remove deprecated stuff
  - BR: pkgconfig(xcb-xkb) >= 1.10


author: Rex Dieter <rdieter@fedoraproject.org> - 4.0-2
changelog:
  - %files: track files closer, esp lib sonames
  - %build: drop --disable-doxygen, add --disable-static, add %{?_smp_mflags}


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: John Eckersberg <jeckersb@redhat.com> - 0.1.5-1
changelog:
  - New upstream release 0.1.5 (bz1061087)
  - Removed patches for CVE-2013-6393; they are included in 0.1.5
    upstream


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed default papersize to letter (from a4...sorry Europeans :-)
    use --papersize=a4 on any sgml2* command to change it or remove the
    patch from this spec file and rebuild.


author: Tim Waugh <twaugh@redhat.com> 0.9.15-1
changelog:
  - 0.9.15; incorporates most of the libdir patch.
  - The fixsgml2latex patch is no longer required.
  - Installed documentation now works.
  - Don't ship backup files.
  - Put the LaTeX style files in the texmf directory tree.
  - Requires: gawk, groff.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Allow rpms without a tetex dependency. That allows using sgml things
    for online things without installing the heavy tetex.


author: Tim Waugh <twaugh@redhat.com> 0.9.21-8
changelog:
  - Applied patch from Kir Kolyshkin (bug #204902):
    - added a patch from debian bug #321998 (obsoletes patch -badif)


author: Ondrej Vasik <ovasik@redhat.com> 0.9.21-13
changelog:
  - running texconfig-sys rehash in post to let latex know 
    about new style installed by linuxdoctools


author: Ondrej Vasik <ovasik@redhat.com> 0.9.21-14
changelog:
  - texconfig-sys rehash in postun, removal of texhash in post
    and postun(discussed with Jindrich Novy)


author: Ondrej Vasik <ovasik@redhat.com> 0.9.66-5
changelog:
  - Merge review changes(#226098) - ship more docs, remove
    unnecessary things, require 5.10.1 perl for directory
    structure


author: Ondrej Vasik <ovasik@redhat.com> 0.9.66-8
changelog:
  - make the dependency on perl vendor lib location more stable
  - use global macro instead of define macro


author: Bill Nottingham <notting@redhat.com>
changelog:
  - check that we can open the device r/w before locking
  - fix calling lockdev without any arguments
  - fix waitpid() call in baudboy.h
  - use umask(002), not umask(0)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.0-16
changelog:
  - include liblockdev.so so that programs can link to a shared liblockdev
  - fix shared library version numbers


author: Adrian Havill <havill@redhat.com> 1.0.1-1
changelog:
  - bumped version
  - make the dev rewrite work with ttys in the /dev/input subdir, not just
    the base level dir (#98160)


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.1-20
changelog:
  - Fixed pre section (http://fedoraproject.org/wiki/Packaging/UsersAndGroups)
  - Added back Buildroot to silence rpmlint's false positive


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.3-1
changelog:
  - 1.0.3.  No longer need 1.0.0-signal, 1.0.1-subdir, 1.0.1-fcntl, 1.0.1-32bit patches.
  - Renumbered patches and sources.


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.3-6
changelog:
  - Added /etc/tmpfiles.d/lockdev.conf to enable lock directory on tmpfs (#656614)
  - Don't ship static library at all


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.3-10
changelog:
  - Revert previous change (#681898)
  - /etc/tmpfiles.d/lockdev.conf moved into systemd upstream (#692714)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-0.27.20111007git
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Hans de Goede <hdegoede@redhat.com> - 5.2.2-3
changelog:
  - Drop compat-lua-libs package, as there now is a separate compat-lua
    package (including a -devel)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated from 2.6 to 2.7.1
  - moved /usr/lib/lynx.cfg to /etc/lynx.cfg
  - build with slang instead of ncurses
  - made default startup file be file:/usr/doc/HTML/index.html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - apply some update patches from the lynx folks
  - set user's TEMP dir to their home dir to avoid /tmp races


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add "passive mode ftp" option, activated by PASSIVE:TRUE in /etc/lynx.cfg
  - turn on "PASSIVE:TRUE" by default
  - deal with the fact that RPM compresses man pages.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 2.8.3dev18
  - drop the RFC compliance patch - they seemed to have done theiir own
  - pray that ported patches are okay


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man page lolcation to be FHS compliant
  - use predefined RPM macros wherever possible
  - use %makeinstall
  - cleaned up files list


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of standard page and help page in lynx.cfg (still
    pointed at /usr/doc instead of /usr/share/doc, Bug #13227)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update build URL
  - Fix help (Bug #18394)
  - Replace the "index page link" (pointing to a Mosaic site with thousands
    of dead links) with a link to Google


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.8.4dev16
  - Fix up the i18ncfg patch - segfaulting on startup is not exactly
    a nice feature.
  - Mark locale related files as such
  - Mark /etc/lynx.cfg.ja as %lang(ja)
  - Add BuildRequires


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - dev20
  - Add ipv6 patches from Pekka Savola <pekkas@netcore.fi>:
    - enable ipv6, patch for missing sockaddr sa_len
    - buildrequires: slang-devel, zlib-devel
    (Bug #35644)


author: Tim Waugh <twaugh@redhat.com> 2.8.5-14
changelog:
  - Updated to dev16, fixing bug #110196.
  - No longer need crlf patch.
  - Use shipped ja translations.
  - Use %find_lang.
  - Default config file now sets UTF-8 (bug #110986).


author: Tim Waugh <twaugh@redhat.com> 2.8.5-20
changelog:
  - Added --enable-locale-charset compilation option, set LOCALE_CHARSET
    on in the config file and removed i18ncfg patch (bug #124849).


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.8.6-16
changelog:
  - updated to latest stable version 2.8.6rel5
  - Resolves: #214205
  - added build patches from Dennis Gilmore
  - skipped 2 releases to correct the NVR path


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.8.6-18
changelog:
  - Fixed CVE-2008-4690 lynx: remote arbitrary command execution.
    via a crafted lynxcgi: URL (thoger)


author: Kamil Dudka <kdudka@redhat.com> - 2.8.7-1
changelog:
  - new upstream release
  - dropped applied patches
  - fixed regression from #533004
  - cleanup in BuildRequires


author: Kamil Dudka <kdudka@redhat.com> - 2.8.7-10
changelog:
  - sync the upstream tarball with the current upstream version
  - fix specfile issues reported by the fedora-review script


author: Kamil Dudka <kdudka@redhat.com> - 2.8.8-0.1.dev15
changelog:
  - update to the latest upstream pre-release
  - drop applied patches
  - drop lynx-2.8.6-backgrcolor.patch (#908449)


author: Kamil Dudka <kdudka@redhat.com> - 2.8.8-0.3.dev16
changelog:
  - update to the latest upstream pre-release
  - make the help working with unversioned docdir (#993909)


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.5.dev4
changelog:
  - update to the latest upstream pre-release
  - drop a compiler wrapper no longer needed
  - do not override compiler/linker flags given by the build system


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.17.dev16
changelog:
  - fix rpmlint warnings
  - do not depend on perl
  - update upstream project URL
  - update to the latest upstream pre-release


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0-4
changelog:
  - Add fedora local resolver
  - Fix quoting of arguments to mvn scripts
  - Add javadoc subpackage
  - Make jars versionless and remove unneeded clean section


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0-5
changelog:
  - Fix bugs #667625 #667614 and #667636
  - Install maven metadata so they are not downloaded when mvn is run
  - Rename mvn3-local to mvn-local
  - Add more comments to resolver patch


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.2-2
changelog:
  - Added mvn-rpmbuild script to be used in spec files
  - mvn-local is now mixed mode (online with javadir priority)
  - Changed mvn.jpp to mvn.local


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.3-5
changelog:
  - Process fragments directly instead of maven2-depmap.xml
  - Expect fragments in /usr/share/maven-fragments
  - Resolve poms also from /usr/share/maven-poms


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.3-6
changelog:
  - Fix handling of fallback default_poms
  - Add empty-dep into maven package to not require maven2 version


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.4-2
changelog:
  - Make javadoc noarch
  - Make compilation source level 1.5
  - Fix borked tarball unpacking (reason unknown)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.4-12
changelog:
  - Look into maven.repo.local first to handle corner-case packages (#865599)
  - Finish handling of compatibility packages
  - Disable animal-sniffer temporarily in Fedora as well


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.1.0-9
changelog:
  - Synchronize JAR list in lib/ with upstream release
  - Remove test dependencies on aopalliance and cglib


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.1.0-10
changelog:
  - Add dependencies of wagon-http-shaded to plexus.core
  - Remove objectweb-asm from plexus.core
  - Add explicit requires
  - Resolves: rhbz#1023872


author: Deepak Bhole <dbhole@redhat.com> - 0:2.2.1-2
changelog:
  - Added support for dumping mapping info (in debug mode)
  - Add a custom depmap
  - Added empty-dep
  - Added proper requirements
  - Fixed classworlds jar name used at runtime
  - Install individual components
  - Install poms and mappings
  - Remove non maven items from shaded uber jar
  - Create dependency links in $M2_HOME/lib at install time


author: Alexander Kurtakov <akurtako@redhat.com> 2.2.1-10
changelog:
  - Remove buildnumber-maven-plugins deps now that is fixed.
  - Use new package names in BR/R.
  - Use global instead of define.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-14
changelog:
  - Remove old depmaps from -depmap.xml file
  - Fix argument quoting for mvn scripts (Resolves rhbz#647945)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-17
changelog:
  - Add conditional BRs to enable ff merge between f14 and f15
  - Remove jackrabbit dependency from pom files


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-23
changelog:
  - Split artifact-manager and project into subpackages
  - Fix resolver to process poms and fragments from datadir
  - No more need to update_maven_depmap after this update


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2.1-44
changelog:
  - Don't depend on plexus-container-default
  - Unset M2_HOME before calling mvn-rpmbuild
  - Remove test dependencies


author: Michal Srb <msrb@redhat.com> - 2.2.1-45
changelog:
  - Add missing BR: maven-install-plugin (Resolves: #979504)
  - Migrate to plexus-containers-container-default


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2.1-47
changelog:
  - Remove code related to bootstrapping
  - Remove empty-dep JAR and POM
  - Remove local depmap
  - Use mfiles to simplify %files sections
  - Remove handling of custom settings.xml
  - Build with XMvn


author: Tomas Radej <tradej@redhat.com> - 1:1.0-4
changelog:
  - Installing folders separately with -m 755
  - Installing NOTICE in javadoc subpackage
  - Fixed changelog


author: Jaromir Capik <jcapik@redhat.com> 2.2.1-2
changelog:
  - Migration from plexus-maven-plugin to plexus-containers-component-metadata
  - Missing modello dependency added
  - Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.2-4
changelog:
  - Add few missing (Build)requires
  - Remove post(un) scriptlets with update_maven_depmap
  - Use new add_maven_depmap macro


author: Tomas Radej <tradej@redhat.com> - 2.4-1
changelog:
  - Updated to the upstream version
  - Partially removed a test because of a legacy class use
  - Removed exception checking as it has already been done


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a7.3jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed %post and %postun sections for javadoc.
  - Fixed instructios on how to generate source drop.
  - Fixed %Summary.
  - Added gcj support option.
  - Marked configuration file as %config(noreplace) in %files section.


author: Andrew Overholt <overholt@redhat.com> 0:1.0-0.5.a10
changelog:
  - Update to 1.0 alpha 10 courtesy of Deepak Bhole
  - Remove gcj support
  - Add patch to build against iText 2.x (with back-ported XML classes)


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-1
changelog:
  - Update to 1.1.2
  - Add update_maven_depmap to post and postun
  - Temporarily disable javadoc until maven2-plugin-javadoc is rebuilt against
    the new doxia


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3-1
changelog:
  - New bugfix version
  - Fix javadoc generation error
  - Use %{_mavenpomdir} macro
  - Update BRs to latest maven plugin names
  - Use new plexus-containers components
  - Remove/update old patches


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.4-1
changelog:
  - Update to 1.1.4
  - Migrate from tomca5 to tomca6
  - Versionless jars and javadocs
  - Remove old skip-plugin patch
  - Replace add-default-role-hint patch with remove-plexus-component patch
  - Rename few jakarta BRs/Rs to apache names


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.2-1
changelog:
  - Update to latest upstream (1.2)
  - Use maven 3 to build
  - Remove version limits on BR/R (not valid anymore anyway)
  - Remove "assert" patch (no explanation for it's existence)


author: Michal Srb <msrb@redhat.com> - 0:1.2-5
changelog:
  - Migrated to plexus-components-component-default (Resolves: #878553)
  - Removed custom depmap and its occurrence in spec file
  - Fixed various rpmlint warnings


author: Michael Simacek <msimacek@redhat.com> - 0:1.5-1
changelog:
  - Update to upstream version 1.5
  - Move back RenderingContext.java that was moved to doxia-sitetools which
    doesn't have a release yet


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-1
changelog:
  - Update to 1.1.2
  - Temporarily disable javadoc until maven2-plugin-javadoc is rebuilt against
    the new doxia


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-2
changelog:
  - Add (Build)Requirement maven-shared-reporting-impl,
    plexus-containers-container-default, jakarta-commons-configuration


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.3-1
changelog:
  - Update to 1.1.3
  - Enable javadoc generation again
  - Update maven plugins BRs
  - Make dependency on maven-doxia unversioned


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.2-1
changelog:
  - Update to latest version (1.2)
  - Use maven 3 to build
  - Remove version limits on BR/R (not valid anymore anyway)


author: Jaromir Capik <jcapik@redhat.com> - 1.2-2
changelog:
  - Migration from plexus-maven-plugin to plexus-containers-component-metadata
  - Minor spec file changes according to the latest guidelines


author: Michal Srb <msrb@redhat.com> - 1.3-1
changelog:
  - Update to upstream version 1.3
  - Migrate from maven-doxia to doxia subpackages (#889145)
  - Build with xmvn
  - Replace patches with pom_ macros
  - Remove unnecessary depmap


author: Jaromir Capik <jcapik@redhat.com> - 1.0.1-4
changelog:
  - Migration to plexus-containers-component-metadata
  - Maven3 compatibility patches
  - Minor spec file changes according to the latest guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-1
changelog:
  - Update to upstream version 1.1.1
  - Convert patches to POM macro
  - Remove patch for bug 748074, upstreamed


author: Tania Bento <tbento@redhat.com> 0:1.5.3-2jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed period at the end of %Summary.
  - Removed %post and %postun sections for javadoc.
  - Removed %post and %postun sections for booter-javadoc.
  - Added gcj support option.
  - Fixed instructions on how to generate source drop.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.6-1
changelog:
  - Rename subpackages to not repeat "maven" twice
  - Update to latest upstream version
  - Add common jar to files
  - Introduce maven-failsafe-plugin sub-package
  - Cleanups


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.2-1
changelog:
  - Update to latest version (2.7.2)
  - Add common-junit* jars to distribution
  - Versionless javadocs
  - Use maven 3 to build


author: Tomas Radej <tradej@redhat.com> - 1:1.2.1-2
changelog:
  - Added licence text
  - Changed maven target from install to package
  - Creating directories in Install


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.4-2
changelog:
  - Add missing requires on maven2 artifact and model
  - Add maven-core to test dependencies
  - Resolves: rhbz#914169


author: Weinan Li <weli@redhat.com> -1.5-3
changelog:
  - R: maven-shared-invoker
  - R: maven-shared-reporting-api
  - R: maven-shared-reporting-impl
  - Remove BR: maven2-plugin-changes
  - Add BR: maven-shared-invoker


author: Michal Srb <msrb@redhat.com> - 1.8-4
changelog:
  - Migrate from maven-doxia to doxia subpackages (Resolves: #909238)
  - Remove unnecessary BR on maven-doxia-tools


author: Alexander Kurtakov <akurtako@redhat.com> 2.3.1-1
changelog:
  - Update to 2.3.1.
  - Keep plexus-container-default on the dependency tree.
  - Drop depmap - not needed now.


author: Jaromir Capik <jcapik@redhat.com> - 0:2.7-2
changelog:
  - Removal of plexus-maven-plugin (not needed)
  - Migration to maven3
  - Removal of unwanted file duplicates
  - Minor spec file changes according to the latest guidelines


author: Mat Booth <mat.booth@redhat.com> - 3.0.1-2
changelog:
  - Fix build against new maven-archiver, which removed some deprecated methods
    that this plugin was using


author: Alexander Kurtakov <akurtako@redhat.com> 1:1.2-2
changelog:
  - Fix line lengths and use macroses consistently.
  - Add comment for the tests skip.
  - Add missing requires and set permissions.


author: Yong Yang <yyang@redhat.com> 1:1.2-2.6
changelog:
  - Add more maven depmap for maven-test-tools and maven-plugin-testing-tools for backward compatibility


author: Tomas Radej <tradej@redhat.com> - 2.1-1
changelog:
  - Updated to latest upstream version
  - Cleanup - removed patches, old files etc.
  - Added requires to subpackages


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 1.4-1
changelog:
  - Update to 1.4
  - Add BR on jdependency >= 0.6
  - Add patch to add dependency on maven-artifact-manager


author: Tania Bento <tbento@redhat.com> 0:1.0-4jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed %post and %postun sections for file-management-javadoc.
  - Removed %post and %postun sections for plugin-testing-harness-javadoc.
  - Defined _with_gcj_support and gcj_support.
  - Fixed %License.
  - Fixed %Group.
  - Marked config file with %config(noreplace) in %files section.
  - Fixed instructions on how to generate source drop.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-16
changelog:
  - Add second groupId for reporting-api to add compatibility
  - Versionless javadocs and remove defattr macros (not needed anymore)
  - Use new maven2 compatibility packages
  - Remove old patches


author: Stanislav Ochotnicky <sochotnicky@redhat.com> 15-23
changelog:
  - Remove exact version dependency on artifact-filters
  - Fix missing plexus-container-default in pom for shared-jar


author: Tomas Radej <tradej@redhat.com> - 15-27
changelog:
  - Removed ant, artifact-resolver, common-artifact-filters, dependency-tree, model-converter, runtime
  - Replaced patches with pom macros


author: Matt Wringe <mwringe@redhat.com> - 0:1.0-0.1.a5.3jpp.1
changelog:
  - Merge in the changes neeeded to build without jetty
  - Fix rpmlint issues
  - Generate new *-build.xml files from pom.xml files as origins of
    *-project files is unknown.
  - Remove maven1 project.xml files from sources
  - Comment out various section requiring maven or javadocs
    (to be re-enabled at a future time). Note that the ant:ant task
    for maven2 does not currently generate javadocs.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-4.20140118
changelog:
  - Fix up building drivers on AArch64, enable LLVM there.
  - Eliminate some F17 cruft from the spec, since we don't support it anymore.
  - Conditionalize with_radeonsi on with_llvm instead of ppc,s390 && >F-17.
  - Conditionalize libvdpau_radeonsi.so.1* on with_radeonsi instead of simply
    with_llvm to fix a build failure on AArch64.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-6.20140118
changelog:
  - Fix accidentally inverted logic that meant radeonsi_dri.so went missing
    on all architectures instead of just ppc and s390. Sorry!


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1-1.20140305
changelog:
  - mesa: Bump version to 10.1 (final) (Ian Romanick)
  - glx/dri2: fix build failure on HURD (Julien Cristau)
  - i965: Validate (and resolve) all the bound textures. (Chris Forbes)
  - i965: Widen sampler key bitfields for 32 samplers (Chris Forbes)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1.1-3.20140430
changelog:
  - Update to today snapshot
  - apply as downstream patches for reporting GPU max frequency on r600 (FD.o #73511)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.1.rc1.20140505
changelog:
  - Enable omx on x86 and arm (RHBZ #1094199) (kwizart)
  - Split _with_xa from _with_vmware (RHBZ #1094199) (kwizart)
  - Add _with_xa when arch is arm and _with_freedreeno (RHBZ #1094199) (kwizart)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.3.rc1.20140505
changelog:
  - Move gallium-pipe to the correct sub-package (RHBZ #1094588) (kwizart)
  - Move egl_gallium.so to the correct location (RHBZ #1094588) (kwizart)
  - Switch from with to enable for llvm shared libs (kwizart)


changelog: - Rebase to 'master' branch (f381c27c548aa28b003c8e188f5d627ab4105f76 commit)
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.1.f381c27c548aa28b003c8e188f5d627ab4105f76


changelog: - c40d7d6d948912a4d51cbf8f0854cf2ebe916636 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
author:
  Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636.1


changelog: - 10.4 c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.1.c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f


changelog: - 80771e47b6c1e47ab55f17311e1d4e227a9eb3d8 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


changelog: - add swrast to dri driver list
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.1.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 11.3.0-0.1.gitea2bff1
changelog:
  - 11.3.0 (gitea2bff1)
  - Add SWR state-tracker (but disable because build is broken)
  - Use gallium-osmesa instead of classic osmesa (RHBZ #1305588)
  - Remove very old changelogs


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.4.rc2
changelog:
  - Update eglext.h to 20161230 version this brings in some new defines needed
    by some apps / libraries


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.5.rc2
changelog:
  - Fix GLX_SGIX_fbconfig extension dispatching with glvnd, this fixes games such
    as "The Binding of Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam


author: Hans de Goede <hdegoede@redhat.com> - 17.0.1-3
changelog:
  - Fix glXGetDriverConfig not working with glvnd (rhbz#1429894)
  - Fix indirect rendering, add libGLX_indirect.so.0 symlink (rhbz#1427174)


author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 0.22.0-7.20150310gitf9f51b1
changelog:
  - today's git snapshot with support for cool GNOME features
  - re-enable wxGTK3 tests, package fixed in rawhide


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 0.55.3-3
changelog:
  - build: use PIE objects for static libraries
    Resolves: rhbz#1899620
    (meson builds QEMU with PIC objects instead of PIE)


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-1
changelog:
  - Initial package
  - Removed chrpaths
  - Added BR chrpath
  - Removed exec permissions to silence spurious-executable-perm warning


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-2
changelog:
  - Initial release changed from 0 to 1
  - Removed chrpath command
  - Added metis-width-datatype.patch only for 64bit systems
  - Build commands completely changed to use %cmake
  - TEMPORARY fix for files in "/usr/lib"


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-3
changelog:
  - Static sub-package removed
  - TEMPORARY fix for files in "/usr/lib" removed
  - Added patches for set up shared GKlib and soname libmetis 
  - Removed BR chrpath


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-4
changelog:
  - Added patch to sets up GKREGEX, GKRAND, libsuffix options to the Makefiles
  - Configured patch2 condition
  - soname version of libmetis changed to 0
  - Added cmake options and flags to check openmp
  - GKlib_includes destination changed to include/metis
  - Added commands to generate binaries man-page
  - Added BR openmpi-devel, pcre-devel, help2man


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-9
changelog:
  - Added BR 'perl-Carp' for Fedora
  - Excluded manpage creation for 'cmpfillin' and 'graphchk' commands


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-10
changelog:
  - Removed BR 'perl-Carp' (Bug 926996)
  - Added LD_PRELOAD before help2man tasks to fix manpage shared_lib_error


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.1-4
changelog:
  - Switch to using upstream (GNU) binutils 2.19.1.  It's exactly the
    same as the MinGW version now.


author: Richard W.M. Jones <rjones@redhat.com> - 2.20.51.0.10-1
changelog:
  - Synchronize with Fedora native version (2.20.51.0.10).
  - Note however that we are not using any Fedora patches.


author: Kalev Lember <kalev@smartlink.ee> - 2.21-1
changelog:
  - Update to 2.21
  - Added a patch to use runtime pseudo reloc v1 by default as the version of
    mingw32-runtime we have does not support v2.
  - Don't own the /usr/i686-pc-mingw32/bin/ directory


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-1
changelog:
  - Update to 2.22.52 20120225 snapshot
  - Bump the BR/R: mingw32-filesystem to >= 95
  - Rebuild using the i686-w64-mingw32 triplet
  - Dropped some obsolete configure arguments
  - Temporary provide mingw-strip, mingw-objdump and mingw-objcopy
    in preparation for win32+win64 support


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-2
changelog:
  - Renamed the source package to mingw-binutils (RHBZ #673786)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-3
changelog:
  - Made the package compliant with the new MinGW packaging guidelines
  - Added win64 support
  - Added a mingw-binutils-generic package containing toolchain
    utilities which can be used by both the win32 and win64 toolchains
  - Enable the testsuite
  - Package the license
  - Fix source URL


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24-5
changelog:
  - Fix CVE-2014-8501 (RHBZ #1162578 #1162583)
  - Fix CVE-2014-8502 (RHBZ #1162602)
  - Fix CVE-2014-8503 (RHBZ #1162612)
  - Fix CVE-2014-8504 (RHBZ #1162626)
  - Fix CVE-2014-8737 (RHBZ #1162660)
  - Fix CVE-2014-8738 (RHBZ #1162673)


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Richard W.M. Jones <rjones@redhat.com> - 17-1
changelog:
  - Automatically add mingw-filesystem and mingw-runtime requires.
  - Add --prefix to _mingw_configure macro.
  - Three backslashes required on each continuation line in RPM macros.


author: Richard W.M. Jones <rjones@redhat.com> - 19-1
changelog:
  - 'user32.dll' is provided by Windows.
  - Allow '-' in DLL names.
  - More accurate detection of DLLs in requires/provides scripts.


author: Richard Jones <rjones@redhat.com> - 31-1
changelog:
  - Update the spec file with explanation of the 'Provides: mingw32(...)'
    lines for Windows system DLLs.


author: Richard W.M. Jones <rjones@redhat.com> - 39-3
changelog:
  - Unify mingw32-filesystem packages from all three branches again, and test.
  - Fix mingw32-scripts so it can handle extra parameters correctly.
  - Remove mingw32-env & mingw32-make since neither of them actually work.


author: Levente Farkas <lfarkas@lfarkas.org> - 40-2
changelog:
  - Rewrite mingw32-scripts to run in the current shell
  - (Re-add mingw32-make) - Removed by RWMJ.
  - Add mingw32-env to mingw32.sh


author: Richard W.M. Jones <rjones@redhat.com> - 43-6
changelog:
  - Don't claim C++ compiler exists if it's not installed, as this
    breaks autoconf and (in particular) libtool.


author: Richard W.M. Jones <rjones@redhat.com> - 47-1
changelog:
  - Rename mingw32-COPYING to COPYING.
  - Rename mingw32-macros.mingw32 to macros.mingw32.
  - _mingw32_configure looks for configure in "." and ".." dirs.
  - Added _mingw32_description.
  - Added mingw32(version.dll) virtual provides (rhbz#485842).


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 52-1
changelog:
  - Add script to create -debuginfo subpackages
    This script was created by Fridrich Strba
  - All mingw32 packages now need to add these lines to their .spec files:
    %define __debug_install_post %{_mingw32_debug_install_post}
    %{_mingw32_debug_package}


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 52-2
changelog:
  - Updated ChangeLog comment from previous version as the RPM variable
    __debug_install_post needs to be overridden instead of __os_install_post
    for -debuginfo subpackage generation


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 53-1
changelog:
  - Fixed a small rpmlint warning caused by the debuginfo generation macro
    Thanks to Kalev Lember for spotting this


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 54-1
changelog:
  - Added the file /usr/bin/i686-pc-mingw32-pkg-config which is a wrapper script
    which calls pkg-config with the right environment variables set (BZ #513825)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 55-1
changelog:
  - The wrapper scripts i686-pc-mingw32-pkg-config, mingw32-pkg-config,
    mingw32-configure, mingw32-make and mingw32-cmake had a bug where
    quoted arguments could get interpreted incorrect.
    Thanks to Michael Ploujnikov for helping out with this issue


author: Erik van Pienbroek <epienbro@fedoraproject.org. - 56-1
changelog:
  - Prevented a circular dependency which caused the i686-pc-mingw32-pkg-config
    script to be broken. Thanks to Kalev Lember for spotting this bug


author: Ivan Romanov <drizt@land.ru> - 64-1
changelog:
  - Removed -win32 option for mingw32-qmake-qt4 (is obsoletes since qt version 4.7.0)
  - Using win32-g++-fedora-cross instead fedora-win32-cross spec file


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 67-1
changelog:
  - Don't unset PKG_CONFIG_PATH in the wrapper scripts
    mingw32-pkg-config and i686-pc-mingw32-pkg-config (BZ #688171)


author: Kalev Lember <kalev@smartlink.ee> - 68-1
changelog:
  - Support RPM 4.9 new "fileattr" dep extraction system
  - Cleaned up the spec file from cruft not needed with latest rpm
  - Generate versionless mingw32-filesystem Requires


author: Kalev Lember <kalev@smartlink.ee> - 69-1
changelog:
  - Adjusted PKG_CONFIG_LIBDIR to also search in _mingw32_datadir/pkgconfig/
  - Own the sbin/ directory
  - Fixed the -n option with _mingw32_debug_package macro


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 69-10
changelog:
  - Fixed a small regression introduced by the previous release which caused an
    FTBFS for mingw32-matahari as indicated on the fedora-mingw mailing list


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 69-12
changelog:
  - Don't provide the wrapper i686-pc-mingw32-pkg-config anymore as we now
    have a mingw32-pkg-config package


author: Kalev Lember <kalevlember@gmail.com> - 69-13
changelog:
  - Remove the mingw32-pkg-config wrapper as well, now that we have separate
    mingw32-pkg-config package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 69-14
changelog:
  - Use a more complete list of Win32 default dlls based on the
    dlls exported by wine (thanks to Levente Farkas). RHBZ #787486


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 95-1
changelog:
  - Added support for both win32 and win64 targets
  - Fixed rpmlint issues
  - Fixed permissions of the scripts (775 -> 755)
  - Fixed description of the various subpackages
  - Make the various macros compliant with the new packaging guidelines:
    https://fedorahosted.org/fpc/ticket/71
  - Suppress arch-independent-package-contains-binary-or-object rpmlint
    errors for static libraries
  - Improved the mingw_configure, mingw_make, mingw_make_install,
    mingw_cmake and mingw_cmake_kde4 RPM macros so packagers don't need
    to use quotes anymore when using arguments. Thanks to Kalev Lember
    for the initial proof of concept
  - Dropped the -mms-bitfields argument from the default CFLAGS as
    it is enabled by default as of gcc 4.7
  - Replaced the CMake defines QT_HEADERS_DIR and QT_LIBRARY_DIR
    with QT_BINARY_DIR which is a more proper method to make CMake
    aware of the location of Qt. Thx to Dominik Schmidt for the hint
  - Make sure CMake can detect the qmake-qt4 binary in /usr/$target/bin
  - Make sure CMake can also detect the (native) Qt tools
    qdbuscpp2xml and qdbusxml2cpp
  - Added new RPM macros mingw_cmake_kde4, mingw32_cmake_kde4 and mingw64_cmake_kde4
  - Added three new environment variables which can be set to
    influence the behaviour of the cmake macros:
    MINGW_CMAKE_ARGS, MINGW32_CMAKE_ARGS and MINGW64_CMAKE_ARGS
  - Dropped the mingw32-qmake-qt4 and mingw64-qmake-qt4 wrapper scripts
    as they're now provided by the mingw{32,64}-qt-qmake packages
  - Added a new RPM macro: %{?mingw_package_header}
    Packagers can use this macro instead of the original boilerplate
    code which is needed for all mingw packages
  - Made argument passing using the backwards compatibility macro %{_mingw32_cmake} work
  - Fixed an issue in the mingw_cmake macro where it could point to
    a non-existant CMakeLists.txt file
  - Fixed a bug in the find-requires script which causes all packages to depend
    on both the mingw32 and the mingw64 toolchains
  - Split out the RPM macros which require both the mingw{32,64}-filesystem
    packages in a new file and put it in the mingw-filesystem-base package
  - Generate seperate debuginfo packages for mingw32 and mingw64
  - Set the minimum version of R: mingw{32,64}-filesystem to 70
  - Use the correct FSF-address in some scripts
  - Thanks to all the contributors: Erik van Pienbroek, Kalev Lember, Levente
    Farkas, Marc-Andre Lureau.


author: Kalev Lember <kalevlember@gmail.com> - 95-3
changelog:
  - Merge copy-n-paste duplicate %mingw32_debug_package code
  - Get rid of the USE_OLD_METHOD hack in mingw-find-debuginfo.sh
  - Add missing %mingw32_debug_install_post


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 95-4
changelog:
  - Added a manual provides for the native windows library ksuser.dll as
    wine doesn't have an implementation for this library at the moment


author: Kalev Lember <kalevlember@gmail.com> - 95-7
changelog:
  - Define mingw_build_win32/win64 in system macros, so that each
    individual package wouldn't have to


author: Kalev Lember <kalevlember@gmail.com> - 95-8
changelog:
  - Generate the list of mingw32(...) and mingw64(...) DLL name provides from
    mingw-crt import libraries


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 95-10
changelog:
  - Prevent errors when the folders %{mingw32_prefix} or %{mingw64_prefix} are missing
  - Fix parse error when -config files containing a . are available
    in %{mingw32_bindir} or %{mingw64_bindir} (RHBZ #657478)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 95-13
changelog:
  - Make sure the %mingw_cmake and %mingw_cmake_kde4 macros respect the
    environment variable MINGW_BUILDDIR_SUFFIX


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 96-1
changelog:
  - Added new macros for Qt5 support, %mingw32_qmake_qt5, %mingw64_qmake_qt5,
    %mingw_qmake_qt4 and %mingw_qmake_qt5
  - It isn't necessary to call %mingw32_env / %mingw64_env any more
    in the %mingw32_qmake_qt4 and %mingw64_qmake_qt4 macros


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 97-1
changelog:
  - Added support for using the environment variables MINGW32_MAKE_ARGS and
    MINGW64_MAKE_ARGS. These environment variables can be used to  provide
    additional target-specific arguments when using the %mingw_make macro


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 97-3
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Minor spec fixes.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 98-1
changelog:
  - Removed the use of the environment variable PKG_CONFIG_LIBDIR
    While building binaries the tool {i686,x86_64}-w64-mingw32-pkg-config
    should be used to find out pkg-config information
    The environment variable PKG_CONFIG already automatically points
    to the right cross-compiler aware version of pkg-config when
    the mingw{32,64}-pkg-config packages are installed
  - Fixes compilation of mingw-gtk3 3.9.0 (GNOME BZ #699690)
  - Automatically add R: mingw{32,64}-pkg-config tags when .pc files
    are detected while building mingw packages
  - Bumped the minimum required version of mingw{32,64}-filesystem
    to >= 95 in built mingw packages as this is the first version of
    which was introduced in Fedora with a stable interface
  - Updated the list of DLLs which are part of the Win32 API with
    the libraries d3dcompiler_46.dll, d3dcsx_46.dll, davclnt.dll,
    devmgr.dll, devobj.dll and devrtl.dll


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 98-2
changelog:
  - Only set the environment variable PKG_CONFIG_LIBDIR when
    using the macros %mingw32_cmake, %mingw32_cmake_kde4,
    %mingw64_cmake or %mingw64_cmake_kde4
  - Fixes FTBFS of the mingw-matahari package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 99-3
changelog:
  - Own the folders %{mingw32_libdir}/cmake and %{mingw64_libdir}/cmake
  - Own all the locale folders below %{mingw32_datadir}/locale and %{mingw64_datadir}/locale (RHBZ #798329)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 100-1
changelog:
  - Various CMake improvements:
    * The toolchain files /usr/share/data/mingw/toolchain-mingw32.cmake
      and /usr/share/data/mingw/toolchain-mingw64.cmake don't have
      an uppercase character in their file name any more
    * Add CMAKE_SYSTEM_PROCESSOR to the CMake toolchain files
    * Removed Boost_COMPILER from the CMake toolchain files as
      it was unused and broken anyway
    * Made the RPM macros mingw32_cmake, mingw32_cmake_kde4,
      mingw64_cmake and mingw64_cmake_kde4 more generic
    * Removed the rpath references as mingw doesn't support rpath
    * Allow verbose CMake output to be disabled by setting the
      environment variable MINGW_CMAKE_NO_VERBOSE (RHBZ #987644)
    * When calling the mingw32-cmake and mingw64-cmake wrapper
      scripts don't use verbose CMake output by default
    * When using the CMake wrappers, prevent CFLAGS and CXXFLAGS
      from being set unless they're already set in the current
      environment (RHBZ #1136069)
    * Don't set LIB_INSTALL_DIR any more in the CMake macros
      as it breaks CPack and isn't needed by any of the
      Fedora MinGW packages (RHBZ #1152696)
  - Accept empty MINGW{32,64}_{C,CPP,CXX}FLAGS environment variables
  - Removed old _mingw32 macros which have been deprecated since Fedora 17


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 101-1
changelog:
  - Update config.{guess,sub} in %mingw_configure (#1288256)
  - Regenerated list of default win32 DLL's


author: Richard W.M. Jones <rjones@redhat.com> - 3.15.1-3
changelog:
  - Remove the useconds patch, which is no longer needed (Levente Farkas).
  - Use _mingw32_configure macro.


author: Richard W.M. Jones <rjones@redhat.com> - 3.15.1-6
changelog:
  - Remove obsoletes for a long dead package.
  - Reenable (and fix) _mingw32_configure (Levente Farkas).


author: Richard W.M. Jones <rjones@redhat.com> - 3.15.1-8
changelog:
  - Rebuild against latest filesystem package.
  - MINGW_CFLAGS -> MINGW32_CFLAGS.
  - Rewrite the summary for accuracy and brevity.


author: Richard W.M. Jones <rjones@redhat.com> - 3.15.1-10
changelog:
  - Force rebuild to get rid of the binary bootstrap package and replace
    with package built from source.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.2.20100914
changelog:
  - Update to snapshot 20100915 (v1.0 branch)
  - Renamed the package to mingw-crt
  - Added support for both i686-w64-mingw32 and x86_64-w64-mingw32
  - Obsoletes/provides the mingw32-runtime package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.4.20110413.trunk
changelog:
  - Update to 20110413 snapshot of the trunk branch
  - Made the package compliant with the new packaging guidelines


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.6.20110625.trunk
changelog:
  - Update to 20110625 snapshot of the trunk branch (fixes gstreamer d3d issue)
  - Replaced the patch with one which doesn't require the autotools


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0-0.3.rc1
changelog:
  - Replaced the boilerplate code with the mingw_package_header macro
  - Bumped the obsoletes mingw32-runtime
  - Dropped unneeded RPM tags


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.3.trunk.20120124
changelog:
  - Update to mingw-w64 trunk 20120124 snapshot
  - Apply upstream r4758 to fix vsnprintf and vscanf failures


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.4.trunk.20120224
changelog:
  - Update to mingw-w64 trunk 20120224 snapshot
  - Made the win64 pieces optional for now (pending approval of the mingw-gcc/mingw-binutils package reviews)
  - Dropped the use of the mingw_pkg_name macro
  - Eliminated some conditionals related to snapshot builds
  - Use smaller SourceForge source URLs
  - Improved summary of the various packages
  - Simplified the configure, make and make install calls
  - Dropped upstreamed patch
  - Added DISCLAIMER and DISCLAIMER.PD files
  - Added ZPLv2.1 to the license tag
  - Bumped obsoletes/provides version for mingw32-runtime


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.8.trunk.20120709
changelog:
  - Update to 20120709 snapshot (contains full Cygwin support)
  - Eliminated various manual kludges as upstream now installs their
    files to the correct folders by default


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.9.trunk.20120713
changelog:
  - Update to 20120703 snapshot
  - Fixes testsuite failure in the qt_qmake_test_static_mingw32 testcase


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.13.trunk.20121016
changelog:
  - Update to 20121016 snapshot
  - Use a different source tarball which doesn't contain unrelevant code (like libiberty)
  - Removed Provides: bundled(libiberty)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.18.trunk.20130216
changelog:
  - Update to 20130216 snapshot
  - Includes improved import libraries (for setupapi, cfgmgr32 and others)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.19.trunk.20130403
changelog:
  - Update to 20130403 snapshot
  - Added Windows XP compatibility wrapper for the vsprintf_s function (RHBZ #917323)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.21.trunk.20130428
changelog:
  - Update to 20130428 snapshot
  - Fixes build regression in wxWidgets and tcl regarding the timezone function


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.26.trunk.r5894.20130614
changelog:
  - Update to r5894 (20130614 snapshot)
  - Updated instructions to regenerate snapshots
    (SourceForge has changed their SVN infrastructure)
  - Workaround regression introduced by r5713 where
    the symbol InterlockedCompareExchange could get
    exported in shared libraries by accident


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.29.trunk.r5949.20130713
changelog:
  - Update to r5949 (20130713 snapshot)
  - Dropped InterlockedCompareExchange workaround, issue is resolved upstream (with r5949)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.32.trunk.r6069.20130810
changelog:
  - Update to r6069 (20130810 snapshot)
  - Resolves unnecesary dependency on libgcc_s_sjlj-1.dll for the i686 target


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.37.trunk.r6277.20130911
changelog:
  - Update to r6277 (20130911 snapshot)
  - Fixes undefined reference to `IID_ICustomDestinationList'
  - Fixes undefined reference to `IID_IFileOpenDialog'
  - Fixes undefined reference to `IID_IFileSaveDialog'


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.2.trunk.r6460.20140124
changelog:
  - Update to r6460 (20140124 snapshot)
  - Fixes missing vsprintf_s issue on Windows XP/Server 2003 (RHBZ #1054481)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.3.trunk.r6469.20140126
changelog:
  - Update to r6469 (20140126 snapshot)
  - Fixes missing sprintf_s issue on Windows XP/Server 2003 (RHBZ #1054481)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.8.trunk.r6559.20140330
changelog:
  - Update to r6559 (20140330 snapshot)
  - Fixes Windows XP compatibility issue in mingw-glib-networking
    and mingw-sigar (missing strerror_s symbol)


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
author:
  Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.999-0.11.trunk.gitb8e816.20140530


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.12.trunk.gitec1ff7.20140730
changelog:
  - Update to 20140730 snapshot (git rev ec1ff7)
  - Fixes invalid value of the global variable in6addr_loopback (RHBZ #1124368)
  - Fixes missing memmove_s symbol on Windows XP/Server 2003


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.9.999-0.1.trunk.git.b08afb.20140912
changelog:
  - Update to 20140912 snapshot (git rev b08afb)
  - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.1.20100513
changelog:
  - Update to 20100513 snapshot of the 1.0 branch
  - Updated Source: URL
  - Rewritten the %build and %install phases
  - Fixed %defattr tag
  - Use the default path which GCC expects for the headers


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.3.20100513
changelog:
  - The 20100513 snapshot contains a bug where #include <malloc.h>
    doesn't result in declaring the symbols _aligned_malloc and _aligned_free
    Added a patch to fix this


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.4.20100914
changelog:
  - Update to 20100914 snapshot
  - Renamed the package to mingw-headers
  - Obsoletes/provides the mingw32-w32api package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.8.20110413.trunk
changelog:
  - Update to 20110413 snapshot of the trunk branch
  - Made the package compliant with the new packaging guidelines
  - Enable the secure API (required for wine-gecko)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0-0.12.20110711.trunk
changelog:
  - Backported a patch for a regression which causes CLSID_ShellLink to be defined twice
    This fixes compilation of gtk3


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.3.trunk.20120120
changelog:
  - Use smaller SourceForge source URLs
  - Dropped the mingw_pkg_name global
  - Dropped the quotes in the mingw_configure and mingw_make_install calls
  - Improved summary of the various packages


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.4.trunk.20120224
changelog:
  - Update to 20120224 snapshot
  - Eliminated some conditionals related to snapshot builds
  - Added DISCLAIMER, DISCLAIMER.PD and COPYING.LIB files
  - Added ZPLv2.1 to the license tag
  - Added a conditional which is needed to prevent a file conflict with winpthreads
  - Bumped BR: mingw{32,64}-filesystem to >= 95


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.26.trunk.r5894.20130614
changelog:
  - Update to r5894 (20130614 snapshot)
  - Updated instructions to regenerate snapshots
    (SourceForge has changed their SVN infrastructure)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.30.trunk.r5969.20130721
changelog:
  - Update to r5969 (20130721 snapshot)
  - Resolves mingw-boost failure for the i686 target (regarding Interlocked* symbols)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.33.trunk.r6106.20130819
changelog:
  - Update to r6106 (20130819 snapshot)
  - Resolves mingw-gettext build failure (invalid EnumResourceLanguages declaration)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.34.trunk.r6155.20130827
changelog:
  - Update to r6155 (20130827 snapshot)
  - Fixes duplicate declaration of PRINTEROP_FLAGS (mingw-nsis)
  - Fixes duplicate declaration of THREAD_INFORMATION_CLASS (mingw-wine-gecko)
  - Fixes "unknown type name 'LPINITIALIZESPY'" failure in objbase.h


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.36.trunk.r6258.20130909
changelog:
  - Update to r6258 (20130909 snapshot)
  - Fixes various UOW related build failures
  - Fixed multiple definition of FreeIDListArray failures


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.37.trunk.r6277.20130911
changelog:
  - Update to r6277 (20130911 snapshot)
  - Fixes multiple definition of IDListContainerIsConsistent failures
  - Fixes unknown type name 'EXCEPTION_REGISTRATION' failures


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.38.trunk.r6284.20130914
changelog:
  - Update to r6284 (20130914 snapshot)
  - Fixes 'VARIANT' has no member named 'bstrVal' errors (mingw-tk)
  - Fixes 'VARIANT' has no member named 'vt' errors (mingw-tk)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.0.999-0.2.trunk.r6388.20131129
changelog:
  - Update to r6388 (20131129 snapshot)
  - Fixes compile failure in mingw-qt5-qtserialport (regarding setupapi.h header)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.8.trunk.r6559.20140330
changelog:
  - Update to r6559 (20140330 snapshot)
  - Prevent headers to be regenerated from IDL
    Fixes build failure when the environment variable WIDL is set
    (which happens automatically when mingw-w64-tools is installed)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.1.999-0.10.trunk.gitb8e8160.20140530
changelog:
  - Update to 20140530 snapshot (git rev b8e8160)
  - Fixes initializer issue in IN6ADDR macros (RHBZ #1067426)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.0.4-2
changelog:
  - Backport commit 5f5e2c (duplicate defines in activscp.h)
    as it is required by mingw-qt5-qtactiveqt 5.5.0


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 5.0-0.2.rc2.v5.x.git65a0c3.20160723
changelog:
  - Update to 20160204 snapshot of the v5.x branch (git rev 65a0c3)
  - Backported patch to build failure of latest wine-gecko


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.4.trunk.20130509
changelog:
  - Simplified the BuildRequires
  - Added a clarification for the combined license
  - Added conflicts for mingw{32,64}-headers versions which also provide pthread headers


author: Dan Williams <dcbw@redhat.com> - 1.20090707-1
changelog:
  - Update to latest upstream release including:
  - T-Mobile USA
  - Brazil
  - Bangladesh
  - Sweden
  - Spain
  - Moldova


author: Dan Williams <dcbw@redhat.com> - 1.20090918-1
changelog:
  - Update to latest upstream release including:
  - Algeria, Australia, Belarus, Belgium, Brazil
  - Brunei, Bulgaria, Egypt, Finland, Ghana, Greece
  - India, Italy, Kazakhstan, Korean CDMA operators
  - Kuwait, Mali, Netherlands, Paraguay, Serbia
  - Spain, Sweden, UK


author: Dan Williams <dcbw@redhat.com> - 1.20100122-1
changelog:
  - Update to latest upstream release including:
  - Cyprus, Austria, Ireland, Ukraine, Romainia, Cambodia (rh #530981), 
  - Iraq, India, Sri Lanka, UK, Australia, Singapore,
  - South Korea, Italy, United States, China (rh #517253), Nigeria,
  - Tanzania, Germany, Qatar, Russia, and Finland (rh #528988)


author: Matěj Cepl <mcepl@redhat.com> - 1.20101231-1
changelog:
  - Update to latest upstream checkout including:
  	Afghanistan, Argentina, Armenia, Australia, Austria, Bahrain, Canada,
  	Croatia, Denmark, Dominican Republic, Finland, France, French Polynesia,
  	Germany, Greece, Hong Kong, Hungary, China, Iceland, India, Indonesia,
  	Iran, Israel, Israel, Italy, Latvia, Luxembourg, Mexico, Montenegro,
  	Netherlands, New Zealand, Nicaragua, Norway, Paraguay, Philippines,
  	Poland, Portugal, Romania, Rwanda/Burundi, Slovakia, Slovenia, Spain,
  	Sudan, Sweden, Switzerland, Thailand, Tunisia, Uganda, United Arab
  ,


author: Matěj Cepl <mcepl@redhat.com> - 1.20110218-1
changelog:
  - Update to latest upstream checkout including:
  	* south africa: add 8.ta (Telkom) provider (bgo #641916),
  	  remove username for Cell-C (bgo #640794)
  	* switzerland: update Orange plans and APNs (bgo #638115)
  	* tanzania: add Sasatel and TTCL, add CDMA for Zantel (bgo #634609)
  	* india: new unified BSNL APNs (rh #667280)
  	* ec: add Movistar Ecuador (bgo #638223)


author: Roman Kennke <rkennke@redhat.com> 1.9.0-2
changelog:
  - Include upstream Maven pom.xml in package
  - Added missing Requires for cglib, junit4, hamcrest, objenesis
  - Added source tarball generating script to sources


author: Roman Kennke <rkennke@redhat.com> 1.9.0-4
changelog:
  - Fix groupId of cglib dependency
  - Add additional depmap for mockito-all
  - Update depmap on post and postun
  - Fix version in pom


author: Roman Kennke <rkennke@redhat.com> 1.9.0-6
changelog:
  - Place JavaDoc in directly under %{_javadocdir}/%{name} instead
    of %{_javadocdir}/%{name}/javadoc


author: Severin Gehwolf <sgehwolf@redhat.com> 1.9.0-10
changelog:
  - More Import-Package fixes. Note that fix-cglib-refs.patch is
    not suitable for upstream: issue id=373


author: Omair Majid <omajid@redhat.com> - 1.9.0-17
changelog:
  - Use .mfiles to pick up xmvn metadata
  - Don't use obsolete _mavenpomdir and _mavendepmapfragdir macros
  - Fix FTBFS


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a8.4jpp.1
changelog:
  - Fixed %Release.
  - Fixed %License.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Defined _with_gcj_support and gcj_support.
  - Fixed instructions on how to generate the source drop.


author: Matt Wringe <mwringe@redhat.com> 0:1.0-0.1.a8.4jpp.2
changelog:
  - Change license to MIT to reflex the actual license specified in the
    source headers.
  - fix various rpmlint issues


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.4-3
changelog:
  - Fix pom filenames (remove poms of integration tests) Resolves rhbz#655818
  - Use jpackage_script macro to generate script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-5
changelog:
  - Add JPP depmap for maven-project to override versionless depmap
  - Add missing BR/R: maven-project
  - Remove unneeded BR: jpa_api


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
  - Build with xmvn
  - Use better description
  - Simplify build-requires
  - Update to current packaging guidelines


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Matthias Saou <http://freshrpms.net/> 0.60-0.1.beta2
changelog:
  - Initial RPM release, now that mpg123 is maintained again and went GPL/LGPL.
  - Audio output type is not (yet?) plugin-based, so use libao (for ALSA).


author: Matthias Saou <http://freshrpms.net/> 0.60-1
changelog:
  - Update to 0.60 final.
  - Add support for all available compatible outputs, unfortunately it's a build
    time choice, so default to alsa.
  - Obsolete mpg321 up to the last know package version.


author: Matthias Saou <http://freshrpms.net/> 1.4.2-1
changelog:
  - Update to 1.4.2.
  - Obolete mpg321 up to last known version, as it's pretty much dead.
  - Add libtool-ltdl-devel build req, without a copy is installed.
  - Add scriplets for new library.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-1
changelog:
  - Update to 1.12.1
  - Put libmpg123 into its own package
  - Put some less often used output plugins into their own mpg123-plugins-extras
    package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-2
changelog:
  - Add arts-devel BuildRequire and add the arts output plug-in to the
    mpg123-plugins-extras package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-3
changelog:
  - Move mpg123 (and its manpage) to mpg123.bin and use alternatives, so as to
    peacefully co-exist with mpg321 (rf#1278)


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.13.7-1
changelog:
  - New upstream bugfix release 1.13.7
  - Properly build and install development documentation (rf#2257)


author: Richard Shaw <hobbes1069@gmail.com> - 1.14.3-1
changelog:
  - Update to latest upstream release.
  - Move README and README.remote to correct package. Fixes #1898.


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.15.1-1
changelog:
  - New upstream release 1.15.1 (rf#2716)
  - Drop obsolete esound and arts plugins from mpg123-plugins-extras


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.19.0-1
changelog:
  - Update to 1.19.0
  - Enable (optional) use of NEON on arm
  - Add missing %{?_isa} to libmpg123 Requires in -devel (rf#3194)


author: Igor Gnatenko <ignatenko@redhat.com> - 1.23.4-1
changelog:
  - Update to 1.23.4
  - Use weak and rich deps for plugins
  - rename libmpg123 to mpg123-libs
  - Drop usage of alternatives (nothing uses it actually)
  - Correct license


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Matt Wringe <mwringe at redhat.com> - 0:1.2-0.1.20050722.3jpp.1.fc7
changelog:
  - Extract sources from a fresh CVS export of the given tag and add extra source
    required to build the package not present in the 20050722 tag anymore
  - Add a patch to remove compile time dependency on crimson
  - Add a patch to enable compression of jar files
  - Add jpackage-utils as a requires for the packages/subpackages


author: Andrew Overholt <overholt@redhat.com> 0:1.2-0.1.20050722.3jpp.1
changelog:
  - Remove postun Requires on jpackage-utils
  - Set gcj_support to 1
  - Fix groups to shut up rpmlint
  - Add versions to the Provides and Obsoletes
  - Add patch to take out Class-Path in MANIFEST.MF


author: Matt Wringe <mwringe@redhat.com> 0:1.2-0.1.20050722.3jpp.2
changelog:
  - Fix unowned directories
  - Change copyright files to utf-8 format
  - Change license field to BSD (from BSD-Style)


author: Matt Wringe <mwringe@redhat.com> 0:1,2-0.1.20050722.3jpp.3
changelog:
  - Make package build with new gcj. Remove .class files from demo package and
    remove demo exclude from aot-compile-rpm


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-1
changelog:
  - Update to latest tagged release.
  - Drop support for GCJ ahead of time compilation.
  - Fix RHBZ #627688, RHBZ #631076
  - This project now builds with maven instead of ant.
  - The new build in this release aggregates javadocs, so now we have one javadoc
    package that obsoletes the many javadoc packages we had before.
  - Use new jar names that upstream use, provide the old names.
  - Misc other changes for guideline compliance.


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-4
changelog:
  - Really require a version of xml-commons-resolver that provides the necessary
    maven pom and depmap.


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-2
changelog:
  - Do not build module with unclear licensing (relames)
  - Replace %add_to_maven_depmap with %add_maven_depmap


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-6
changelog:
  - Unversioned doc dir (Resolves: #993980)
  - See: http://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-2
changelog:
  - Correct License to GPLv2+
  - Move man3 pages to the devel package.
  - Remove +x bit from create-munge-key source.
  - Preserve timestamps when installing files.
  - ldconfig not needed on -devel package.
  - Do a condrestart when upgrading.
  - Remove redundant files from docs.
  - chmod /var/lib/munge /var/log/munge and /etc/munge to 700.
  - Apply patch to not error when GPL_LICENSED is not set.
  - Patch service script to print error on if munge.key not present
    on start only and with a better error. 
  - Remove dont-exit-form-lib.patch. munge is expecting munge to
    do this.
  - Remove libgcrypt-devel from BuildRequires, uses openssl by
    default anyway.
  - Mark the munge.key as a ghost file.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-4
changelog:
  - Expand defattr with 4th argument for default directory perms.
  - Explict attr for non 0644 files and 0755 directories.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-6
changelog:
  - Patch for rhbz #525732 - Loads /etc/sysconfig/munge 
    correctly.
  - Mark pid file as ghost file on oses that support that.
  - Permisions on pid directory to 755


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-7
changelog:
  - rhbz#530128 Move runtime libs to a new -libs package.
    ldconfig moved to new -libs package as a result.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-8
changelog:
  - Requirment on munge removed from munge-libs.
  - Explicit exact requirment on munge-libs for munge and munge-devel
    added.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.9-2
changelog:
  - Remove initd-pass-rpmlint.patch, has been applied upstream.
  - Remove remove-GPL_LICENSED-cpp.patch, has been applied upstream.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.10-1
changelog:
  - Upstream to 0.5.10
  - Add _isa tags to all build requires.
  - Remove unused patch munge-correct-service-name.patch, upstream fixed.
  - Update and add check-key-exists.patch back.
  - Revert back to default CFLAGS. _GNU_SOURCE not needed any more.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.11-1
changelog:
  - Upstream 0.5.11
  - Use upstream's systemd files.
  - Fix incorrect dates in changelogs.
  - Fix systemd scriptlets #850219
  - Use buildroot macro everywhere.


author: Adam Jackson <ajax@redhat.com> 3.4.1-3
changelog:
  - mutter-never-slice-shape-mask.patch, mutter-use-cogl-texrect-api.patch:
    Fix window texturing on hardware without ARB_texture_non_power_of_two
    (#813648)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.92-2
changelog:
  - Update the description and URL
  - Tighten -devel subpackage deps with _isa
  - Use the make_install macro


author: Hans de Goede <hdegoede@redhat.com> - 3.13.90-3
changelog:
  - Add a patch from upstream fixing gnome-shell crashing non stop on
    multi monitor setups (rhbz#1103221)


author: Ray Strode <rstrode@redhat.com> 3.15.3-2
changelog:
  - Add specific BuildRequires for wayland bits, so we don't
    get wayland support by happenstance.
  - Add BuildRequires for autogoo since ./autogen.sh is run as part of
    the build process


author: Ray Strode <rstrode@redhat.com> 3.18.1-4
changelog:
  - Force the cursor visible on vt switches after setting
    the crtc to workaround that qxl bug from before in a
    different situation
    Related: #1273247


author: Olivier Fourdan <ofourdan@redhat.com> - 3.28.3-2
changelog:
  - Backport fixes from upstream "gnome-3-28" branch:
  - [wayland] laptop with lid closed and external monitor can't log in to
    wayland session (rhbz#1635106)
  - [Wayland] Crash with Xwayland grabs enabled in mutter (rhbz#1635110)
  - [Wayland] Crash on monitor hotplug (rhbz#1635123)
  - [wayland] mutter crashes if drmModeSetCrtc() failed (rhbz#1635155)
  - mutter crashes if a modal window closes whilst being dragged (rhbz#1635159)
  - gnome-shell crashed with SIGSEGV in meta_monitor_mode_get_resolution()
    (rhbz#1635164)
  - [wayland] crash when drmModeGetResources() fails (rhbz#1635167)
  - [wayland] Can't create new back buffer on Intel i915 (rhbz#1635170)
  - [wayland] keyboard: Create a separate keymap shm file per resource
    (rhbz#1635235)
  - Crash in gnome-shell/mutter after a window is destroyed (rhbz#1635237)
  - [x11] Using a cursor theme missing cursors can crash mutter (rhbz#1635241)
  - [wayland] Warning messages when starting mutter (rhbz#1635248)
  - [wayland] mutter/gnome-shell crash after failed DnD in nautilus
    (rhbz#1635718)


author: Olivier Fourdan <ofourdan@redhat.com> - 3.28.3-11
changelog:
  - Fix a new crash in recordwindow related to behavior changes in
    recent backport additions (rhbz#1657661)


author: Ray Strode <rstrode@redhat.com> - 3.28.3-12
changelog:
  - Drop "Always update monitor for non user op" patch. It's already
    in tree and getting misapplied
    Related: #1663440
  - Fix suspend and resume corruption on NVidia
    Resolves: #1663440


author: Ray Strode <rstrode@redhat.com> - 3.28.3-17
changelog:
  - Fix bug in suspend/resume corruption patch leading to inhibit fd
    not getting fetched
    Related: #1663440


author: Jonas Ådahl <jadahl@redhat.com> - 3.32.2-52
changelog:
  - Support polyinstantiation
    Resolves: #1861769
  - Mitigate nouveau misidentifying connectors
    Resolves: #1786496


author: Trond Eivind Glomsrød <teg@redhat.com> 0.98.32-1
changelog:
  - 0.98.32
  - Various doc files have changed names/been removed/added
  - New download location (after the license change, it's at sourceforge)
  - The new version is LGPL
  - Only build on x86 (#65255)


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Petr Machata <pmachata@redhat.com> - 0.98.39-5
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names
  - port bogus elf patch to new nasm version and turn it on again


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Gregory Leblanc <gleblanc@grego1.cu-portland.edu>
changelog:
  - Added BuildRequires lines
  - Changed Source to point to ftp.gnome.org instead of just the tarball name
  - Moved %description sections closer to their %package sections
  - Moved %changelog to the end, where so that it's not in the way
  - Changed configure and make install options to allow moving of
    libraries, includes, binaries more easily
  - Removed hard-coded paths (don't define %prefix or %docdir)
  - replace %{prefix}/bin with %{_bindir}
  - replace %{prefix}/share with %{_datadir}
  - replace %{prefix}/lib with %{_libdir}
  - replace %{prefix}/include with %{_includedir}


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move to a CVS snapshot of nautilus for now
    (Darin is my hero for having distcheck work out of CVS)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.0.4, removes eazel services icon and wizard page
  - Eazel logo is still in startup wizard for now, needs fixing


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Change default background and rubberband color.
  - Use the sidebar tabs from the default theme
  - BuildDepend on fam-devel, depend on fam
  - Disable the eazel update pages in the first-time druid.
  - Remove the eazel logo from the first-time druid


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Make the fam dependency a real runtime dependency
  - by linking to libfam (nautilus-1.0.4-fam-lib.patch)
  - Cleaned up specfile.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update to my latest 'cvs diff -u' (adds default 
    Start Here link, displays .directory name in sidebar)
  - include /etc/X11/* links (starthere, sysconfig, serverconfig)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move first time druid patch into my "CVS outstanding" patch
  - try to really remove Help/Feedback
  - try to really fix Help/Community Support
  - try again to get Start Here in the Go menu
  - try again to get Start Here on the desktop
  - don't show file sizes for .desktop files


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add BuildRequires (#49539, 49537)
  - Fix %post, %postun (#49720)
  - Background efficiency improvements and hacks


author: Havoc Pennington <hp@redhat.com>
changelog:
  - sync new tarball from our CVS branch, 
    fixes some drag-and-drop, changes URI scheme names,
    etc.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Fix crash-on-startup showstopper
  - Fix can't-find-images bug (this one was only showing up
    when built with debug symbols, since it was an uninitialized memory
    read)


author: Alexander Larsson <alexl@redhat.com> 1.0.4-21
changelog:
  - Remove the "don't run as root" warning.
  - Remove eazel from bookmarks
  - langified (again? did someone change it?)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Sync our CVS version; fixes some MUSTFIX
    (the one about drawing background on startup, 
     properly translate desktop files, etc.)


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Changed starthere .desktop files to be links instead
  - of spawning a new nautilus. This makes start-here:
  - much faster.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with missing desktop starthere.desktop file
  - New snapshot from our branch, fixes:
    - On upgrade, icons migrated from GNOME desktop are not properly lined up
      (#51436)
    - icons dropped on the desktop don't end up where dropped. (#51441)
    - Nautilus shouldn't have fam monitor read-only windows. This
      keeps CDROMS from being unmounted until you close all

      nautilus windows pointing to them. (#51442)
    - Warnings about 'cannot statfs...' when moving items to trash.
  - Use separate start-here.desktop for panel, since the one used
    for the root window only works from Nautilus.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make start here icon work again
  - kill some warning spew, #51661
  - cache getpwnam() results to speed things up a bit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make Programs icon into a link, to match the other .desktop files
  - own various directories #51164
  - web page titles in Japanese, #51709
  - tree defaults to only directories #51850


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix bug causing 32000 stats or so in large directories, 
    should speed things up somewhat
  - fix #52104 via gruesome kdesktop-detection hack and setting
    window type hint on our desktop window
  - fix so Start Here icon displays in sidebar
  - don't load non-local .desktop files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - I screwed up the build yesterday, so it didn't actually contain the
    fixes mentioned. This build should contain them.


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - require Mozilla 0.9.7
  - Add patch that puts mozilla profile startup before embedding is initialized


author: Havoc Pennington <hp@redhat.com>
changelog:
  - drop Milan-specific features, including png10 and ac25 patches
  - copy in 1.0.5 help component to avoid large risky patch
  - remove .la files
  - drop mozilla from ia64 again
  - remove oaf file from nautilus-mozilla that was also in the base 
    package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Relibtoolize to fix relink problems for solib components
  - Add LANG=en_US to %makeinstall as well
  - Back out previous change, force locale to en_US to prevent UTF-8 problems
  - Add workaround for intltool-merge bug on ia64


author: Havoc Pennington <hp@redhat.com>
changelog:
  - ignore the "add_to_session" preference as it only broke stuff
  - pad the left margin a bit to cope with poor word wrapping


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a simple patch so that redhat-config-packages can disable 
    the new window behavior for mounted CDs behavior.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require newer redhat-artwork, -menus, eel2, gnome-vfs2 to avoid
    bogus bug reports
  - add hack for HTML mime type handling in a web browser, not 
    nautilus


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put button press mask in triple-click patch, maybe it will work
  - remove html-hack patch as it does nothing useful


author: Alexander Larsson <alexl@redhat.com> 2.1.5-2
changelog:
  - Add cdburn patch.
  - Remove nautilus-1.1.19-starthere-hang-hackaround.patch
  - Require nautilus-cd-burner


author: Havoc Pennington <hp@redhat.com>
changelog:
  - perl-munge the icon names in a couple desktop files
    to find redhat-network-server.png and redhat-file-manager.png.
    Upstream icon names here were weird and seem broken.


author: Alexander Larsson <alexl@redhat.com> 2.2.0.2-1
changelog:
  - Update to 2.2.0.2, fixes bg crasher
  - parallelize build
  - Added patch from cvs that fixes password hang w/ smb


author: Alexander Larsson <alexl@redhat.com> 2.2.1-2
changelog:
  - Add a patch to fix the forkbomb-under-kde bug (#81520)
  - Add a patch to fix thumbnail memory leak
  - require libXft.so.2 instead of Xft, since that changed in the XFree86 package


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Update to the latest bugfixes from cvs.
  - Fixes #84291 for nautilus, context menu duplication and some other small bugs.


author: Alexander Larsson <alexl@redhat.com> 2.3.9-1
changelog:
  - update
  - Add patch to ignore kde desktop links
  - Re-enable kdesktop detection hack.
    kde doesn't seem to support the manager selection yet


author: Mike A. Harrisn <mharris@redhat.com> 2.5.91-2
changelog:
  - Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
  - Fixed BuildRoot to use _tmppath instead of /var/tmp


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-2
changelog:
  - Fix open with menu on mime mismatch
  - Create desktop links ending with .desktop (#125104)
  - Remove old cruft from specfile


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-3
changelog:
  - Slightly less bad error dialog when there is no handler for a file.
    Not ideal, but this change doesn't change any strings.


author: David Zeuthen <davidz@redhat.com> 2.10.0-3
changelog:
  - Include patches for desktop background memory saving (GNOME bug #169347)
  - Obsoletes: nautilus-media (#153223)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-6
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Alexander Larsson <alexl@redhat.com> - 2.16.2-7
changelog:
  - Look for beagle before tracker, because tracker autostarts
    This lets us support having both installed at the same time.
  - Remove buildreqs for beagle, as they are not necessary with
    the dynamic work.


author: - Bastien Nocera <bnocera@redhat.com> - 2.20.0-6
changelog:
  - Fix audio preview command-line to use decodebin so playbin doesn't
    pop up a window for videos detected as audio


author: Tomas Bzatek <tbzatek@redhat.com> - 2.21.92-2
changelog:
  - Change libbeagle .so name for libbeagle-0.3.0 in nautilus-2.21.1-dynamic-search-r2.patch (#434722)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.22.0-2
changelog:
  - Don't create application/x-ext-<extension> types for known mimetypes (patch from head)
  - Fix a crash in the Properties dialog while changing owner (patch from head)


author: Ray Strode <rstrode@redhat.com> - 2.22.1-2
changelog:
  - Over the releases we've accumulated default.png, default-wide.png default-5_4.png
    and default.jpg.  We haven't been able to drop them because it would leave some
    users with white backgrounds on upgrade.  This patch just falls back to the
    default image if the user's background doesn't exist.


author: David Zeuthen <davidz@redhat.com> - 2.22.2-3
changelog:
  - Revert Fedora livecd mount (fix is in latest gvfs packages) and
    add a patch to avoid trying to autorun mounts that are mounted
    from outside Nautilus (#442189)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.1-3
changelog:
  - Mask file moving to nautilus-cd-burner window as copy operation (#443944)
  - Don't allow recursive move/copy into itself (gnomebz #530720)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.2-3
changelog:
  - Add DnD support to drop files onto archive files with help 
    of file-roller (gnomebz #377157)
  - Add fix preventing crash on bad GFileInfos (gnomebz #519743)


author: Alexander Larsson <alexl@redhat.com> - 2.24.1-2
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.25.1-4
changelog:
  - Properly open new windows after long mount operation
  - Fix callback connection to the GtkMountOperation dialog


author: Matthias Clasen <mclasen@redhat.com> - 2.25.2-1
changelog:
  - Update to 2.25.2
  - Clean up Requires
  - Obsolete eel2
  - Drop hard dependency on gvfs backends. 
    These are pulled in by comps, anyway


author: Colin Walters <walters@verbum.org> - 2.91.93-2
changelog:
  - Drop --vendor from nautilus.desktop
    Vendor prefixes are pointless, and in this case breaks upstream
    components trying to reference each other via .desktop file, such
    as GNOME Shell having nautilus.desktop in its default favorite
    list.


author: David King <amigadave@amigadave.com> - 3.15.4-1
changelog:
  - Update to 3.15.4
  - Use pkgconfig for BuildRequires
  - Update man page globs in files section
  - Use license macro for license texts


author: Kalev Lember <klember@redhat.com> - 3.18.0-1
changelog:
  - Update to 3.18.0
  - Don't pull in all of nautilus for the -extensions subpackage
  - Tighten a dep with the _isa macro
  - Drop ancient obsoletes


author: Kalev Lember <klember@redhat.com> - 3.21.91.1-1
changelog:
  - Update to 3.21.91.1
  - Filter private libgd from provides and requires
  - Use upstream defaults for OnlyShowIn


author: Carlos Soriano <csoriano@redhat.com> - 3.28.1-7
changelog:
  - Disable extension doc generation, since generated files differ and
    rpmlint fails when checking that both architectures of the -devel
    library generate the same files.
    It's an issue in docbook, used by gtk-doc, and althought fixed upstream
    they didn't have a new release yet.
    https://github.com/docbook/xslt10-stylesheets/issues/54
    Resolves: RHBZ#1667136


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-9
changelog:
  - Fix criticals when connecting to remote locations (rhbz#1643175)
  - Remove geometry option from man page (rhbz#1612852)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-10
changelog:
  - Add screenshots for GNOME Software in Appdata file (rhbz#1725107)
  - Add website link to About dialog (rhbz#1725101)
  - Use Files instead of Nautilus in Appdata file (rhbz#1725120)
  - Add nautilus-autorun-software man page (rhbz#1725766)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-11
changelog:
  - Fix criticals when moving file to trash (rhbz#1721133)
  - Fix criticals when closing properties window (rhbz#1721124)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-13
changelog:
  - Clear selection if any files don't match the pattern (rhbz#1207179)
  - Fix endless content size calculations (rhbz#1566027)
  - Honor umask when creating new files (rhbz#1778579)
  - Close "There is no application..." dialog after response (rhbz#1816070)


author: Jeff Johnson <jbj@redhat.com> 0.23.9-2
changelog:
  - force expat, include neon-config, for subversion build.
  - do "make check" (but ignore failure for now)


author: Joe Orton <jorton@redhat.com> 0.24.4-3
changelog:
  - use BuildRequires not BuildPrereq, drop autoconf, libtool;
    -devel requires {openssl,zlib}-devel (#116744)


author: Joe Orton <jorton@redhat.com> 0.25.5-6
changelog:
  - remove trailing dot in -devel Summary
  - use standard BuildRoot
  - change Group to System Environment/Libraries
  - drop Prefix


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.35-8
changelog:
  - remove bogus man pages (#220112, #220113)
  - overflow2() no more conflicts with libgd.so (#216116)
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 10.35.32-1
changelog:
  - remove .svn directories from tarball to reduce its size
  - update fixes rhbz#337181 and likely others


author: Jindrich Novy <jnovy@redhat.com> 10.35.48-1
changelog:
  - update to 10.35.48
  - fixes buffer overrun in pamperspective and pngtopnm output format
  - update .security2 patch so that it applies with fuzz==0


author: Jindrich Novy <jnovy@rehdat.com> 10.35.49-1
changelog:
  - update to 10.35.49
  - fixes crash in pamcut when cutting a region entirely to the
    left or right of the input image, with -pad


author: Jindrich Novy <jnovy@redhat.com> 10.35.51-1
changelog:
  - update to netpbm-10.35.51
  - make it actually compilable by removing duplicated function
    in pamcomp.c


author: Jindrich Novy <jnovy@rehdat.com> 10.35.54-1
changelog:
  - update to 10.35.54
  - adds better randomization for ppmforge, pgmnoise, pgmcrater
  - fixes array bounds violation in pnm_createBlackTuple() with PBM, PGM
  - fixes crash in pnmtoddif with any PGM input


author: Jindrich Novy <jnovy@redhat.com> 10.35.57-3
changelog:
  - unbreak ppmshadow and ppmrainbow (#476989)
  - pnmmontage won't crash because of uninitialized memory usage


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-1
changelog:
  - update to 10.35.38
  - fixes crashes in picttoppm, pbmtomrf, mrftopbm
  - fixes bugs in leaftoppm, ilbmtoppm


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-3
changelog:
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-4
changelog:
  - fix segfault in ximtoppm (#482891), the utility lacked the
    command line parsing initialization code


author: Jindrich Novy <jnovy@redhat.com> 10.35.59-1
changelog:
  - update to 10.35.59
  - fixes array bound violation in ilbmtoppm
  - fixes garbage output when input in fitstopnm is little endian
    floating point FITS


author: Jindrich Novy <jnovy@redhat.com> 10.35.60-1
changelog:
  - update to 10.35.60
  - update .security patch, minor cleanup
  - fixes xwdtopnm for at least some direct color 24/32 images
  - fixes memory leak and out of memory crash in libpammap


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-1
changelog:
  - update to 10.35.61
  - upstream fixes array bound violation in pbmtog3
  - drop .pbmtog3segfault patch, we fixed this some time ago already
    and it is in upstream now
  - use saner exit status in ppmfade


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-2
changelog:
  - remove two hunks from security patch breaking pbmclean and pbmlife (#493015)
  - fix ppmdfont and svgtopnm, thanks to Jiri Moskovcak


author: Jindrich Novy <jnovy@redhat.com> 10.35.62-1
changelog:
  - update to 10.35.62
  - upstream fixes pamstereogram
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise
    so that they match their man pages (#483011, #483070, #483243, #483245)
  - avoid clashes with getline() from glibc


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.47.06-1
changelog:
  - update to 10.47.06 - fixes the dumb pamtosvg mistake in 10.47.05
  - pnmmargin won't create leftovers in /tmp (#547888)


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-1
changelog:
  - update to 10.47.09, fixes occassional crash in pamtosvg
  - fix documentation
  - fix ppmfade exit status


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-3
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - link against -lz (#564649)


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-2
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-3
changelog:
  - package docs in separate netpbm-doc package (#492437)
  - don't package patch backups in documentation
  - netpbm-progs package requires ghostscript


author: Jindrich Novy <jnovy@redhat.com> 10.47.12-3
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)
  - fix documentation for pamperspective and pbmtoepson


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Kevin Fenzi <kevin@scrye.com> 0-0.3.20140118git
changelog:
  - Update to 20140118 snapshot
  - Fixed License tag to be correct
  - Fixed changelog
  - nft scripts now use full path for nft
  - Fixed man page building
  - Dropped unneeded rm in install
  - Patched build to not be silent.


author: Phil Sutter - 1:0.9.0-4
changelog:
  - Add fixes for covscan report
  - Fix for ECN keyword in LHS of relational
  - Update meta pkt_type value description
  - Fix for segfault with JSON output if xt expression is present
  - Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
  - Use native JSON API in nft monitor


author: Phil Sutter <psutter@redhat.com> - 1:0.9.0-9
changelog:
  - Allow variables in jump statement
  - Make example configs readable only by root
  - Document nft list parameters
  - Document vmap statement
  - Install netdev-ingress.nft sample config in the right spot
  - Backport upstream fixes since last release


author: Phil Sutter <psutter@redhat.com> [0.9.2-1.el8]
changelog:
  - src: obj: fix memleak in handle_free() (Phil Sutter) [1643192]
  - libnftables: memleak when list of commands is empty (Phil Sutter) [1643192]
  - mnl: do not cache sender buffer size (Phil Sutter) [1643192]
  - src: meter: avoid double-space in list ruleset output (Phil Sutter) [1643192]
  - src: parser_json: fix crash while restoring secmark object (Phil Sutter) [1643192]
  - nftables: don't crash in 'list ruleset' if policy is not set (Phil Sutter) [1643192]
  - json: tests: fix typo in ct expectation json test (Phil Sutter) [1643192]
  - parser_bison: Fix 'exists' keyword on Big Endian (Phil Sutter) [1643192]
  - json: fix type mismatch on "ct expect" json exporting (Phil Sutter) [1643192]
  - libnftables: use-after-free in exit path (Phil Sutter) [1643192]
  - netlink_delinearize: fix wrong conversion to "list" in ct mark (Phil Sutter) [1643192]
  - mnl: fix --echo buffer size again (Phil Sutter) [1643192]
  - parser_json: fix crash on insert rule to bad references (Phil Sutter) [1643192]
  - evaluate: flag fwd and queue statements as terminal (Phil Sutter) [1643192]
  - tests: shell: check that rule add with index works with echo (Phil Sutter) [1643192]
  - cache: fix --echo with index/position (Phil Sutter) [1643192]
  - src: secmark: fix brace indentation and missing quotes in selctx output (Phil Sutter) [1643192]
  - Add python3-nftables sub-package (Phil Sutter) [1643192]
  - Rebase onto upstream version 0.9.2 (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.2-2.el8]
changelog:
  - rule: Fix for single line ct timeout printing (Phil Sutter) [1643192]
  - tests/monitor: Fix for changed ct timeout format (Phil Sutter) [1643192]
  - monitor: Add missing newline to error message (Phil Sutter) [1643192]
  - src: restore --echo with anonymous sets (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.2-4.el8]
changelog:
  - tproxy: Add missing error checking when parsing from netlink (Phil Sutter) [1643192]
  - parser_json: Fix checking of parse_policy() return code (Phil Sutter) [1643192]


author: Phil Sutter <psutter@redhat.com> [0.9.3-6.el8]
changelog:
  - monitor: Do not decompose non-anonymous sets (Phil Sutter) [1774742]
  - main: restore --debug (Phil Sutter) [1778883]
  - main: enforce options before commands (Phil Sutter) [1778883]


author: Phil Sutter <psutter@redhat.com> [0.9.3-8.el8]
changelog:
  - cache: Fix for doubled output after reset command (Phil Sutter) [1790793]
  - tests: shell: Search diff tool once and for all (Phil Sutter) [1790793]
  - xfrm: spi is big-endian (Phil Sutter) [1790963]


author: Phil Sutter <psutter@redhat.com> [0.9.3-9.el8]
changelog:
  - netlink: Avoid potential NULL-pointer deref in netlink_gen_payload_stmt() (Phil Sutter) [1793030]
  - netlink: Fix leaks in netlink_parse_cmp() (Phil Sutter) [1793030]
  - netlink: Fix leak in unterminated string deserializer (Phil Sutter) [1793030]


author: Phil Sutter <psutter@redhat.com> [0.9.3-10.el8]
changelog:
  - scanner: Extend asteriskstring definition (Phil Sutter) [1763652]
  - doc: nft.8: Mention wildcard interface matching (Phil Sutter) [1763652]
  - tests: py: Support testing host binaries (Phil Sutter) [1754047]
  - tests: monitor: Support testing host's nft binary (Phil Sutter) [1754047]
  - tests: monitor: Support running individual test cases (Phil Sutter) [1754047]
  - tests: json_echo: Support testing host binaries (Phil Sutter) [1754047]
  - tests: json_echo: Fix for Python3 (Phil Sutter) [1754047]


author: Phil Sutter <psutter@redhat.com> [0.9.3-11.el8]
changelog:
  - Package requires libnftnl-1.1.5-3 (Phil Sutter) [1795224]
  - src: Add support for concatenated set ranges (Phil Sutter) [1795224]
  - src: Add support for NFTNL_SET_DESC_CONCAT (Phil Sutter) [1795224]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795224]
  - parser: add a helper for concat expression handling (Phil Sutter) [1795224]


author: Phil Sutter <psutter@redhat.com> [0.9.3-14.el8]
changelog:
  - JSON: Improve performance of json_events_cb() (Phil Sutter) [1835300]
  - doc: Document notrack statement (Phil Sutter) [1841292]


author: Phil Sutter <psutter@redhat.com> [0.9.3-15.el8]
changelog:
  - segtree: Fix get element command with prefixes (Phil Sutter) [1832235]
  - tests: 0034get_element_0: do not discard stderr (Phil Sutter) [1832235]
  - segtree: Merge get_set_interval_find() and get_set_interval_end() (Phil Sutter) [1832235]
  - segtree: Use expr_clone in get_set_interval_*() (Phil Sutter) [1832235]
  - segtree: Fix missing expires value in prefixes (Phil Sutter) [1832235]


author: Phil Sutter <psutter@redhat.com> [0.9.3-16.el8]
changelog:
  - src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1820684]
  - include: Resync nf_tables.h cache copy (Phil Sutter) [1820684]


author: Phil Sutter <psutter@redhat.com> [0.9.3-17.el8]
changelog:
  - json: don't leave dangling pointers on hlist (Phil Sutter) [1900565]
  - json: Fix seqnum_to_json() functionality (Phil Sutter) [1900565]
  - json: echo: Speedup seqnum_to_json() (Phil Sutter) [1900565]
  - proto: Fix ARP header field ordering (Phil Sutter) [1896334]
  - proto: add sctp crc32 checksum fixup (Phil Sutter) [1895804]
  - mergesort: unbreak listing with binops (Phil Sutter) [1891790]
  - evaluate: missing datatype definition in implicit_set_declaration() (Phil Sutter) [1877022]
  - evaluate: Perform set evaluation on implicitly declared (anonymous) sets (Phil Sutter) [1877022]
  - src: store expr, not dtype to track data in sets (Phil Sutter) [1877022]


author: Phil Sutter <psutter@redhat.com> [0.9.3-19.el8]
changelog:
  - evaluate: Reject quoted strings containing only wildcard (Phil Sutter) [1818117]
  - tests: monitor: use correct $nft value in EXIT trap (Phil Sutter) [1919203]
  - monitor: Fix for use after free when printing map elements (Phil Sutter) [1919203]
  - tests: Disable tests known to fail on RHEL8 (Phil Sutter) [1919203]


author: Phil Sutter <psutter@redhat.com> [0.9.3-20.el8]
changelog:
  - src: Optimize prefix matches on byte-boundaries (Phil Sutter) [1934926]
  - src: Support odd-sized payload matches (Phil Sutter) [1934926]
  - spec: Add an rpminspect.yaml file to steer rpminspect (Phil Sutter) [1962184]
  - spec: Explicitly state dist string in Release tag (Phil Sutter) [1962184]


author: Phil Sutter <psutter@redhat.com> [0.9.3-21.el8]
changelog:
  - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203]
  - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365]
  - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334]
  - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334]
  - scanner: sctp: Move to own scope (Phil Sutter) [1979334]
  - scanner: introduce start condition stack (Phil Sutter) [1979334]
  - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334]
  - json: tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334]
  - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334]
  - tcpopt: rename noop to nop (Phil Sutter) [1979334]
  - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334]
  - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334]
  - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334]


author: Phil Sutter <psutter@redhat.com> [0.9.3-22.el8]
changelog:
  - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059]
  - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059]
  - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059]
  - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141]


author: Phil Sutter <psutter@redhat.com> [0.9.3-23.el8]
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127]
  - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-24.el8]
changelog:
  - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127]
  - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-25.el8]
changelog:
  - mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
  - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
  - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
  - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
  - src: support for restoring element counters (Phil Sutter) [2039594]
  - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]


author: Phil Sutter <psutter@redhat.com> [0.9.3-26.el8]
changelog:
  - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
  - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
  - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
  - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
  - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
  - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
  - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]


author: Ben Boeckel <mathstuf@gmail.com> - 0-0.5.20120709gitb90d038
changelog:
  - Preserve timestamps on install
  - Install as ninja-build to avoid conflicts with the ninja IRC package
  - Update snapshot


author: Dan Horák <dan[at]danny.cz> - 1.3.4-2
changelog:
  - workaround possible too low limits for number of processes and open files,
    fixes build on ppc/ppc64 and s390(x)


author: Ben Boeckel <mathstuf@gmail.com> - 1.7.1-1
changelog:
  - update to 1.7.1
  - fix bash completion for the binary rename (#1352330)
  - disable test which fails to koji rlimit settings


author: Akira TAGOH <tagoh@redhat.com> 2.03-1
changelog:
  - New upstream release.
  - converted Japanese nkf.1 to UTF-8. (#105762)
  - nkf-1.92-glibc2290.diff: removed.


author: Gris Ge <fge@redhat.com> - 1.1.0-3
changelog:
  - Fix state=ignore for OVS interface. RHBZ#1944054
  - Fix verification for next hop address 0.0.0.0. RHBZ#1985879


author: Ana Cabral <acabral@redhat.com> - 1.1.1-0.1.alpha1
changelog:
  - Upgrade to 1.1.1 alpha1.
  - Canonicalize ipv6 addresses for dns nameservers. RHBZ#1911241
  - Throw better error when peer is missing for veth interfaces. RHBZ#1973973


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Mat Booth <mat.booth@redhat.com> - 6.1.1-1
changelog:
  - Update to latest upstream relase for Java 10 support
  - Switch to maven build
  - Now executing test suites


author: Guido Grazioli <guido.grazioli@gmail.com> 1.2-4
changelog:
  - Drop buildroot and %clean section
  - Drop use of maven2-settings.xml and jpp-depmap.xml
  - Install unversioned jars
  - Clean up of needed patch and mvn-jpp execution


author: Jiri Vanek <jvanek@redhat.com> 1.2-9
changelog:
  - Added patch2 - JRockitInstantntiatorCharacters.patch to fix unmappable characters
  - Added build requires  apache-resource-bundles and  maven-remote-resources-plugin


author: Toshio Kuratomi <toshio-tiki-lounge.com> - 3.08.3-4
changelog:
  - Fix for gcc4 and the 32 bit assembly in otherlibs/num.
  - Fix to allow compilation with RPM_OPT_FLAG defined -O level.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-5
changelog:
  - Don't include the release number in fedora-ocaml-release file, so
    that packages built against this won't depend on the Fedora release.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-6
changelog:
  - ocaml-runtime provides ocaml(runtime) = 3.10.0, and
    ocaml-find-requires.sh modified so that it adds this requires
    to other packages.  Now can upgrade base ocaml packages without
    needing to rebuild everything else.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-7
changelog:
  - Run chrpath to delete rpaths used on some of the stublibs.
  - Ignore Parsetree module in dependency calculation.
  - Fixed ocaml-find-{requires,provides}.sh regexp calculation so it doesn't
    over-match module names.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.2-3
changelog:
  - ocaml-ocamldoc provides ocamldoc (bz #449931).
  - REMOVED provides of labltk, camlp4.  Those are libraries and all
    packages should now depend on ocaml-labltk / ocaml-camlp4 / -devel
    as appropriate.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-1
changelog:
  - OCaml 3.11.1 (this is virtually the same as the release candidate
    that we were using for Fedora 12).


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-2
changelog:
  - ocaml-find-requires.sh: Calculate runtime version using ocamlrun
    -version instead of fedora-ocaml-release file.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-1
changelog:
  - New upstream version 3.12.0.
    http://fedoraproject.org/wiki/Features/OCaml3.12
  - Remove ppc64 support patch.
  - Rebase rpath removal patch.
  - ocamlobjinfo is now an official tool, so no need to compile it by hand.
    Add objinfo_helper.
  - Disable ocamlplugininfo.
  - Remove addlabels, scrapelabels.
  - Remove ocaml/stublibs/dlltkanim.so.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-2
changelog:
  - Try depending on OCaml BR to fix:
    /usr/lib/rpm/ocaml-find-provides.sh: /builddir/build/BUILDROOT/ocaml-3.12.0-1.fc15.i386/usr/bin/ocamlobjinfo: /usr/bin/ocamlrun: bad interpreter: No such file or directory


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-7
changelog:
  - Allow this package to be compiled on platforms without native
    support and/or natdynlink, specifically ppc64.  This updates (and
    hopefully does not break) DJ's previous *.cmxs change for arm.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-2
changelog:
  - add back ocaml-ppc64.patch for ppc secondary arch, drop .cmxs files
    from file list on ppc (cherry picked from F16 - this should have
    gone into Rawhide originally then been cherry picked back to F16)


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-3
changelog:
  - New ARM backend by Benedikt Meurer, backported to OCaml 3.12.1.
    This has several advantages, including enabling natdynlink on ARM.
  - Provide updated config.guess and config.sub (from OCaml upstream tree).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-6
changelog:
  - Move patches to external git repo:
    http://git.fedorahosted.org/git/?p=fedora-ocaml.git
    There should be no change introduced here.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-8
changelog:
  - Modify the ppc64 patch to reduce the delta between power64 and
    upstream power backends.
  - Clean up the spec file and bring it up to modern standards.
    * Remove patch fuzz directive.
    * Remove buildroot directive.
    * Rearrange source unpacking.
    * Remove chmod of GNU config.* files, since git does it.
    * Don't need to remove buildroot in install section.
    * Remove clean section.
    * git am </dev/null to avoid hang (thanks Adam Jackson).
  - Note there is no functional change in the above.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-9
changelog:
  - Include svn rev 12548 to fix invalid generation of Thumb-2 branch
    instruction TBH (upstream PR#5623, RHBZ#821153).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-10
changelog:
  - Include patch to link dllthreads.so with -lpthread explicitly, to
    fix problem with 'pthread_atfork' symbol missing (statically linked)
    on ppc64.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-11
changelog:
  - ppc64: Fix position of stack arguments to external C functions
    when there are more than 8 parameters.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-12
changelog:
  - ppc64: Include fix for minor heap corruption because of unaligned
    minor heap register (RHBZ#826649).
  - Unset MAKEFLAGS before running build.


author: Richard W.M. Jones <rjones@redhat.com> 4.00.0-0.3.beta2
changelog:
  - Upgrade to OCaml 4.00.0 beta 2.
  - The language is now officially called OCaml (not Objective Caml, O'Caml etc)
  - Rebase patches on top:
    . New ARM backend patch no longer required, since upstream.
    . Replacement config.guess, config.sub no longer required, since upstream
      versions are newer.
  - PPC64 backend rebased and fixed.
    . Increase the default size of the stack when compiling.
  - New tool: ocamloptp (ocamlopt profiler).
  - New VERSION file in ocaml-runtime package.
  - New ocaml-compiler-libs subpackage.
  - Rearrange ExclusiveArch alphanumerically.
  - alpha, ia64 native backends have been removed upstream, so they are
    no longer supported as native compiler targets.
  - Remove defattr.
  - Make OCaml dependency generator self-contained so it doesn't need
    previous version of OCaml around.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-1
changelog:
  - Update to new major version OCaml 4.01.0.
  - Rebase patches.
  - Remove bogus Requires 'ncurses-devel'.  The base ocaml package already
    pulls in the library implicitly.
  - Remove bogus Requires 'gdbm-devel'.  Nothing in the source mentions gdbm.
  - Use mkstemp instead of mktemp in ocamlyacc.
  - Add LICENSE as doc to some subpackages to keep rpmlint happy.
  - Remove .ignore file from some packages.
  - Remove period from end of Summary.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-4
changelog:
  - Add bundled(md5-plumb) (thanks: Tomas Mraz).
  - Add NON-upstream (but being sent upstream) patch to allow --flag=arg
    as an alternative to --flag arg (RHBZ#1028650).


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-8
changelog:
  - Don't use ifarch around Patch lines, as it means the patch files
    don't get included in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-14
changelog:
  - Remove ExclusiveArch.
  - Add ocaml-srpm-macros subpackage containing arch macros.
  - See: RHBZ#1087794


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.1
changelog:
  - Update to 4.02.0-beta1 + patches from the upstream 4.02 branch.
  - REMOVED labltk and camlp4 packages, since these are now packaged
    separately upstream.
  - Upstream includes fix for stack alignment issues on i686, so remove hack.
  - Upstream now uses mkstemp where available, so patch removed.
  - Upstream includes Aarch64 backend, so remove our own backport.
  - Drop BR on ocaml-srpm-macros, since it is now included in Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.5
changelog:
  - Disable CSE optimization which is broken on armv7hl and aarch64.
  - Fix broken caml_callback2 on aarch64
    http://caml.inria.fr/mantis/view.php?id=6489


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.7
changelog:
  - Rebase on top of 4.02.0 beta commit c4f3a6c7.
  - Remove the patch to disable CSE, since that problem is fixed upstream.
  - Remove the patch fixing caml_callback2 on aarch64 since that patch is
    now upstream.
  - Make the compiler depend on ocaml-runtime explicitly.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-1
changelog:
  - New upstream OCaml 4.02.0 final.
  - Add patch for ocaml-camlimages
    (see http://caml.inria.fr/mantis/view.php?id=6517)


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-3
changelog:
  - Use -fno-strict-aliasing when building the compiler (RHBZ#990540).
  - ppc, ppc64, ppc64le: Mark stack as non-executable.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.1-3
changelog:
  - ppc, ppc64, ppc64le: Properly mark stack as non-executable.
    The upstream fix was not applied completely.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-0.rc1.1
changelog:
  - New upstream version: 4.02.2+rc1.
  - Dropped two aarch64 patches which are now included upstream.
  - Includes libasmrun_shared.so (RHBZ#1195025).


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-1
changelog:
  - New upstream version: 4.02.2.
  - No need for a mass rebuild, since this version is identical to RC1.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-4
changelog:
  - Couple of minor build fixes for ppc64 and ppc64le.
  - ppc64/ppc64le: Fix behaviour of Int64.max_int ÷ -1 (RHBZ#1236615).


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-0.1.beta2
changelog:
  - New upstream version 4.04.0+beta2.
  - Remove our downstream ppc64 backends, and switch to upstream power backend.
  - Use autopatch instead of git for patching.
  - Allow parallel builds again.
  - Restore ppc stack limits.
  - Remove ocamlbuild.
  - Add *.byte bytecode binaries.


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-3
changelog:
  - s390x: Fix address of caml_raise_exn in native dynlink modules.
    (https://caml.inria.fr/mantis/view.php?id=7405)


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-4
changelog:
  - riscv64: Fix intermediate operands.
    (https://github.com/nojb/riscv-ocaml/issues/1)
  - Temporarily disable emacs subpackage on riscv64.


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.2-1
changelog:
  - New upstream version 4.04.2.
  - Fix: ocaml: Insufficient sanitisation allows privilege escalation for
    setuid binaries (CVE-2017-9772) (RHBZ#1464920).


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-2
changelog:
  - New upstream version 4.05.0.
  - Disable parallel builds for now.
  - *.mli files are now included in ocaml-compiler-libs.
  - Add possible fix for aarch64 with new binutils.


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Add final upstream fix for aarch64/binutils relocation problems.
    https://github.com/ocaml/ocaml/pull/1330


author: Richard W.M. Jones <rjones@redhat.com> - 4.06.0-1
changelog:
  - New upstream version 4.06.0.
  - Enable parallel builds again.
  - Rebase patches.
  - New binary ocamlcmt.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.3-1
changelog:
  - New upstream version 1.5.3.
  - Remove patch, now upstream.
  - Clean up the spec file.
  - Rebuild for OCaml 4.00.1.


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.4-1
changelog:
  - New upstream version 1.5.4.
  - Rebuild against OCaml 4.01.0.
  - Enable debuginfo.
    Does not work yet because the dumbass build system removed object files.
  - Small modernizations of the specfile.


author: Richard W.M. Jones <rjones@redhat.com> - 1.6.1-2
changelog:
  - New upstream version 1.6.1.
  - Rebuild for OCaml 4.02.0 beta.
  - Remove enable debug patch which is now upstream.
  - New version requires camlp4.


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.4-2
changelog:
  - Add all upstream patches since 1.7.4, including fixes for OCaml 4.07.
  - Use autosetup.
  - Remove obsolete old patch.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.2pl1-10
changelog:
  - BR added ocaml-ocamldoc so that ocamlfind ocamldoc works.
  - Fix path of camlp4 parsers in Makefile.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-1
changelog:
  - New upstream version 1.3.1.
  - This is required for programs using findlib and OCaml 4.00.0.
  - Add small patch to fix build of topfind.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Remove patch for OCaml 4 which has been obsoleted by upstream changes.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4-1
changelog:
  - New upstream version 1.4.
  - Build debuginfo.
  - Add -g option when running ocamlopt to generate debuginfo.
  - Don't need anti-prelink / stripping hacks for modern OCaml.
  - Modernize spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.1-1
changelog:
  - New upstream version 1.5.1.
  - Disable labltk and camlp4.  We will reenable when they are added back
    into Fedora.
  - Remove findlib/make_wizard and findlib/make_wizard.pattern.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-6
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New upstream version 1.2.5.
  - This version fixes a number of important memory issues found by
    valgrind and upgrading to this version is recommended for all users.
  - Remove patch now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.6-2
changelog:
  - New upstream version 1.2.6.
  - Removed patch which is now upstream.
  - Add upstream patch to fix ocaml tests.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.7-3
changelog:
  - New upstream version 1.2.7.
  - Removed patch which is now upstream.
  - Add upstream patches to fix ocaml install rule.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.0-3
changelog:
  - New upstream version 1.3.0.
  - This version adds Ruby bindings, so there is a new subpackage 'ruby-hivex'.
  - Add upstream patch to fix Ruby tests.
  - Remove epoch macro in ruby-hivex dependency.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-2
changelog:
  - New upstream version 1.3.1.
  - Remove patch, now upstream.
  - Don't need hack for making an unversioned Python module.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Rebased gnulib to work around RHBZ#756981.
  - Remove patches which are now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-7
changelog:
  - Bump and rebuild for Ruby update.
  - Add upstream patch to fix bindings for Ruby 1.9.
  - Add non-upstream patch to pass --vendor flag to extconf.rb


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.7-6
changelog:
  - Fix for latest Ruby in Rawhide.  Fixes build failure identified
    by mass rebuild yesterday.
  - Do not ignore error from running autoreconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.8-1
changelog:
  - New upstream version 1.3.8.
  - Fixes handling of keys which use ri-records, for both reading and
    writing (RHBZ#717583, RHBZ#987463).
  - Remove upstream patch.
  - Rebase dirs patch against new upstream sources.
  - Rebase ruby patch against new upstream sources.
  - Modernize the RPM spec file.
  - Fix .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.11-2
changelog:
  - Pull in a couple of upstream fixes:
    * Fix memory leak in _hivex_get_children.
    * Increase HIVEX_MAX_VALUE_LEN.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.11-7
changelog:
  - Move hivexregedit to perl-hivex subpackage, since otherwise hivex
    and hence libguestfs depends on perl (RHBZ#1194158).


author: Petr Šabata <contyk@redhat.com> - 1.3.11-13
changelog:
  - Correcting the perl build time dependency list
    Switching to virtual perl()-style symbols
    Dropping unused dependencies and adding some new to fix the FTBFS


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.12-1
changelog:
  - New upstream version 1.3.12.
  - Drop patches which are now upstream.
  - Use OCaml macros to test if OCaml native compiler is available.
  - Use autoreconf --force option.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.13-2
changelog:
  - New upstream version 1.3.13.
  - Drop ancient 'Conflicts' rule.
  - Drop Perl patch for setting INSTALLDIRS.
  - Depend on pod2html, pod2man binaries explicitly.


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Richard W.M. Jones <rjones@redhat.com> - 8.06.0-1
changelog:
  - New upstream version 8.06.0.
  - Big jump in upstream version numbers to match Tk versions.
  - ocaml-4.02.1 rebuild.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.1-1
changelog:
  - Fix license in man pages and examples.
  - Add nbdsh(1) man page.
  - Include the signature and keyring even if validation is disabled.
  - Update devel subpackage license.
  - Fix old FSF address in Python tests.
  - Filter Python provides.
  - Remove executable permission on the tar.gz.sig file.
  - Initial release.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.6-2
changelog:
  - Add all upstream patches since 0.9.6 was released.
  - Package the ocaml bindings into a subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-3
changelog:
  - Bump and rebuild to fix releng brokenness.
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-4
changelog:
  - Fix nbdkit dependencies so we're actually running the tests.
  - Add glib2-devel BR so we build the glib main loop example.
  - Add upstream patch to fix test error:
    nbd_connect_unix: getlogin: No such device or address
  - Fix test failure on 32 bit.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.4-1.git20131001.4ee231e
changelog:
  - update to recent git-snapshot
  - general cleanup, squashed unneeded BuildRequires
  - cleanup the %doc mess.
  - add %check for running the testsuite


author: Björn Esser <fedora@besser82.io> - 2.2.8-3.git20151217.0122332
changelog:
  - add Requires for virtual Provides: opencl-icd (RHBZ #1317600)
  - add rubygems and rubypick to BuildRequires


changelog: - Fixed bug 517973
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-8.487f0dde7593144ceabd817306500465caf7602agit


changelog: - Fixed version info
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-9.487f0dde7593144ceabd817306500465caf7602agit


author: Hans de Goede <hdegoede@redhat.com> - 1.9.563-1.d6e439244ae00a1750f0dc8b249f47efb4967a23git
changelog:
  - Update to 1.9.563 + some fixes from git
  - This fixes:
    - Not having any sound in chromium-bsu 
    - Various openal using programs hanging on exit


changelog: - Updatet to an newer git version because of some pulseaudio fixes.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-3.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed broken upgrade paths.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-4.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed small spec verion info.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-5.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Newer git version with more Pulseaudio fixes. Have fun.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-6.0ceaa01c3de75c946ff2e7591e7f69b28ec00409


changelog: - Newer git version that fix more problems with pulseaudio.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-7.931f5875cdc4ce0ac61a5110f11e962426e53d99


changelog: - Fixed Bug 567870
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.11.753-2.a9e0e57797c6f4321d5776e1f29bf1e75b11e6a1


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.5-5
changelog:
  - Disable LAPACKE support on distributions where it is not available due to
    a too old version of lapack.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.5-10
changelog:
  - Due to long standing bug, replace all OpenBLAS LAPACK functions with
    generic ones, so that package can finally be released in stable.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.9-1
changelog:
  - Increase maximum amount of cores from 32 to 128.
  - Add 64-bit interface support. (BZ #1088256)
  - Update to 0.2.9. (BZ #1043083)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.15-2
changelog:
  - Enable armv7hl and ppc64le architectures.
  - Build versions of the 64-bit libraries with an additional suffix
    (BZ #1287541).


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.18-3
changelog:
  - Enable ppc64 and ppc64p7 architectures
    based on Dan Horák's patch (BZ #1356189).
  - Supply proper make flags to the tests.


author: Tom Callaway <spot@fedoraproject.org> - 0.2.19-4
changelog:
  - build a copy of openblas that thinks it is Rblas
    There are no code changes, except for libname and soname, it is identical to libopenblas.so.0
    Unfortunately, while R itself is fine using a symlink from libopenblas.so.0 to libRblas.so
    the larger R ecosystem becomes unhappy in this scenario.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.20-6
changelog:
  - Drop arch-dependent buildrequires (BZ #1545201); no changes to package
    (only affects packages custom built with --with system_lapack).


author: Nikola Forró <nforro@redhat.com> - 0.2.20-12
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Enable optimizations for all LAPACK sources
    resolves: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.2.20-13
changelog:
  - Fix detection of generic ARMv8 CPUs
  - Get rid of executable stack in libRblas.so
    related: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Michal Schmidt <mschmidt@redhat.com> - 2.2.8-4
changelog:
  - Return support for crypto hw on s390.
  - Renamed to opencryptoki.
  - Simplified multilib by putting libs in subpackage as suggested by Dan Horák.


author: Dan Horák <dan[at]danny.cz> - 2.4.1-1
changelog:
  - new upstream release 2.4.1
  - convert from initscript to systemd unit
  - import fixes from RHEL-6 about root's group membership (#732756, #730903)


author: Dan Horák <dan[at]danny.cz> - 2.4.2-3
changelog:
  - add virtual opencryptoki(token) Provides to token modules and as Requires
    to main package (#904986)


author: Dan Horák <dan[at]danny.cz> - 3.0-8
changelog:
  - include token specific directories (#1013017, #1045775, #1054442)
  - fix pkcsconf crash for non-root users (#10054661)
  - the libs subpackage must care of creating the pkcs11 group, it's the first to be installed


author: Jakub Jelen <jjelen@redhat.com> 3.2-2
changelog:
  - Fix missing sources and libraries in makefiles causing undefined symbols (#1193560)
  - Make inline function compatible for GCC5


author: Jakub Jelen <jjelen@redhat.com> 3.2-3
changelog:
  - Few more undefined symbols fixed for s390(x) specific targets
  - Do not require --no-undefined, because s390(x) requires some


author: Than Ngo <than@redhat.com> - 3.10.0-3
changelog:
  - Resolves: #1657683, can't establish libica token in FIPS mode
  - Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
  - Resolves: #1651731, ep11 token: enhanced IBM z14 functions
  - Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
  - Resolves: #1525407, use CPACF hashes in ep11 token
  - Resolves: #1651238, rebase to 3.11.0
  - Resolves: #1682530, gating


author: Than Ngo <than@redhat.com> - 3.14.0-1
changelog:
  - Resolves: #1723863 - ep11 token: Enhanced Support
  - Resolves: #1780285 - ep11 token: Support for new IBM Z hardware z15
  - Resolves: #1780293 - rebase to 3.14.0
  - Resolves: #1800549 - key management tool: list keys function
   -Resolves: #1800555 - key management tool: random key generation function


author: Than Ngo <than@redhat.com> - 3.15.0-1
changelog:
  - Resolves: #1847433, rebase to 3.15.0 
  - Resolves: #1851105, PKCS #11 3.0 - baseline provider support
  - Resolves: #1851108, openCryptoki ep11 token: enhanced functionality
  - Resolves: #1851109, openCryptoki key management tool: key deletion function


author: Than Ngo <than@redhat.com> - 3.15.1-1
changelog:
  - Related: #1847433
    upstream fixes:
      - Free generated key in all error cases
      - CCA: Zeroize key buffer to avoid CCA 8/32 error
      - Do not delete the map-btree entry if destroying an object is not allowed
      - Remove now unused header timeb.h
      - TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
      - Fix buffer overrun in C_CopyObject
      - TPM: Fix double free in openssl_gen_key


author: Than Ngo <than@redhat.com> - 3.15.1-3
changelog:
  - Resolves: #1902022
     Fix compiling with c++
     Added error message handling for p11sak remove-key command


author: Than Ngo <than@redhat.com> - 3.16.0-1
changelog:
  - Resolves: #1919223, rebase to 3.16.0
  - Resolves: #1922195, Event Notification Support
  - Resolves: #1959936, Soft token does not check if an EC key is valid
  - Resolves: #1851104, import and export of secure key objects
  - Resolves: #1851106, openCryptoki ep11 token: protected key support
  - Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys


author: Than Ngo <than@redhat.com> - 3.16.0-5
changelog:
  - Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2043845, rebase to 3.18.0
  - Resolves: #2043854, add crypto counters
  - Resolves: #2043855, support crypto profiles


author: Than Ngo <than@redhat.com> - 3.18.0-3
changelog:
  - Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
  - Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126612, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110315, rebase to 3.19.0
  - Resolves: #2110990, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110477, openCryptoki ep11 token: master key consistency
  - Resolves: #1984871, openCryptoki ep11 token: vendor specific key derivation


author: Simon Perreault <nomis80@nomis80.org> - 0.9.7-3
changelog:
  - Removed useless sample compilation makefiles/project files and replaced them
    with one that works on Fedora Core.
  - Removed shellbang from Python modules.


author: Ralf Corsépius <rc040203@freenet.de> - 1.0.0-3
changelog:
  - Fix %{_datadir}/opencv/samples ownership.
  - Adjust timestamp of cvconfig.h.in to avoid re-running autoheader.


author: kwizart < kwizart at gmail.com > - 1.0.0-14
changelog:
  - Fix for gcc44
  - Enable BR jasper-devel
  - Disable ldconfig run on python modules (uneeded)
  - Prevent timestamp change on install


author: kwizart < kwizart at gmail.com > - 1.1.0-0.1.pre1
changelog:
  - Update to 1.1pre1
  - Disable CXXFLAGS hardcoded optimization
  - Add BR: python-imaging, numpy
  - Disable make check failure for now


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-8
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Nicolas Chauvet <kwizart@gmail.com> - 2.3.1-1
changelog:
  - Update to 2.3.1
  - Add BR openni-devel python-sphinx
  - Remove deprecated cmake options
  - Add --with cuda conditional (wip)
  - Disable make test (unavailable)


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.1-1
changelog:
  - Update to 2.4.1
  - Rework dependencies - rhbz#828087
    Re-enable using --with tbb,openni,eigen2,eigen3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.3-2
changelog:
  - Disable SSE3 and allow --with sse3 build conditional.
  - Disable gpu module as we don't build cuda
  - Update to 2.4.3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.4-0.1.beta
changelog:
  - Update to 2.4.4 beta
  - Drop python-imaging also from requires
  - Drop merged patch for additionals codecs
  - Disable the java binding for now (untested)


author: Sérgio Basto <sergio@serjux.com> - 2.4.11-4
changelog:
  - Enable-gpu-module, rhbz #1236417, thanks to Rich Mattes.
  - Deleted the global gst1 because it is no longer needed.


author: Sérgio Basto <sergio@serjux.com> - 2.4.11-5
changelog:
  - Use bcond tags to easily enable or disable modules.
  - Package review, more cleaning in the spec file.
  - Fixed unused-direct-shlib-dependency in cmake with global optflags.
  - Added README.md index.rst with references to online documentation.
  - Investigation on the documentation, added a few notes.


author: Sérgio Basto <sergio@serjux.com> - 2.4.12.3-1
changelog:
  - Update opencv to 2.4.12.3 (#1271460).
  - Add aarch64 and ppc64le to list of architectures where TBB is supported (#1262788).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-2
changelog:
  - Add BR:libwebp-devel .
  - Merge from 2.4.12.3 package: 
    Add aarch64 and ppc64le to list of architectures where TBB is supported (#1262788).
    Use bcond tags to easily enable or disable modules.
    Fix unused-direct-shlib-dependency in cmake with global optflags.
    Added README.md with references to online documentation.
    Investigation on the documentation, added a few notes.
  - Update to 3.1.0 (Fri Mar 25 2016 Pavel Kajaba <pkajaba@redhat.com> - 3.1.0-1)
  - Added opencv_contrib (Thu Jul 09 2015 Sérgio Basto <sergio@serjux.com> -
    3.0.0-2)
  - Update to 3.0.0 (Fri Jun 05 2015 Jozef Mlich <jmlich@redhat.com> - 3.0.0-1)


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-3
changelog:
  - Use always ON and OFF instead 0 and 1 in cmake command.
  - Remove BUILD_TEST and TBB_LIB_DIR variables not used by cmake.
  - Add BRs: tesseract-devel, protobuf-devel, glog-devel, doxygen,
    gflags-devel, SFML-devel, libucil-devel, qt5-qtbase-devel, mesa-libGL-devel,
    mesa-libGLU-devel and hdf5-devel.
  - Remove BR: vtk-devel because VTK support is disabled. Incompatible 
    combination: OpenCV + Qt5 and VTK ver.6.2.0 + Qt4
  - Enable build with Qt5.
  - Enable build with OpenGL.
  - Enable build with UniCap.
  - Also requires opencv-contrib when install opencv-devel (#1329790).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-4
changelog:
  - Put all idefs and ifarchs outside the scope of rpm conditional builds, rather
    than vice versa, as had organized some time ago, it seems to me more correct.
  - Remove SIFT/SURF from source tarball in opencv_contrib, due to legal concerns
  - Redo and readd OpenCV-2.4.4-pillow.patch .
  - Add OpenCV-3.1-pillow.patch to apply only opencv_contrib .
  - Add the %python_provide macro (Packaging:Python guidelines).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-5
changelog:
  - Don't clean unneeded symbols (as recommended by fedora-review), fix undefined
    symbol: cvLoadImage in Unknown on line 0 on php-facedetect package.


author: Josef Ridky <jridky@redhat.com> - 3.2.0-1
changelog:
  - Rebase to the latest version (3.2.0) - #1408880
  - Remove unused BuildRequires and patches
  - Remove copyrighted lena.jpg images and SIFT/SURF from tarball, due to legal concerns.
  - Disable dnn module from opencv_contrib, due missing BuildRequired package in Fedora (protobuf-cpp)
  - Disable tracking module from opencv_contrib, due disabling dnn module (is required by this module)
  - Disable CAROTENE in compilation (caused error on arm and ppc64le)
  - Fix syntax error in opencv_contrib test file (opencv-3.2.0-test-file-fix.patch)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.0-6
changelog:
  - Python 2 binary package renamed to python2-opencv
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Sérgio Basto <sergio@serjux.com> - 3.2.0-9
changelog:
  - Enable openni.
  - Enable eigen3 except in ppc64le because fails to build in OpenCL headers.
  - Documented why is not enabled atlas, openblas and vtk.


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-1
changelog:
  - Update to 3.3.1
  - Fix WARNING: Option ENABLE_SSE='OFF' is deprecated and should not be used anymore
  -          Behaviour of this option is not backward compatible
  -          Refer to 'CPU_BASELINE'/'CPU_DISPATCH' CMake options documentation
  - Fix WARNING: Option ENABLE_SSE2='OFF' is deprecated and should not be used anymore
  -          Behaviour of this option is not backward compatible
  -          Refer to 'CPU_BASELINE'/'CPU_DISPATCH' CMake options documentation
  - Update opencv to 3.3.0
  - Patch3 is already in source code
  - Fix WARNING: Option ENABLE_SSE3='OFF' is deprecated and should not be used anymore
  - Enable openblas
  - Add conditonal to build with_gdcm
  - Disable "Intel ITT support" because source is in 3rdparty/ directory


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-3
changelog:
  - Rename sub-package opencv-python3 to python3-opencv and other minor fixes in
    python packaging
  - Generate documentation
  - Rename sub-package devel-docs to doc
  - Cleanup some comments from opencv 2.4 packaging


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-4
changelog:
  - Enable Pylint
  - Enable Clp (COIN-OR Linear Program Solver)
  - Enable VA (Video Acceleration API for Linux)
  - Enable OpenMP
  - Provides and obsoletes for opencv-devel-docs
  - BuildRequires perl-local do generate documentation without errors


author: Josef Ridky <jridky@redhat.com> - 3.4.1-1
changelog:
  - Spec clean up (remove Group tag, add ldconfig scriptlets, escape macros in comments)
  - Remove unused patch
  - Add gcc and gcc-c++ requirements
  - Rebase to version 3.4.1


author: Sérgio Basto <sergio@serjux.com> - 3.4.1-2
changelog:
  - Enable VA
  - Do not use -f on rm because it silences errors
  - Opencv sub-package don't need ldconfig because don't have any so


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with stylesheets (new-trials location changes).
  - /usr/lib/sgml -> /usr/share/sgml/%{name}-%{version}.
  - Remove %post and %postun.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - apply patch from Fritz Elfert <felfert@to.com>
  	- removed explicit stripping
  	- Added autoconf macro for correctly recognizing if size_t
  	  is unsigned int


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't conflict with stylesheets; require sgml-common >= 0.5 instead.
  - Revert autoconf change, as it's still broken.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Apply original autoconf patch to s390 s390x only. This patch can
    be deleted once s390* uses a current compiler.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Avoid creating bogus TeX output for section headings containing
    special characters (#bug 31525).


author: Tim Waugh <twaugh@redhat.com> 1.3-21
changelog:
  - Enable HTTP support.  Now a DocBook XML document can be processed by
    either xsltproc or openjade.


author: Tim Waugh <twaugh@redhat.com> 1.3.1-1
changelog:
  - 1.3.1.
  - Patches no longer needed: decl, strdup, foo, size_t, 31525, indev,
    ligature, twosidestartonright.
  - Updated lt patch.


author: Terje Bless <link@pobox.com> 1.3.2-17
changelog:
  - Split opensp out into its own package.
  - BuildRequire OpenSP-devel, Require OpenSP.
  - Drop openjade-1.3.1-manpage.patch (it patches opensp, not openjade, and is
    obsolete with external opensp).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.2-18
changelog:
  - Really BuildRequire opensp-devel.
  - Clean up unneeded build dependencies and configure options.
  - Drop dependency on docbook-dtds.
  - Fix %post(un) syntax and catalog installation.


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Tim Waugh <twaugh@redhat.com> 1.3.2-28
changelog:
  - Don't ship .so or .la files (bug #203635).
  - Added dist tag to release.
  - Fixed summary.
  - Fixed build root.
  - Removed prefix tag.


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.svn20140403
changelog:
  - Remove thirdparty libraries folder in prep
  - Own %{_libdir}/openjpeg-2.0/
  - Fix Requires
  - Add missing ldconfig
  - Add possibility to run conformance tests if desired


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-4.svn20140403
changelog:
  - Replace define with global
  - Fix #define optional_components 1S typo
  - Fix %(pwd) -> $PWD for test data
  - Added some BR for optional components
  - Include opj2_jpip_viewer.jar in %files


author: Sandro Mani <manisandro@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Fixes: CVE-2016-3183, CVE-2016-3181, CVE-2016-3182, CVE-2016-4796, CVE-2016-4797, CVE-2015-8871


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.37-1
changelog:
  - new upstream release (#1023916)
  - fix: missing a linefeed at the end of file /etc/openldap/ldap.conf (#1019836)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - remove redundant sysconfig-related stuff
  - add documentation reference to service file
  - alias slapd.service as openldap.service


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-5
changelog:
  - harden the build
  - improve check_password
  - provide an unversioned symlink to check_password.so.1.1


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-6
changelog:
  - remove openldap-fedora-systemd.patch
  - remove openldap-ldaprc-currentdir.patch
  - remove openldap-userconfig-setgid.patch
  - remove openldap-syncrepl-unset-tls-options.patch
  - remove unneeded configure flags, disable sql backend and aci
  - make mdb default after a new installation
  - remove pid file and args file
  - renumber patches and sources


author: Jan Synáček <jsynacek@redhat.com> - 2.4.40-7
changelog:
  - remove tmpfiles config since it's no longer needed
  - fix invalid ldif
  - simplify checking for missing server configuration


author: Matus Honek <mhonek@redhat.com> - 2.4.44-3
changelog:
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1375432)
  - fix: slapd should start after network-online.service (#1336487)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-9
changelog:
  - NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS (#1435692)
  - NSS: Rearrange ciphers-, parsing-, and protocol-related patches (#1435692)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-1
changelog:
  - Rebase to version 2.4.45 (#1458081)
    * fixes CVE-2017-9287 (#1456712, #1456713)
  - Update the 'sources' file with new SHA512 hashes


author: Matus Honek <mhonek@redhat.com> - 2.4.45-5
changelog:
  - Fix issues in MozNSS compatibility layer (#1400570)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.45-7
changelog:
  - MozNSS Compat. Layer fixes (#1400570)
    - fix incorrect parsing of CACertDir (orig. #1533955)
    - fix PIN disclaimer not always shown (orig. #1516409)
    - fix recursive directory deletion (orig. #1516409)
    - Ensure consistency of a PEM dir before usage (orig. #1516409)
      + Warn just before use of a PIN about key file extraction
    - Enable usage of NSS DB with PEM cert/key (orig. #1525485)
      + Fix a possible invalid dereference (covscan)


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.4.45-9
changelog:
  - Escape macros in %changelog
  - Disable TLSMC in F29+
  - Remove obsolete Group tag
  - Don't call ldconfig in servers subpackage
  - Switch to %ldconfig_scriptlets
  - Remove unneeded Requires(post): systemd-sysv, chkconfig
  - Switch to %systemd_requires
  - Change BuildRequires: systemd-units to systemd


author: Matus Honek <mhonek@redhat.com> - 2.4.45-12
changelog:
  - MozNSS Compat. Layer: fix: libldap tlsmc continues even after it fails to extract CA certificates (#1550110)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-13
changelog:
  - fix: openldap does not use Fedora build flags
    + makes use of redhat-rpm-config package
  - Drop superfluous back-sql linking patch


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.14-8
changelog:
  - Python 2 binary package renamed to python2-openscap
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jan Černý <jcerny@redhat.com> - 1.3.0_alpha1-1
changelog:
  - upgrade to the latest upstream release
  - change specfile to use CMake
  - dropped commands in the spec file that are no longer relevant
  - dropped subpackages in the spec file that are no longer relevant


author: Matěj Týč <matyc@redhat.com> - 1.3.0-4
changelog:
  - Fixed a sudo regression in oscap-ssh.
  - Updated test to work with newer versions of procps.
  - Updated the man page.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-6
changelog:
  - Removed containers package as RHEL-8.0.0 will not support it.
  - Removed oscap-chroot binary and manpage from utils package as RHEL-8.0.0 will not support it.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-7
changelog:
  - Removed oscap-vm binary and manpage files from build as they will not be supported by RHEL-8.0.0.
  - Explicitly specify which files should be in openscap-utils subpackage.


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.1-0
changelog:
  - Upgrade to the latest upstream release (rhbz#1718826)
  - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) (rhbz#1709429)
  - Tailoring files are included in ARF result files
  - Remote filesystems mounted using `autofs` direct maps are not recognized as local filesystems (rhbz#1655943)
  - Offline scan utilizing rpmverifyfile probe fails in fchdir and aborts (rhbz#1636431)


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.2-1
changelog:
  - Upgrade to the latest upstream release (rhbz#1778296)
  - Offline mode support for environmentvariable58 probe (rhbz#1493614)
  - The oscap-docker wrapper is available without Atomic
  - Improved support of multi-check rules (report, remediations, console output) (rhbz#1771438)
  - Improved HTML report look and feel, including printed version (rhbz#1640839)
  - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
  - Probe rpmverifyfile uses and returns canonical paths (rhbz#1776308)
  - Improved a11y of HTML reports and guides (rhbz#1767382)
  - Fixes and improvements for SWIG Python bindings (rhbz#1753603)
  - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
  - Fixed URL link mechanism for Red Hat Errata
  - New STIG Viewer URI: public.cyber.mil
  - Probe selinuxsecuritycontext would not check if SELinux is enabled
  - Scanner would provide information about unsupported OVAL objects
  - Added more tests for offline mode (probes, remediation) (rhbz#1618489)
  - #528 fixed: Eval SCE script when /tmp is in mode noexec
  - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage (rhbz#1636431)


author: Jan Černý <jcerny@redhat.com> - 1.3.2-7
changelog:
  - Fix segmentation fault in systemdunitdependency_probe (RHBZ#1793050)
  - Fix crash in textfilecontent probe (RHBZ#1686467)
  - Do not drop empty lines from Ansible remediations (RHBZ#1795563)
  - Fix oscap-ssh --sudo (RHBZ#1803116)
  - Remove useless warnings (RHBZ#1764139)


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.3-1
changelog:
  - Upgrade to the latest upstream release (rhbz#1829761)
  - Added a Python script that can be used for CLI tailoring (autotailor)
  - Added timezone to XCCDF TestResult start/end time
  - Added yamlfilecontent independent probe (proposal/draft implementation)
  - Added ability to generate `machineconfig` fix
  - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF
  - Fixed filepath pattern matching in offline mode in textfilecontent58 probe
  - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory
  - Fixed #1512: Severity refinement lost in generated guide
  - Fixed #1453: Pointer lost in Swig API
  - The data system_info probe return for offline and online modes is consistent and actual
  - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities
    from system_info probe


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.4-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1887794)
  - Treat GPFS as a remote file system (RHBZ#1840578, RHBZ#1840579)
  - Fixed the most problematic memory issues that were causing OOM situations
    for systems with large amount of files (RHBZ#1824152)
  - Proper handling of OVALs with circular dependencies between definitions (RHBZ#1812476)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.3-6
changelog:
  - Enable profile composition with a specific platform (RHBZ#1896676)
  - Enable YAML probe to work with sets of values (RHBZ#1895715)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1953092)
  - Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
  - Improve doc about --stig-viewer (RHBZ#1918759)
  - Backport an upstream patch adding CentOS CPE (RHBZ#1907935)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-3
changelog:
  - Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
  - Fix issues reported by the coverity scan
  - Introduce OSBuild 'blueprint' fix type


author: Jan Černý <jcerny@redhat.com> - 1.3.5-8
changelog:
  - Allow local DS components (rhbz#1970529)
  - Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
  - Add an alternative source of hostname (rhbz#1977668)
  - Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)


author: Jan Černý <jcerny@redhat.com> - 1.3.5-9
changelog:
  - Lower memory limits and improve their checking (rhbz#2021851)
  - Remove timestamp from the user manual (rhbz#2022364)


author: Jan Černý <jcerny@redhat.com> - 1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041781)
  - Select and exclude groups of rules on the command line
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
  - Remove oscap-remediate service (rhbz#2111360)


author: Jan Černý <jcerny@redhat.com> - 1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159290)
  - Fix error when processing OVAL filters (rhbz#2126882)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2222864)
  - Fix systemd* probes unit enumeration (rhbz#2223547)


author: Rex Dieter <rexdieter at sf.net> 0:1.0.11-0.fdr.2
changelog:
  - docs: remove CVS files, include rfc, move ProgrammersGuide to -devel.
  - improve sub-pkg descriptions.
  - improve server %preun,%postun scripts: condrestart on upgrade,
    suppress output of server shutdown,restarts.


author: Rex Dieter <rexdieter at sf.net> 0:1.0.11-0.fdr.6
changelog:
  - -server: Requires(preun,postun): /sbin/service
  - add a few more %doc files to base pkg.
  - initscript: add (real) 'reload' action.
  - initscript: use $prog instead of hardcoded slpd.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-1
changelog:
  - Update to openslp-2.0.0
  - Fix bogus dates in %changelog
  - Add systemd support
  - Add man pages for slptool and slpd
  - Add CFLAGS and LDFLAGS for full relro
  - Build with -fno-strict-aliasing


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3.17-2
changelog:
  - Don't include manual page directories (#1089412).
  - Use standard group Development/Libraries in library devel packages.
  - Use %?_isa in base package dependencies.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Jens Petersen <petersen@redhat.com> - 1.8.1.1-1
changelog:
  - update to 1.8.1.1
  - update to cabal2spec-0.23: add ppc64
  - new depends on citeproc-hs, dlist, json, pandoc-types, tagsoup
  - new pandoc_markdown.5 manpage


author: Jens Petersen <petersen@redhat.com> - 1.8.2.1-3
changelog:
  - disable ifluatex in default.latex for texlive-2007 (Luis Villa, #752621)
  - subpackage markdown2pdf and make it require texlive-xetex


author: Jens Petersen <petersen@redhat.com> - 1.9.1.1-1
changelog:
  - update to 1.9.1.1
    http://johnmacfarlane.net/pandoc/releases.html#pandoc-1.9-2012-02-05
  - new depends on blaze-html, temporary, zlib
  - markdown2pdf is now handled by pandoc itself:
    add README.fedora file documenting required texlive packages
  - add changelog file


author: Jens Petersen <petersen@redhat.com> - 1.11.1-6
changelog:
  - temporarily exclude armv7hl since build with ghc-7.6.3 and llvm-3.3 hanging
    mysteriously (#992430)


author: Björn Esser <besser82@fedoraproject.org> - 1.17.0.3-5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
    to get back in sync with Haskell so-names


author: Jens Petersen <petersen@redhat.com> - 2.0.6-4
changelog:
  - link executable statically to its Haskell deps for portability (#1657278)
  - add common subpackage for shared data files


author: Jens Petersen <petersen@redhat.com> - 2.0.6-6
changelog:
  - rebuild with ghc-cmark-gfm-0.2.3 for CVE-2022-24724 (#2074997)
  - https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: Kalev Lember <kalev@smartlink.ee> - 2.26.2-2
changelog:
  - Co-own /usr/share/gtk-doc/ directory (#604407)
  - Dropped pkgconfig dep from -devel subpackage which is now automatically added


author: Kalev Lember <klember@redhat.com> - 2.38.1-1
changelog:
  - Update to 2.38.1
  - Use make_install macro
  - Set minimum versions for required libraries
  - Tighten -devel deps with the _isa macro


author: William Cohen <wcohen@redhat.com> - 4.0.0-2
changelog:
  - correct the ctests/shlib test
  - have PAPI_set_multiplex() return proper value
  - properly handle event unit masks
  - correct PAPI_name_to_code() to match events
  - Resolves: rhbz562935 Rebase to papi-4.0.0


author: William Cohen <wcohen@redhat.com> - 4.2.0-2
changelog:
  - Include appropirate man pages with papi rpm. (rhbz749725)
  - Rebase to papi-4.2.0, fixup for coretemp component. (rhbz746851)


author: William Cohen <wcohen@redhat.com> - 5.1.1-5
changelog:
  - rhbz986673 - /usr/lib64/libpapi.so is unowned
  - Package files in /usr/share/papi only once.
  - Avoid dependency problem with parallel make of man pages.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.4.11
  - add EFI GPT patch from Matt Domsch (<Matt_Domsch@dell.com>)
  - don't run autoconf, it relies on a newer non-released version
    of autoconf...


author: Matt Wilson <msw@redhat.com>
changelog:
  - include python binding
  - enable shared library (for python binding, we want fpic code)
    with --enable-shared
  - build parted binary static with --enable-all-static
  - don't run libtoolize on this.


author: Matt Wilson <msw@redhat.com>
changelog:
  - added another fix for ext2/ext3
  - added Patch4 to move the crc32 function into its own namespace so
    we don't colide with zlib when both are in the same executable space


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a new dist tarball that contains a check in python code to
    make sure that a partition exists within a disk before trying to
    remove it from the disk
  - also changed _probe_with_open to make the first probed filesystem win


author: Matt Wilson <msw@redhat.com>
changelog:
  - 1.4.16
  - regenerated gpt patch against 1.4.16, incorporated
    parted-1.4.15-pre1-gpt-printf.patch into the same patch, removed Patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - made a new dist from CVS that includes binding for
    disk.get_partition_by_sector and accessing the name of a disk type


author: Matt Wilson <msw@redhat.com> 1.4.16-6
changelog:
  - added a patch (Patch1) to link the c library in dynamically, the
    rest of the libs statically for the parted binary (MF #49358)


author: Matt Wilson <msw@redhat.com> 1.4.16-8
changelog:
  - new dist from cvs with changes to the python binding: register
    DEVICE_I20 and DEVICE_ATARAID, check to make sure that a partition
    exists in the PedDisk when using it to find ped_disk_next_partition


author: Matt Wilson <msw@redhat.com> 1.4.20-0.1pre3
changelog:
  - new dist from CVS with new autoconf and automake
  - gpt is in 1.4.20, removed patch1 (gpt support)
  - partstatic is in 1.4.20, removed patch2 (partstatic patch)


author: Jeremy Katz <katzj@redhat.com> 1.4.24-6hammer
changelog:
  - libtoolize, etc for x86_64
  - hack to get the python module in the right place until python.m4 
    from automake is fixed


author: Jeremy Katz <katzj@redhat.com> 1.4.24-7
changelog:
  - use make LIBTOOL=/usr/bin/libtool instead of recreating everything
  - add patch from Jack Howarth <howarth@bromo.med.uc.edu> to self host properly
  - add patch to treat GPT structs as little-endian always and treat GUIDS 
    as little-endian blobs
  - add patch to recognize hp service partitions


author: Karsten Hopp <karsten@redhat.de> 1.6.3-11
changelog:
  - use different define to enable DASD debugging
    Otherwise we'll get a lot of dasd debug output because DEBUG is
    always defined


author: Matt Wilson <msw@redhat.com> 1.6.3-18
changelog:
  - use metadata partitions to protect DASD VTOC
  - stash DASD specific data in disk specific areas, not arch specific
    areas.


author: Matt Wilson <msw@redhat.com> 1.6.3-20
changelog:
  - don't detect AIX physical volumes as msdos partition tables (#91748)
  - added stubbed code for manipulating AIX PVs, enough to clobber the
    signature. (#91748)


author: Jeremy Katz <katzj@redhat.com> 1.6.3-33
changelog:
  - 2.6 removes the geometry fixups that used to be present for IDE disks.  
    According to Andries, just follow what's in the partition table and don't 
    worry about what Linux "detects"


author: Jeremy Katz <katzj@redhat.com> - 1.6.6-1
changelog:
  - update to 1.6.6 
  - split dasd into a patch instead of included in the tarball
  - python module is now in the pyparted package (separate src.rpm)
  - ExcludeArch: ppc64 (#118183)


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-1
changelog:
  - update to 1.6.9
  - need automake17
  - python-devel is superfluous with pyparted as a separate package
  - lose the fake-libtool stuff, 1.6.9 was disted with newer auto*


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-4
changelog:
  - add patch from Matt Domsch to not use the get/set last sector ioctls 
    with a 2.6 kernel (#121455)


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-1
changelog:
  - update to 1.6.12 with major changes to CHS handling to hopefully fix #115980
  - adjust dasd patch accordingly, drop some included patches


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-2
changelog:
  - fix assertion error when checking flags on non-active partition (#130692)
  - buildrequires: gettext-devel


author: Phil Knirsch <pknirsch@redhat.com> 1.6.15-4
changelog:
  - Fixed dasd patch (had some duplicate file patches in it)
  - Fixed problem with parted segfaulting on SCSI discs on s390 (#133997)


author: Jeremy Katz <katzj@redhat.com> - 1.6.15-5
changelog:
  - add patch from Matt Domsch to add a unique signature to new DOS labels 
    so that we can later determine which BIOS disk is which (#106674)


author: Jeremy Katz <katzj@redhat.com> - 1.6.16-2
changelog:
  - add patch from Matt Domsch to fix consistency of GPT disk labels 
    with the EFI specification for disks > 2TB (#138480)
  - understand the new Sun UFS partition ID
  - merge the new geometry probing from CVS to see if that helps the 
    assertions people are seeing (#138419)


author: Chris Lumens <clumens@redhat.com> 1.6.22-1
changelog:
  - Updated to 1.6.22.
  - Get rid of separate gc4 patch that's now included upstream.
  - Take Mac LVM patch from parted CVS.


author: Chris Lumens <clumens@redhat.com> 1.6.22-3
changelog:
  - Modified Apple_Free patch to take care of the case where the partitions
    are unnamed, causing many errors to be printed (#159047).


author: Chris Lumens <clumens@redhat.com> 1.6.23-1
changelog:
  - Updated to 1.6.23.
  - Get rid of separate Mac patches that are now included in upstream.
  - Update DASD and AIX patches.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-11
changelog:
  - Expand error buffer to 8192 bytes in vtoc_error()
  - Do not apply O_DIRECT patch on S/390 or S/390x platforms


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-12
changelog:
  - Updated O_DIRECT patch to work around s390 problems
  - Update LastUsableLBA on GPT-labeled disks after LUN resize (#194238)
  - Fix exception when backup GPT table is not in the correction location
    and parted tries to move it (#194238)


author: Peter Jones <pjones@redhat.com> - 1.7.1-13
changelog:
  - Don't use the "volume name" as the device node name on dm device
    partitions, it isn't really what we want at all.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-14
changelog:
  - Improve error message returned by _parse_header() on GPT-labeled disks
    so users actually have an idea of how to correct the problem
  - Fix off-by-one error with LastUsableLBA and PartitionEntryLBA overlap
    to prevent possible data corruption when using non-parted GPT editing
    tools


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-16
changelog:
  - Don't throw PED_EXCEPTION_ERROR in ped_geometry_read() if accessing
    sectors outside of partition boundary, since returning false will
    shift ped_geometry_check() to the correct sectors.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-17
changelog:
  - For init_generic() failures on user-mode Linux block devices, goto
    error_free_arch_specific instead of error_free_dev.


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-2
changelog:
  - Preserve starting sector for primary NTFS 3.1 partitions (Windows
    Vista) when modifying the DOS disk label.  NTFS 3.1 partitions do
    not start on the 2nd head of the 1st cylinder at the beginning of
    the drive.


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-3
changelog:
  - Remove BR for libtermcap-devel
  - Specifically preserve starting alignment of 0x800 on Windows Vista
    (see http://support.microsoft.com/kb/923332 for details)
  - Fix incorrect sector parameter used to initialize a new PedAlignment


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-4
changelog:
  - Patched parted.8 man page to show partition names apply to GPT disklabels
    as well as Mac and PC98 disklabels (#221600)


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-5
changelog:
  - Remove period from end of summary line (package review)
  - Use preferred BuildRoot (package review)
  - BR device-mapper-devel


author: David Cantrell <dcantrell@redhat.com> - 1.8.4-1
changelog:
  - Upgrade to GNU parted-1.8.4, summary of major changes:
       a) Update to use newest GNU developer tools
       b) Use gnulib, the GNU portability library
       c) HFS+ resize support
       d) Windows Vista fixes
       e) AIX disk label fixes
       f) >512 byte logical sector read support on Linux
  - Spec file cleanups per Fedora packaging guidelines


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-1
changelog:
  - Upgrade to GNU parted-1.8.6, summary of major change(s):
       a) Revert linux-swap(new) and linux-swap(old) fs types, it's
          linux-swap for all swap types (#233085)


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-4
changelog:
  - Fix primary partition cylinder alignment error for DOS disk labels (#229745)
  - Do not build and package up libparted.a, only the shared library


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-12
changelog:
  - Add KNOWN ISSUES section to parted(8) man page explaining that we cannot
    currently do ext3 resizing inside parted (#367101)
  - Update the xvd patch to include 'xvd' in the string table that parted
    uses when printing device types (#366971)
  - Do not install the linux.h or gnu.h headers


author: Peter Jones <pjones@redhat.com> - 1.8.8-4
changelog:
  - Don't interactively ask to fix an AlternateGPT's location when not
    at the end of the disk; this is so that disk images written to a
    usb-key can work reasonably.


author: Joel Granados <jgranado@redhat.com> - 1.8.8-15
changelog:
  - Begin to identify virtio devices.
  - Actually change the partition type in msdos lables (dcantrell).


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-15
changelog:
  - ped_partition_is_busy() should not throw exceptions (#527035)
  - msdos_partition_is_flag_available() should return 1 for swap flag (#513729)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-17
changelog:
  - Only change the partition type to 82 when setting the swap flag on dos
    labels, not when resetting it


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-20
changelog:
  - Fix error when creating a fresh dasd disk (#532425)
  - Rewrite dasd disk duplication patches, as the old old ones conflicted
    with fixing creating a fresh dasd disk


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-22
changelog:
  - Fix error when creating a fresh dasd disk on a dasd device
    with a corrupted dasd label (#533808)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-24
changelog:
  - Allow partitioning of loopback devices (#546622)
  - Add libparted function to query maximum partition length and start
    addresses for a given disk (#533417)
  - Add per disk flags functions from upstream, this is the way upstream
    has implemented the disable cylinder alignment functionality
  - Add --align cmdline option to specify how to align new partitions
    see the parted man page for details (#361951)
  - Make the default alignment for new partitions optimal (#361951)
  - When cylinder alignment is disabled, allow use of the last (incomplete)
    cylinder of the disk (#533328)
  - Don't crash when printing partition tables in Russian (#543029)
  - Make parted work correctly with new lvm (#525095)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-25
changelog:
  - Fix crash when partitioning loopback devices (#546622)
  - Drop no-cylinder-align patch:
    - its functionality is superseeded by the per disk flags
    - its only user (pyparted) has been updated to use those
    - this is not upstream so we don't want other programs to start using it


author: Hans de Goede <hdegoede@redhat.com> 2.1-2
changelog:
  - Fix various memory leaks in error paths (#556012)
  - Add %check section to the specfile, invoking make check


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - If a drive does not have alignment information available default
    to an alignment of 1MiB (#559639)


author: Hans de Goede <hdegoede@redhat.com> 2.1-4
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)


author: Hans de Goede <hdegoede@redhat.com> 2.2-4
changelog:
  - Properly check dm_task_run return value (#585158)
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)


