# changelog

author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.8-1
changelog:
  - Respect changesok password policy for root password (mkolman)
    Resolves: rhbz#1584145
  - Fix default value for pwpolicy emptyok (mkolman)
    Resolves: rhbz#1664704


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.9-1
changelog:
  - Adjust the exclude arguments for livepayloads (bcl)
    Related: rhbz#1684542
  - Recreate the BLS entries when using liveimg (bcl)
    Resolves: rhbz#1684542
  - Cache the liveimg tar kernel list (bcl)
    Related: rhbz#1684542
  - Add common function for creating rescue images (bcl)
    Related: rhbz#1684542
  - Re-generate BLS loader file snippets on live installs (awilliam)
    Related: rhbz#1684542


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.10-1
changelog:
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1733507


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.11-1
changelog:
  - Fix noverifyssl when downloading .treeinfo file (jkonecny)
    Resolves: rhbz#1726156
    Resolves: rhbz#1723811


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.12-1
changelog:
  - Add the install class for Red Hat Virtualization (vponcova)
    Resolves: rhbz#1753316
  - Extend support for custom storage checking (vponcova)
    Related: rhbz#1753316
  - Enable to define the autopart type in an install class (vponcova)
    Related: rhbz#1753316


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.1-3
changelog:
  - Add "enforce_for_root" to pam system-auth,password-auth
  - Patch: 1001-pam-add-enforce-for-root.patch


author: He Chunni <chunni@nfschina.com> - 3.28.0-4
changelog:
  - Modify localedir in meson-build and Chinese localization.
  - Add baobab-modify-localedir-Chinese-localization.patch


author: He Chunni <chunni@nfschina.com> - 3.28.0-5
changelog:
  - Remove MimeType from desktop file for nemo.
    Patch: 0001-Remove-MimeType-from-desktop-file.patch.


author: Neal Gompa <ngompa13@gmail.com> - 4.20.2-1
changelog:
  - New upstream release
  - Properly split out libraries into libs subpackages
  - Slightly modernize the spec


author: Jia <lina@cpu-os.ac.cn> - 1.0.6-27
changelog:
  - add patch bzip2-fixbug_0357269.patch
  - patch from https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 4.6.0-4
changelog:
  - nemo trash restore directory with same name translation
    Patch: 0003-nemo-trash-restore-directory-with-same-name-translat.patch


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: Xunian Tang <xunian@nfschina.com> - 1.0.2.nfs.6
changelog:
  - Add patch device-manager-1.0-nvme-disk-info.patch
  - Add patch nvme-cli-1.8.1.patch
  - Add patch device-manager-1.0-fix-systemversion.patch


author: Zhang Tao <zhangtao@cpu-os.ac.cn> - 1.0.2.nfs.13
changelog:
  - bug0356062 bug0355946 :修复在python3.6环境下，启动线程时会卡死。
  - Patch: device-manager-1.0-For4.0-optimize-stability.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.14
changelog:
  - Fix 0356063:修复在同方海光平台设备管理器不显示主板信息
  - add  device-manager-1.0-For4.0-Fix-tongfang-motherboard-info.patch


author: Marek Kasik <mkasik@redhat.com> - 3.5.27-8
changelog:
  - Remove XML file defining DjVu MIME type because it does not differentiate
  - between DjVu Image and DjVu Document (the default one in shared-mime-info does)
  - Resolves: #1513188


author: gongwen<gongwen@nfschina.com> - 68.5.0-2.nfs.1
changelog:
  - modify startup.homepage_override_url & startup.homepage_welcome_url in firefox-centos-default-prefs.js to "http://www.nfschina.com" 
  - modify spec for compiling with use_bundled_python_3
  - modify spec to remove copying of default_bookmarks_file


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Jia <lina@cpu-os.ac.cn> - 4.1.6-10
changelog:
  - 增加补丁Patch0,用于支持在server 4.0上的编译
  - 修改包名为giflib4, 避免和server 4.0上的默认主线包gitlib-5.1.4 冲突
  - 移除utils和devel相关文件，避免和giflib主线包冲突
  - 该包修改自NFS3.1,用于为java-1.7.0-openjdk添加依赖


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-12
changelog:
  - Add translations for desktop-icons extension.
    Patch: 0001-Add-the-translations-of-desktop-icons-extension.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-18
changelog:
  - Disable disable system partitions:
    '/', '/boot', '/boot/efi', '/home', '/recovery', '/var/log'.
  - Modify the default app for opening files to Nemo.
    0006-Disable-display-system-partitions-in-driver-menu.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.1-19
changelog:
  - bug0356809: 在测试版本中的待测评水印太小且字体不清晰，需尽快修改.
    Patch: 0007-Modify-the-panel-icon-size-of-top-icons.patch


author: He Chunni<chunni@nfschina.com> - 3.28.2-7
changelog:
  - Fix the problem of verifing the old password in password dialog.
    Patch: 0005-Fix-the-problem-of-checking-old-password-in-password.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 3.28.2-13
changelog:
  - bug#0357295: RTM1.3:已注册用户点击更换头像,下方拍照或选择照片按键为英文展示
    Patch: 0008-user-avatar-button-translation.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-5
changelog:
  - Set the default gsettings value of power-button-action to nothing.
    Patch: 0001-Modify-the-default-gsettings-value-of-power-button-a.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.0-6
changelog:
  - Add tranlations for account: gsd-account-manager.c.
    Patch: 0002-Add-tranlations-for-gsd-account-manager.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.0-7
changelog:
  - Fix delay empty trash settings changed not work
    Add patch: 0005-delay-empty-trash-settings-changed.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-14
changelog:
  - Remove the other user button in unlock page.
    Patch: 0004-Remove-other-user-button.patch.
  - Remove the session menu button in login page.
    Patch: 0005-Remove-session-menu-button.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-15
changelog:
  - Add enabledExtensions for user session mode.
    Patch: 0006-Add-enabledExtensions-for-user-session-mode.patch.


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-16
changelog:
  - Disable showing lock screen when user is not logged in.
    Patch: 0007-Disable-lock-screen-when-user-is-not-logged-in.patch.


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-17
changelog:
  - Fix close notification banners not work
    Patch: 0008-fix-close-notification-banners-not-work.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-18
changelog:
  - Disable the screen-magnifier function (#0356185).
    Patch: 0009-Disable-the-screen-magnifier-function.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-21
changelog:
  - Remove keyboard in unlock-dialog.
    Patch: 0012-Remove-keyboard-in-unlock-dialog.patch
  - Modify to suit Nemo.
    Patch: 0013-Modify-to-suit-Nemo.patch


author: Ni Yongliang <yongliang@cpu-os.ac.cn> - 3.32.2-22
changelog:
  - Forbid suspend function in system actions
    Patch: 0014-Forbid-suspend-function-in-system-actions.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32.2-23
changelog:
  - Add top-icons extension into default enabled-extensions list.
    The package gnome-shell-extension-top-icons must be installed.
    Patch: 0015-Add-top-icons-extension-in-default-enabled-extension.patch


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-4
changelog:
  - Add Add ibus-libpinyin and ibus-table-chinese-wubi-jidian into the default input sources.
    Patch: 0001-Add-default-input-sources-for-svs2.4.patch.


author: Jia Lina <saidan@cpu-os.ac.cn> - 3.32-0-6
changelog:
  - add post script to solve issue:
    GLib-GIO-ERROR **: 17:02:39.433: No GSettings schemas are installed on the system


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 3.32-0-7
changelog:
  - Modify the default wubi input source to wubi-haifeng86.
    Patch: 0002-Modify-default-wubi-input-source-to-wubi-haifeng86.patch.


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 1.36.2-8
changelog:
  - Modify the file-operations policy to disable non-root user to get permission.
    Patch: 0001-daemon-Modify-the-file-operations-policy.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.36.2-10
changelog:
  - Add removabel disk unmount notification translation
    Patch: 0003-removable-disk-unmount-notification-translation.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Kalev Lember <klember@redhat.com> - 3.12.0-14
changelog:
  - Add gnome-keyring-devel provides (#1557241)
  - Minor spec cleanup
  - Use license macro for COPYING
  - Rely on pkgconfig dep extractor instead of manual glib2-devel requires
  - Tighten -devel requires with the _isa macro


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Artem Polishchuk <ego.cordatus@gmail.com> - 19.10.2-7
changelog:
  - Initial package
  - Thanks to Vitaly Zaitsev <vitaly@easycoding.org> for help with packaging and review


author: Petr Pisar <ppisar@redhat.com> - 47-19
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: jiwu <jiwu@cpu-os.ac.cn> - 47-25.nfs.1
changelog:
  * Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 47-25
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild


author: Zhang Saidan <saidan@cpu-os.ac.cn> - 4.6.2-30
changelog:
  - bug0356703: 删除U盘文件通过回收站无法恢复及清空.
    Patch: 0031-Bug-of-moving-files-in-mounted-partition-to-trash.patch


author: Stephen Gallagher <sgallagh@redhat.com> - 80.1-2
changelog:
  - Separate desktop backgrounds into their own subpackage
  - Correct the description to match the license terms
  - Drop vestiges of fedora-logos


author: Ray Strode <rstrode@redhat.com> - 80.3-1
changelog:
  - Make night time pattern lighter
    Resolves: #1628092
  - Remove Alpha from logos
    Resolves: #1637446
  - Remove Alpha from wallpapers
    Resolves: #1636822


author: Alain Reguera Delgado <areguera@centosproject.org> - 80.5-2
changelog:
  - Add CentOS brands
  - Add CentOS backgrounds based on artistic motif sketch 4
  - Support rolling notes localization in CentOS installer


author: wqx<qixu@cpu-os.ac.cn>
changelog:
  - bug514 安装Flash插件时，root用户安装Flash成功，切换到普通用户需要再次安装且提示Flash安装失败
  - bug516 在线播放视频和音频没有声音，但是在系统设置-声音试听中能够听到声音


author: Support <support@nfschina.com> - 1.0.2-1nfs
changelog:
  - Add /usr/lib/systemd/systemd-logind to process list & Add echo -1000 > gnome-terminal-server/oom_score_adj


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.1-35
changelog:
  - Python 2 binary package renamed to python2-notify
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.1.1-38
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.13.3-5
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Fedora Release Engineering <releng@fedoraproject.org> - 16.02-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Remi Collet <remi@remirepo.net> - 4.9.1-1
changelog:
  - update to 4.9.1 (2019-09-21, bug fix release)
  - add tarball signature check
  - allow twig version 2


author: Remi Collet <remi@remirepo.net> 5.0.0-1
changelog:
  - update to 5.0.0 (2019-12-26, new features release)
  - raise dependency on PHP 7.1.3
  - raise dependency on phpmyadmin/sql-parser 5.0
  - raise dependency on twig 2.1
  - add dependency on pragmarx/google2fa-qrcode
  - drop dependency on pragmarx/google2fa and bacon/bacon-qr-code
  - drop dependency on psr/container
  - sync spec file with remirepo one


author: Remi Collet <remi@remirepo.net> 5.0.2-1
changelog:
  - update to 5.0.2 (2020-03-21, security release)
  - use phpmyadmin/twig-i18n-extension instead of twig/extensions


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15.1
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Eric Smith <brouhaha@fedoraproject.org> 1.1.6-1
changelog:
  - New upstream version 1.1.6 (#1441428)
  - Update upstream tarball dir
  - Convert to newer build marcos
  - Update tests to pass in new build
  - These RPM spec changes were all provided by Greg Hellings.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.6-3
changelog:
  - Python 2 binary package renamed to python2-enum34
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-10
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-11
changelog:
  - Remove the Python 2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1590793
  - Re-enable tests


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-3
changelog:
  - Subpackage python2-jdcal has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.4-4
changelog:
  - Subpackage python2-openpyxl has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Björn Esser <besser82@fedoraproject.org> - 0.66-1
changelog:
  - Update to 0.66 release (rhbz 1693765)
  - Modernize spec file
  - Add some additional BuildRequires
  - Add Requires: p7zip


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to 
    common criteria requirements
    resolves: rhbz#1733244


author: Lukas Nykryn <lnykryn@redhat.com> - 239-16
changelog:
  - sd-bus: deal with cookie overruns (#1694999)
  - journal-remote: do not request Content-Length if Transfer-Encoding is chunked (#1708849)
  - journal: do not remove multiple spaces after identifier in syslog message (#1691817)
  - cryptsetup: Do not fallback to PLAIN mapping if LUKS data device set fails. (#1719153)
  - cryptsetup: call crypt_load() for LUKS only once (#1719153)
  - cryptsetup: Add LUKS2 token support. (#1719153)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1713227)
  - Change job mode of manager triggered restarts to JOB_REPLACE (#11456
  - bash-completion: analyze: support 'security' (#1733395)
  - man: note that journal does not validate syslog fields (#1707175)
  - rules: skip memory hotplug on ppc64 (#1713159)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-17
changelog:
  - mount: simplify /proc/self/mountinfo handler (#1696178)
  - mount: rescan /proc/self/mountinfo before processing waitid() results (#1696178)
  - swap: scan /proc/swaps before processing waitid() results (#1696178)
  - analyze-security: fix potential division by zero (#1734400)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18
changelog:
  - shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() (#1746857)
  - sd-bus: adjust indentation of comments (#1746857)
  - resolved: do not run loop twice (#1746857)
  - resolved: allow access to Set*Link and Revert methods through polkit (#1746857)
  - resolved: query polkit only after parsing the data (#1746857)


author: Lukas Nykryn <lnykryn@redhat.com> - 239-18.1
changelog:
  - journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup (#1767716)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.3
changelog:
  - core, job: fix breakage of ordering dependencies by systemctl reload command (#1781712)
  - syslog: fix segfault in syslog_parse_priority() (#1781712)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1781712)
  - test: use PBKDF2 instead of Argon2 in cryptsetup... (#1781712)
  - test: mask several unnecessary services (#1781712)
  - test: bump the second partition's size to 50M (#1781712)
  - sd-bus: make rqueue/wqueue sizes of type size_t (#20201712)
  - sd-bus: reorder bus ref and bus message ref handling (#20201712)
  - sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success (#20201712)
  - sd-bus: drop two inappropriate empty lines (#20201712)
  - sd-bus: initialize mutex after we allocated the wqueue (#20201712)
  - sd-bus: always go through sd_bus_unref() to free messages (#20201712)
  - bus-message: introduce two kinds of references to bus messages (#20201712)
  - sd-bus: introduce API for re-enqueuing incoming messages (#20201712)
  - sd-event: add sd_event_source_disable_unref() helper (#20201712)
  - polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it (#20201712)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.4
changelog:
  - sd-bus: use "queue" message references for managing r/w message queues in connection objects (CVE-2020-1712)


author: He Chunni <chunni@neschina.com> - 239-18.nfs.5
changelog:
  - fix 0355845 fix reboot time out User Manager
    0240-fix-0355845-reboot-time-out-User-Manager.patch


author: Larence R. Rogers <lrr@cert,org> - 5.3.0-1
changelog:
  * Release 5.3.0-1
    1. Directory wildcards are allowed in RAR command line in file names to
        archive. For example:

        rar a backup c:\backup\2015*\*

        Recursion is enabled automatically for such directory wildcards
        even if -r switch is not specified.

     2. New 'R' object for -sc switch defines encoding of console
        RAR messages sent to redirected files and pipes. For example:

        rar lb -scur data > list.txt

        will produce Unicode list.txt with archived file names.

     3. Console RAR "l" and "v" commands display file time in YYYY-MM-DD
        format.

     4. "Test" command also verifies contents of NTFS alternate data streams
        in RAR 3.x - 5.x archives. Previously their contents was checked
        only during extraction command.

     5. Bugs fixed:

        a) console RAR crashed instead of displaying an overwrite prompt
           when attempting to add files to already existing volumes;

        b) console RAR "lt" command did not display seconds in file timestamp.


author: Pavel Hrdina <phrdina@redhat.com> - 2.0.0-2
changelog:
  - virt-install: Fix description for --os-variant (rhbz#1649406)
  - virt-install: Add "Guest OS" options group (rhbz#1649406)
  - virt-xml: Accept --os-variant option (rhbz#1649406)
  - tests: Add some tests for virt-xml with KVM (rhbz#1649406)
  - virt-xml: Start using --os-variant (rhbz#1649406)
  - cli: s390x+graphics specified, use video=virtio (bz #1654994) (rhbz#1654994)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-1
changelog:
  - Rebased to virt-manager-2.2.0 (rhbz#1721001)
  - The rebase also fixes the following bugs:
      rhbz#1718065, rhbz#1714304, rhbz#1709857, rhbz#1707379, rhbz#1700354
      rhbz#1692489, rhbz#1690687, rhbz#1690685, rhbz#1683609, rhbz#1679018
      rhbz#1677019, rhbz#1671599, rhbz#1667025, rhbz#1666597, rhbz#1663430
      rhbz#1661867, rhbz#1660467, rhbz#1660123, rhbz#1659354, rhbz#1658511
      rhbz#1648939, rhbz#1599139, rhbz#1508147, rhbz#1501608
  - spec: add build dependencies that are now required for build (rhbz#1721001)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-2
changelog:
  - xmleditor: Handle gtksourceview3 as well as gtksourceview4 (rhbz#1722820)
  - xmleditor: Fix the gtksource version checking (rhbz#1722820)
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Tom Callaway <spot@fedoraproject.org> - 3.6.2-4
changelog:
  - fix conditionals so that Fedora builds against system openblas for lapack/blas
    and we only generate the R lapack/blas libs on RHEL 5-6-7 (where system lapack/openblas
    is not reliable). Thanks to Dirk Eddelbuettel for pointing out the error.


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Li Ting <liting@cpu-os.ac.cn> - 3.32.1-22
changelog:
  - bug357377: RTM1.6:在正常使用过程中概率性发生桌面卡死现象
    Patch: 0009-do-not-show-window-previews-in-window-list.patch


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d:
    - DST for Asia/Gaza and Asia/Hebron has changed 
      from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-1
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.
  - Include changes introduced in tzdata-2018f
    - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00.
    - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as
      previously predicted.
    - Most of Chile will end DST on the first Saturday in April at 24:00
      and restart DST on the first Saturday in September at 24:00.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


