# changelog

author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Source cri-tools from https://github.com/kubernetes-sigs/cri-tools
    instead of https://github.com/kubernetes-incubator/cri-tools


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Bump minimum versions of all kubernetes dependencies
  - Remove conditional logic for unsupported versions of Kubernetes


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source CNI plugins from https://storage.googleapis.com/k8s-artifacts-cni/release
    instead of https://dl.k8s.io/network-plugins


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source cri-tools from https://storage.googleapis.com/k8s-artifacts-cri-tools/release
    instead of https://github.com/kubernetes-sigs/cri-tools


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.32.10-3
changelog:
  - preserve the IPv6 multicast route added by kernel (rh #2004212)
  - cloud-setup: better handle other route configuration (rh #1977984)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: yangminglei <minglei@nfschina.com> [4.19.113-18.99.nfs]
changelog:
  - fix CVE-2022-21123, CVE-2022-21125, CVE-2022-21166
  - backport the following patches:
  x86/cpu: Add a steppings field to struct x86_cpu_id
  x86/cpu: Add 'table' argument to cpu_matches()
  x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
  x86/speculation: Add SRBDS vulnerability and mitigation documentation
  x86/speculation: Add Ivy Bridge to affected list
  cpu/speculation: Add prototype for cpu_show_srbds()
  Documentation: Add documentation for Processor MMIO Stale Data
  x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  x86/speculation: Add a common function for MD_CLEAR mitigation update
  x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale
  x86/speculation/srbds: Update SRBDS mitigation selection
  x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  KVM: x86/speculation: Disable Fill buffer clear within guests
  - Add Intel CPU models Lakefield, Alder Lake and Rocket Lake etc.


author: fenghui <fenghui@nfschina.com> [4.19.113-18.102.nfs]
changelog:
  - fix 66286:
  	fix sw cpufreq. Add SW64_CPUFREQ in cpufreq/Makefile.
  	Error deleting SW64_CPUFREQ in loongarch-3C500-support.patch file.


author: chunchao <chunchao@nfschina.com> [4.19.113-18.107.nfs]
changelog:
  - Fix: net/phy: hns3 driver error message about mac speed -1.
  - Upstream patch: c36757eb9dee13681227ad3676d37f14b3a2b2af
  - net: phy: consider AN_RESTART status when reading link status
  - Upstream patch: 729f9d5ee3740196071dc15031ce48f3e7659b9a
  - phy: avoid unnecessary link-up delay in polling mode


author: fenghui <fenghui@nfschina.com> [4.19.113-18.108.nfs]
changelog:
  - Fix:	fix rtc on the SW. add kernel-4.19.113-fix-rtc-on-sw.patch from yangminglei.
    	Config: CONFIG_I2C_DEBUG_CORE=y CONFIG_I2C_DEBUG_BUS=y CONFIG_RTC_DRV_PCF8523=y


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.109.nfs]
changelog:
  - Fix bug77288: drivers/base/memory.c: indicate all memory blocks as removable
  - commit id : 51f1a9252159db4fa871381c0d34c97fa94eb500 from anolis cloud-kernel
    commit id : 53cdc1cb29e87ce5a61de5bb393eb08925d14ede from upstream kernel.org


author: wanggy <guangyun@nfschina.com> [4.19.113-18.111.nfs]
changelog:
  - iommu/vt-d: Fix agaw for a supported 48 bit guest address width
  - from https://gitee.com/anolis/cloud-kernel.git  
  - commit:44778532633e6f49089a628fd785228e8ac6c372


author: chunchao <chunchao@nfschina.com> [4.19.113-18.112.nfs]
changelog:
  - crypto/ccp: Verify access to device registers before initializing
  - upstream commmit id: 03f008c52b76114b83483de2cf15ed36fc34930c


author: chunchao <chunchao@nfschina.com> [4.19.113-18.113.nfs]
changelog:
  - PCI/ACPI: Allow _OSC presence to be optional for PCI
  - upstream commmit id: c238252f86c1833fc0cbee3ce3b4c295d3ab24ef


author: chunchao <chunchao@nfschina.com> [4.19.113-18.71.nfs]
changelog:
  - Fix: disable loongarch LS_DUP defaule.
  - Fix: change loongarch HAVE_LIVEPATCH to HAVE_LIVEPATCH_FTRACE.


author: chunchao <chunchao@nfschina.com> [4.19.113-18.72.nfs]
changelog:
  - Config sw for VHOST_VSOCK modules:
  - Modify VIRTIO_VSOCKETS=y to VIRTIO_VSOCKETS=m;
  - Modify VIRTIO_VSOCKETS_COMMON=y to VIRTIO_VSOCKETS_COMMON=m.


author: xunian <xunian@nfschina.com> [4.19.113-18.74.nfs]
changelog:
  - Config sw: add CIFS for samba.
  - 	CONFIG_CIFS=m
  -	CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
  -	CONFIG_CIFS_DEBUG=y
  - Config sw: kernel samepage merging support for ksm.service (CONFIG_KSM=y).


author: zhangjun <zhangjun2023@nfschina.com> [4.19.113-18.75.nfs]
changelog:
  - config sw: add NFT CONFIG for firewalld
  -  	CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_NETDEV=m
  -  	CONFIG_NFT_CHAIN_ROUTE_IPV6=m CONFIG_NFT_CHAIN_NAT_IPV6=m
  -  	CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_FIB_IPV6=m
  -  	CONFIG_NF_DUP_IPV6=m  CONFIG_NF_NAT_IPV6=m
  - config sw: support firewalld log no err


author: fenghui <fenghui@nfschina.com> [4.19.113-18.76.nfs]
changelog:
  - Support: misp openstack and guest network.
  - Config: openstack
  - 	CONFIG_NF_TABLES_INET=y
  -	CONFIG_NF_TPROXY_IPV6=m
  -	CONFIG_NF_TABLES_IPV6=y
  -	CONFIG_NFT_REJECT_IPV6=m
  -	CONFIG_NFT_REJECT_INET=m
  -	CONFIG_NF_REJECT_IPV6=m
  - config: guest network
  -	CONFIG_IP6_NF_RAW=m
  -	CONFIG_NF_NAT_IPV6=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.77.nfs]
changelog:
  - Support: Export task/process statistics through netlink
  - config:
  - 	CONFIG_TASKSTATS=y
  - 	CONFIG_TASK_DELAY_ACCT=y
  - 	CONFIG_TASK_XACCT=y
  - 	CONFIG_TASK_IO_ACCOUNTING=y


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Add libperf-jvmti.so in sw_64
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n 

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: fenghui <fenghui@nfschina.com> [4.19.113-18.80.nfs]
changelog:
  - Support: mips64 support FCoE Offload functionality over Chelsio \
  		T4-based 10Gb Converged Network Adapters
    Config: CONFIG_SCSI_CHELSIO_FCOE=m

  - Support: mips64 zram support wirteback
    Config: CONFIG_ZRAM_WRITEBACK=y


author: fenghui <fenghui@nfschina.com> [4.19.113-18.81.nfs]
changelog:
  - Support: Add dm-raid.ko to support lvcreate cmd.
  - Config: mips64 CONFIG_DM_RAID=m
  - Config: loongarch CONFIG_DM_RAID=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.83.nfs]
changelog:
  - Add: Newly added char drivers app-control.ko
  - Del: Delete "linux-firmware >=20150904-56.git6ebf5d57" dependent packages.
         Support for mini installation of JOS


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: chunchao <chunchao@nfschina.com> [4.19.113-18.86.nfs]
changelog:
  - Fix: fs/btrfs allow btrfs_truncate_block() to fallback to nocow for data
  - upstream commitid: 6d4572a9d71d5fc2affee0258d8582d39859188c
  - Config: set CONFIG_IGB to m


author: yangminglei <minglei@nfschina.com> [4.19.113-18.87.nfs]
changelog:
  - Fix: CVE patches:
          kernel-CVE-2021-0920.patch
          kernel-CVE-2021-34981.patch
          kernel-CVE-2021-45486.patch
          kernel-CVE-2022-1789.patch
          kernel-CVE-2022-2586.patch
          kernel-CVE-2022-2588.patch
          kernel-CVE-2022-2639.patch
          kernel-CVE-2022-3061.patch
          kernel-CVE-2022-3239.patch
          kernel-CVE-2022-3545.patch
          kernel-CVE-2022-3586.patch
          kernel-CVE-2022-3594.patch
          kernel-CVE-2022-4378.patch
          kernel-CVE-2022-39842.patch
          kernel-CVE-2022-42896.patch
          kernel-CVE-2022-43750.patch
          kernel-CVE-2023-0266.patch
          kernel-CVE-2023-26545.patch


author: zengyi <zengyi@nfschina.com> [4.19.113-18.89.nfs]
changelog:
  -kernel-CVE-2022-3028.patch
  -kernel-CVE-2022-3524.patch
  -kernel-CVE-2022-3565.patch
  -kernel-CVE-2022-3567.patch
  -kernel-CVE-2022-3621.patch
  -kernel-CVE-2022-3635.patch
  -kernel-CVE-2022-3649.patch
  -kernel-CVE-2022-42895.patch


author: yangminglei <minglei@nfschina.com> [4.19.113-18.90.nfs]
changelog:
  - backport nvme double reset prevention.
  - fix CVE patches:
      kernel-CVE-2022-1184.patch
      kernel-CVE-2022-2977.patch
      kernel-CVE-2022-3169.patch
      kernel-CVE-2023-1281.patch


author: wangxi <wangxi@nfschina.com> [4.19.113-18.91.nfs]
changelog:
  - fix CVE patches:
      kernel-CVE-2022-2663.patch
      kernel-CVE-2022-3303.patch
      kernel-CVE-2022-36280.patch
      kernel-CVE-2022-41848.patch
      kernel-CVE-2022-41850.patch


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-7
changelog:
  - (#2006490) follow the Fedora Packaging Guidelines by adding %dir
    %attr(0710,%scanuser,virusgroup) to %files section, it is needed on epel7 on
    initial installation without reboot.


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-8
changelog:
  - (#2006490) second try to fix epel7, revert previous commit and add on
    initial installation (not in updates) run /bin/systemd-tmpfiles --create (...)


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.6-1.1.nfs4.aarch64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.6-1.1.nfs4.x86_64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.77.0-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-1
changelog:
  - drop no longer favoured Group tag
  - replace unqualified python invocations with explicit python3
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-2
changelog:
  - stop creating Python 2 packages by default (nothing in Fedora uses it)
  - fix a previously omitted unqualified python invocation


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-3
changelog:
  - fix previously omitted unqualified python invocations, drop no longer
    needed byte-compilation products through a full grip on such a process,
    and also use -I switch to python3 instead of possibly weaker -Es


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-4
changelog:
  - fix missing explicit BuildRequires to ensure environment for compiling
    C code per the guidelines, and to fix FTBFS: rhbz#1603658
    (contributed by Igor Gnatenko <ignatenkobrain@fedoraproject.org>)
  - fix a thinko in py_byte_compile space-contained argument passing
    (https://github.com/rpm-software-management/rpm/issues/222#issuecomment-410026431)
  - fix a violation of "unversioned docdirs" guideline
    (https://fedoraproject.org//wiki/Changes/UnversionedDocdirs)
    Resolves: rhbz#1638027


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: dash <dash@nfschina.com> - 8.30-12.1.2
changelog:
  - sync: object-reuse-rm-file.patch
  - 增加客体重用，删除文件
  - sync: coreutils-8.30-oreuse-fix-bug.patch 
  - fix object reuse bug, rm -rf command does not take effect
  - sync: coreutils-8.30-oreuse-rm-directory.patch
  - 修改rm -rf 命令删除目录失败问题


author: Ondrej Vasik <ovasik@redhat.com> - 2.11-36
changelog:
  - in 2015, file name in CVE-2014-9112 shows in a bit different timestamp
    format (fix FTBFS, #1239416)


author: mgalbraith@suse.com
changelog:
  - Merge new cpuset upstream.  Update URL, and add post v1.5.6 fixes.
  - New patches:
    Fix-crash-with-SCHED_IDLE-policy.patch (bnc#959992)
    Handle-unknown-scheduler-policy-codes-gracefully.patch (bnc#959992)
    Parse-proc-pid-stat-properly.patch
    Docu-remove-mention-about-nonexistent-option.patch (bnc#957323)
    Docu-fix-asciidoc-build-error.patch
    Update-URLs-after-project-migration.patch
    Docu-fixed-a-typo.patch
    Fix-typo-in-setup-py.patch


author: lpechacek@suse.com
changelog:
  - Update to ae629aa1dc95, release 1.5.7
  - Deleted patches:
    Docu-fix-asciidoc-build-error.patch
    Docu-fixed-a-typo.patch
    Docu-remove-mention-about-nonexistent-option.patch
    Fix-crash-with-SCHED_IDLE-policy.patch
    Fix-typo-in-setup-py.patch
    Handle-unknown-scheduler-policy-codes-gracefully.patch
    Parse-proc-pid-stat-properly.patch
    Update-URLs-after-project-migration.patch
    cset-make-it-handle-cgroup-mounts.patch


author: tchvatal@suse.com
changelog:
  - Do not require -devel but use only setuptools module
  - Use ~ in version as without it the package is newer than
    release 1.6
  - Reduce the compat py2/py3 choicer, SLE12 can be python3


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-4
changelog:
  - resolves: rhbz#2021163
    Fix CVE-2016-2124
  - resolves: rhbz#2021167
    Fix CVE-2021-23192
  - resolves: rhbz#2021171
    Fix CVE-2020-25717


author: Andreas Schneider <asn@redhat.com> - 4.14.5-5
changelog:
  - resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
  - related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: zhouchang <zhouchang@nfschina.com> - 7.61.1-22.3
changelog:
  - Fix CVE-2019-5436,CVE-2022-27781
  - 1002-curl-7.61.1-CVE-2019-5436.patch
  - 1003-curl-7.61.1-CVE-2022-27781.patch


author: ZhangPing <zhangping@nfs-hlj.com> - 7.6.1-22.5
changelog:
  - fix CVE-2022-22576 CVE-2022-27774 CVE-2022-27776
  - add: 1004-curl-7.61.1-CVE-2022-22576.patch
  - add: 1005-curl-7.61.1-CVE-2022-27774-CVE-2022-27776.patch


author: lidongyue <dongyue@nfschina.com> - 7.6.1-22.6
changelog:
  - fix CVE-2023-28320 CVE-2023-28321 CVE-2023-28322
  - add: 1006-curl-7.61.1-CVE-2023-28320.patch
  - add: 1007-curl-7.61.1-CVE-2023-28321.patch
  - add: 1008-curl-7.61.1-CVE-2023-28322.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.14
changelog:
  - Fix 0356063:修复在同方海光平台设备管理器不显示主板信息
  - add  device-manager-1.0-For4.0-Fix-tongfang-motherboard-info.patch


author: Zhang Dongjun <dongjun@cpu-os.ac.cn> - 1.0.4.nfs.16
changelog:
  - bug#0357410: RTM1.7 设备管理器中主板、光驱没有显示硬件品牌Logo
  - Patch: device-manager-1.0-For4.0-Add-suma-cancon-logo.patch


author: Xunian Tang <xunian@nfschina.com> - 1.0.4.nfs.17
changelog:
  - 从svs2.4移植:device-manager-1.0-For4.0-MdySystem-to-MainServer.patch
  - Fix 0357667:H620-G30S3,设备管理器下电脑概览中电脑描述错误,应Main Server Chassis.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-11
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1937832
  - Add alias_clash CI test
  - Remove unused multipath.conf
  - Resolves: bz #1937832


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-12
changelog:
  - Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
    * Fixes bz #1946940
  - Resolves: bz #1946940


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-13
changelog:
  - Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
  - Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
  - Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
  - Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
  - Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
  - Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
  - Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
    * add recheck_wwid option
    * Fixes bz #1907904
  - Resolves: bz #1907904


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-17
changelog:
  - Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1984723
  - Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1973592
  - Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
    * Found by coverity
  - Resolves: bz #1973592, #1984723


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.3-4.P1
changelog:
  - New version 4.4.3-P1 (rhbz#2132240)
  - Fix for CVE-2022-2928 (rhbz#2132429)
  - Fix for CVE-2022-2929 (rhbz#2132430)


author: Christopher Snyder <csnyder@redhat.com> 1.28.15-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - make value possibly plural for addons in syspurpose man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - update language of REPOS OPTIONS in subscription-manager man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - change add-ons to addons (tmerry@localhost.localdomain)
  - 1634780: typo in syspurpose man page (tmerry@localhost.localdomain)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    of the subscription-manager man pages (tmerry@localhost.localdomain)
  - 1637083: add unset sections (tmerry@localhost.localdomain)
  - 1920017: Remove a sentence from the subscription-manager man page.
    (tmerry@localhost.localdomain)
  - 1646718: Debrand message to not include Red Hat Subscription Manager but
    instead with an entitlement server (tmerry@localhost.localdomain)
  - 1682943: put a blank space back into a comment to separate two sentences
    (tmerry@localhost.localdomain)
  - 1857491: Add newline character to split a message into 2 lines
    (tmerry@localhost.localdomain)
  - 1920020: Set default_log_level to INFO when an invalid value is passed on the
    command line (#2481) (31166354+tlhmerry9@users.noreply.github.com)
  - 1924921: Fix getting releases, when SCA is used (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - 1927245: Mark several dir as part of RPM (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.16-1
changelog:
  - 1950015: fix typos in syspurpose(8) (#2604) (ptoscano@redhat.com)
  - Updated translations for Korean and Italian from weblate (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - 1637083: Removed the parameters to the unset-addons subcommand
    (tmerry@redhat.com)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - 1636950: modify description in the man page for syspurpose for the generic
    commands (tmerry@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - cockpit: Update test API to 236 (martin@piware.de)
  - cockpit: Replace obsolete wait_present() with wait_visible()
    (martin@piware.de)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
  - 1878133: Deprecation message for syspurpose (#2421) (wpoteat@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Add RHEL 8.5 releaser (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.17-1
changelog:
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (#2641)
    (tmerry@redhat.com)
  - 1897767: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - 1951057: Cherry Pick to Add in memory read of cache, delete SCA cert with not
    needed. (#2618) (tmerry@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1956764: New extraction for translatable strings (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1638080: surround the syspurpose feedback in quotes (tmerry@redhat.com)
  - 1949492: remove bogus %changelog entries (ptoscano@redhat.com)
  - 1637083: remove the unset PROPERTY VALUE from the Generic Commands
    (tmerry@redhat.com)
  - 1897767: what does 'No valid values provided for usage' mean to the user for
    subscription-manager-1.28 branch (tmerry@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values (tmerry@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.18-1
changelog:
  - Removed .orig files, which leaked into main branch (jhnidek@redhat.com)
  - Move cloud detector/collector to cloud-what package (jhnidek@redhat.com)
  - Make Azure cloud collector more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Fixed reporting of AWS cloud facts (null value) (#2693) (jhnidek@redhat.com)
  - New extraction for translatable strings (#2688) (ptoscano@redhat.com)
  - Refactoring of cloud collector/detector and facts (#2657)
    (jhnidek@redhat.com)
  - 1973731: fix wording on error when listing syspurpose values
    (ptoscano@redhat.com)
  - 1971693: syspurpose: remove deprecation notices (#2683) (ptoscano@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1971693: syspurpose: adjust deprecation messages (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - Fixed white space before '(' (jhnidek@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - cockpit: Invoke setup.py with python3 (martin@piware.de)
  - 1897767: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)


author: Christopher Snyder <csnyder@redhat.com> 1.28.19-1
changelog:
  - Translated using Weblate (German) (ljanda@redhat.com)
  - Translated using Weblate (German) (patrick.vollandt@mein-gym.de)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (#2704) (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.20-1
changelog:
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-1
changelog:
  - Updated translations from weblate
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-2
changelog:
  - 1922151: Revert "hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU"
    (ptoscano@redhat.com)


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-1
changelog:
  - Update to 1.20.9 (#1949336)
  - flex is not required anymore, doxygen is only needed if you call make doc
  - The dpkg-gettext.pl and controllib.pl are long obsolete, can be removed.
  - dpkg hasn't package install-info for a long time.
  - and others reviews


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-4
changelog:
  - add %config(noreplace) to avoid clean up databases on upgrades and to be
    compliant with silverblue


author: Robert Scheck <robert@fedoraproject.org> 2.4-0.23.b1
changelog:
  - Added patch to allow building dsniff with OpenSSL >= 1.1.0
  - Added patch to correct a typo related to the -remote option


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: Kefu Chai <tchaikov@gmail.com> - 5.2.1-1
changelog:
  - Update to 5.2.1
  - Build using python3 packages on fedora
  - Remove links in document accessing network
  - Package ChangeLog.rst and README.rst
  - Drop fmt-static package


author: Ondrej Holy <oholy@redhat.com> - 2:2.9.0-1
changelog:
  - Update to 2.9.0 (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318,
  CVE-2022-39319, CVE-2022-39320, CVE-2022-41877, CVE-2022-39347).


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.0-1
changelog:
  - Update to 2.11.0 (CVE-2023-39350, CVE-2023-39351, CVE-2023-39352,
    CVE-2023-39353, CVE-2023-39354, CVE-2023-39356, CVE-2023-40181,
    CVE-2023-40186, CVE-2023-40188, CVE-2023-40567, CVE-2023-40569 and
    CVE-2023-40589).


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: ZhangPing <zhangping@nfs-hlj.com> - 2.9.1-4.1
changelog:
  - add: freetype-2.9.1-CVE-2022-27404.patch
  - add: freetype-2.9.1-CVE-2022-27405.patch 
  - add: freetype-2.9.1-CVE-2022-27406.patch


author: wuchangsheng <wuchangsheng2@huawei.com> - 1.0.1-40
changelog:
  - add dfx rcv_nxt info
    mbuf private cache line align
    send pkts index bug fix
    free recv pkts in main loop


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: guoqing <guoqing@nfschina.com> - 3.28.2-28.14
changelog:
  - Bug 75196  【产品优化】解决随机生成的密码强度可能不足
  - Add gnome-control-center-3.28.2-fix-password-strength-level.patch


author: xupengfei <xupengfei@nfschina.com> - 3.28.2-28.3
changelog:
  - Bug_0370877：通过设置-详细信息-用户新建普通用户时输入全名出现报错
  - Add patch: gnome-control-center-3.28.2-some-changes-about-user-account.patch


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - %build: --disable-fatal-warnings --disable-silent-rules
  - fix rpath harder
  - use %ldconfig_scriptlets, %make_build, %make_install
  - -devel: tighten deps with %{_isa}


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.7.4-16
changelog:
  - Change dependency from ghostscript to ghostscript-x11 to match the
    reorganized ghostscript package.


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Jakub Martisko <jamartis@redhat.com> - 1.9-7
changelog:
  - Fix FTBFS bug (gnulib problems)
  - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
    Resolves 1604303


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Antonio Trande <sagitter@fedoraproject.com> - 1.8.20-3
changelog:
  - Force default ldflags for Fedora (bz#1548533)
  - Switch -shared flag to -Wl,--as-needed
  - Modify low optimization level for gnu compilers
  - New URL


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: chaodong <chaodong@nfschina.com> - 2.4.37-41.2
changelog:
  - Fix CVE-2021-39275, CVE-2021-34798
  - httpd-2.4.37-CVE-2021-39275.patch
  - httpd-2.4.37-CVE-2021-34798.patch


author: zhouchang <zhouchang@nfschina.com> - 2.4.37-41.3
changelog:
  - Fix CVE-2022-26377,CVE-2022-28614,CVE-2022-28615,CVE-2022-29404，CVE-2022-30522，CVE-2022-30556，CVE-2022-31813
  - httpd-2.4.37-CVE-2022-26377.patch
  - httpd-2.4.37-CVE-2022-28614.patch
  - httpd-2.4.37-CVE-2022-28615.patch
  - httpd-2.4.37-CVE-2022-29404.patch
  - httpd-2.4.37-CVE-2022-30522.patch
  - httpd-2.4.37-CVE-2022-30556.patch
  - httpd-2.4.37-CVE-2022-31813.patch


author: lidongyue <dongyue@nfschina.com> - 2.4.37-41.6
changelog:
  - Fix CVE-2023-25690 CVE-2021-33193 CVE-2022-36760 CVE-2023-27522 CVE-2021-36160 CVE-2020-11993
  - httpd-2.4.37-CVE-2023-25690.patch
  - httpd-2.4.37-CVE-2021-33193.patch 
  - httpd-2.4.37-CVE-2022-36760.patch
  - httpd-2.4.37-CVE-2023-27522-CVE-2021-36160.patch
  - httpd-2.4.37-CVE-2020-11993.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 6.5-5
changelog:
  - Fix bug in fix-info-dir which prevented the transfiletriggerpostun script
    from working properly.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.5-6
changelog:
  - Fix fail of test because of unescaped left brace with Perl 5.28
    (patch by Jitka Plesnikova)
    Resolves: #1590308


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 6.5-11
changelog:
  - Fix another issue in fix-info-dir which could lead to an infinite loop in odd
    circumstances.
    Resolves: #1614162


author: Gabriel Somlo <somlo at cmu.edu> 2.1.4-2
changelog:
  - reimplement debug info patch in configure script
  - remove autoconf build dependency
  - fix autoconf-2.71 related FTBFS (#1999454)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.14-7
changelog:
  - cleanup cmake usage, move to %build
  - %build: explicitly disable doc generation
  - kill hard-coded rpath
  - -libs: explicit soname so bumps aren't a surprise
  - use %license, %make_build, 'make install/fast'


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.2.ea
changelog:
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.2.ea
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.1.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - updated to 17.0.7.0.7 underlying portables
  - requirign 17.0.7.0.7-2 due to news, and much more tuning
  - now untarring enforced version
  - repacked bits are now requested in exact version
  - repacked portables
  - using icons from source package
  - providing full sources via src package
  - requiring exact version.reelase of portables
  - todo, lost alt java manpage.. probably already in portables
  - TODO conslut this clean up - javdoc
  - todo, debuginfo


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.6.0.10-5
changelog:
  - using icons from source package
  - providing full sources via src package
  - requiring exact version.reelase of portables
  - returned libsystemconf.so


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.7.0.7-5
changelog:
  - rebuilding aginst new portables:
  - - returned lost nss.fips.cfg
  - - enabled all crypto
  - - added and applied, on demand, patch2003 jdk8305995-footprint_regression_from_jdk_8224957


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-50
changelog:
  - rd.route should use the name from kdump_setup_ifname
  - get kdump ifname once in kdump_install_netdev


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-51
changelog:
  - Stop reloading kdump service on CPU hotplug event for FADump
  - fadump: improve fadump-howto.txt about remote dump target setup


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-52
changelog:
  - Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-53
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - check for invalid physical address of /proc/kcore when finding max_paddr
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-54
changelog:
  - kdump/ppc64: rebuild initramfs image after migration
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-6
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Jens Petersen <petersen@redhat.com> - 0.8.6-1
changelog:
  - update to 0.8.6 (#1462722)
  - fixes manpage conflict (#1504831)
  - condition the gcc deprecation patch on epel < 7
  - clean up spec file


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Till Maas <opensource@till.name> - 0.30-8
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.4.2-5
changelog:
  - Add systemd protections and restart
  - Use systemd RuntimeDirectory instead of tmpfiles where possible
  - Default config file to using local socket


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Paul Wouters <pwouters@redhat.com> - 3.32-3
changelog:
  - Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
  - Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
  - Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change


author: Paul Wouters <pwouters@redhat.com> - 4.1-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
  - Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Resolves: rhbz#1994600


author: Andreas Schneider <asn@redhat.com> - 0.10.3-1
changelog:
  - Update to version 0.10.3
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.3
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.2
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.1
    https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.0
  - Removed libssh-0.9.6-openssh-8.8p1-compat.patch
  - resolves: rhbz#2121741


author: Paul Howarth <paul@city-fan.org> - 1.8.0-10
changelog:
  - Explicitly run the test suite in the en_US.UTF-8 locale to work around flaky
    locale settings in mock builders


author: Paul Howarth <paul@city-fan.org> - 1.8.1-1
changelog:
  - Update to 1.8.1
    - Fixed possible integer overflow when reading a specially crafted packet
      (CVE-2019-3855)
    - Fixed possible integer overflow in userauth_keyboard_interactive with a
      number of extremely long prompt strings (CVE-2019-3863)
    - Fixed possible integer overflow if the server sent an extremely large
      number of keyboard prompts (CVE-2019-3856)
    - Fixed possible out of bounds read when processing a specially crafted
      packet (CVE-2019-3861)
    - Fixed possible integer overflow when receiving a specially crafted exit
      signal message channel packet (CVE-2019-3857)
    - Fixed possible out of bounds read when receiving a specially crafted exit
      status message channel packet (CVE-2019-3862)
    - Fixed possible zero byte allocation when reading a specially crafted SFTP
      packet (CVE-2019-3858)
    - Fixed possible out of bounds reads when processing specially crafted SFTP
      packets (CVE-2019-3860)
    - Fixed possible out of bounds reads in _libssh2_packet_require(v)
      (CVE-2019-3859)
  - Fix mis-applied patch in the fix of CVE-2019-3859
    - https://github.com/libssh2/libssh2/issues/325
    - https://github.com/libssh2/libssh2/pull/327


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Paul Howarth <paul@city-fan.org> - 1.9.0-5
changelog:
  - Switch to https:// upstream URLs
  - Full groff (not just groff-base) needed for the mansyntax check


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - blacklist: Add a few more well known ports (bz 1854147)
  - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Sebastian Kisela <skisela@redhat.com> - 1.0.4-0.28.
changelog:
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: bzhaoop<bzhaojyathousandy@gmail.com> -4:10.5.15-1
changelog:
  - Bump to 10.5.15
  - For resolving CVEs:
  - CVE-2022-24048
  - CVE-2022-24052
  - CVE-2022-24050
  - CVE-2022-24051
  - CVE-2021-46668
  - CVE-2021-46658


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.15-2
changelog:
  - Fix the systemd service issue about the env variable.
  - Apply the patches from old branch.
  - Adaption the cmake version and integrate into the spec file.


author: bzhaoop<bzhaojyathousandy@gmail.com> - 4:10.5.16-1
changelog:
  - Bump to 10.5.16 for resolving CVEs below
  - CVE-2022-27385
  - CVE-2022-27382
  - CVE-2022-27451
  - CVE-2022-27457
  - CVE-2022-27446
  - CVE-2022-27455
  - CVE-2022-27444
  - CVE-2022-27379
  - CVE-2022-27386
  - CVE-2022-27447
  - CVE-2022-27448
  - CVE-2022-27449
  - CVE-2022-27445
  - CVE-2022-27456
  - CVE-2022-27458
  - CVE-2022-27452
  - CVE-2022-27376
  - CVE-2022-27378
  - CVE-2022-27377
  - CVE-2022-27381
  - CVE-2022-27383
  - CVE-2022-27380
  - CVE-2022-27384
  - CVE-2022-27387
  - And we fit the latest packages for the new mariadb release, such as errmsg package.


author: Pavel Raiskup <praiskup@redhat.com> 2.15-1
changelog:
  - argparse: handle old-style commands *before* ignoring "--" (awilliam@redhat.com)
  - Update mock.1 (cheese@nosuchhost.net)


author: Pavel Raiskup <praiskup@redhat.com> 2.16-1
changelog:
  - disable system call filtering
  - pass env to podman run (dani@lapiole.org)
  - give user alternative help for missing 'epel-8-*' configs
  - podman, explictily specify stdin as tar source (vreeland.justin@gmail.com)
  - add a new 'ssl_extra_certs' option (patrick@laimbock.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - mock v3 contains several Python 2.7 (EL7) incompatibilites
    https://github.com/rpm-software-management/mock/issues/755
  - disable SECCOMP for Podman by default
  - opt in for SECCOMP invented
  - create simple_load_config() for use in 3rd party SW (msuchy@redhat.com)
  - implement --list-chroots command (msuchy@redhat.com)
  - add cachedir to output of hw_info plugin (msuchy@redhat.com)
  - mock: copy /usr/share/pki source CA certificates (dereks@lifeofadishwasher.com)
  - add missing args for --scrub and --short-circuit into bash
    completion (didiksupriadi41@fedoraproject.org)
  - remove el7 specific parts from the spec file (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.1-1
changelog:
  - let rpmbuild know that it should not clean up after itself (msuchy@redhat.com)
  - typo in the subscription error message
  - root_cache: simplify decompressing with BSD tar
  - switch from /bin/gtar to /bin/tar by default


author: Pavel Raiskup <praiskup@redhat.com> 3.2-1
changelog:
  - Fix the docker environment check for cgroupv2 (achal.velani@oracle.com)
  - mock-scm: recommend rpkg-util
  - don't use rpmbuild --noclean option if not supported
  - do only one fork() while reading --list-chroots configs
  - Error() (exceptions) code rewritten and simplified
  - dropped mock SGID from /var/{lib,cache}/mock dirs
  - change license to spdx (msuchy@redhat.com)
  - podman.py: don't let podman warnings taint container id (micho@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.4-1
changelog:
  - make device mapper control device available if supported (neal@gompa.dev)
  - check for target specific qemu-user-static (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.5-1
changelog:
  - check for qemu-user-static raises InvalidArchitecture()
  - forcearch: map armv7hl to the /usr/bin/qemu-arm-static binary
  - more pedantic check for the qemu-*-static binaries


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 34.3-1
changelog:
  - Add Oracle Linux 8 (ngompa13@gmail.com)
  - Add Oracle Linux 7 (ngompa13@gmail.com)
  - Add openSUSE Leap 15.3 (ngompa13@gmail.com)
  - openSUSE Leap 15.1 is EOL (ngompa13@gmail.com)
  - Add openSUSE Tumbleweed s390x config (ngompa13@gmail.com)
  - Add AlmaLinux 8 configs (ngompa13@gmail.com)
  - Remove make from default ELN buildroot (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 34.4-1
changelog:
  - Add GPG keys and RPM repositories for openSUSE Leap 15.3 (ngompa13@gmail.com)
  - EOL Fedora 32 (msuchy@redhat.com)
  - sync centos-stream-8 with centos-stream-repos (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 34.5-1
changelog:
  - Add CentOS Stream 9 "preview" files
  - Add rocky support to mock (tucklesepk@gmail.com)
  - Add AlmaLinux 8 AArch64 target (ngompa13@gmail.com)
  - Add AlmaLinux Devel repo as an optional repo for AlmaLinux 8 (ngompa13@gmail.com)
  - Fix GPG key path for SLE updates in openSUSE Leap 15.3 (ngompa13@gmail.com)
  - Move Requires of shadow-utils from mock-core-configs to mock-filesystem (msuchy@redhat.com)
  - Switch CentOS templates to use quay.io images for bootstrap (carl@george.computer)
  - Add epel-next-8 configs (carl@george.computer)


author: Pavel Raiskup <praiskup@redhat.com> 34.6-1
changelog:
  - Disable Rocky Linux "Devel" repo by default (ngompa13@gmail.com)
  - Fix URL for Rocky Linux repos in commented out "baseurl" lines
    (ngompa13@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 36-1
changelog:
  - config: Align CentOS Stream 9 with the production configuration
    (ngompa13@gmail.com)
  - config: Disable installing weak dependencies on RHEL rebuilds
    (ngompa13@gmail.com)
  - config: Disable installing weak dependencies on CentOS Stream
    (ngompa13@gmail.com)
  - config: Validate GPG signatures for CentOS Stream 9 (ngompa13@gmail.com)
  - Add eurolinux-8 x86_64 and i686 buildroots (alex@euro-linux.com)


author: Pavel Raiskup <praiskup@redhat.com> 36.1-1
changelog:
  - Finalize CentOS Stream 9 configuration (ngompa13@gmail.com)
  - Update Oraclelinux 7/8 configs and add Oraclelinux EPEL 7/8 configs (darren.archibald@oracle.com)


author: Pavel Raiskup <praiskup@redhat.com> 36.3-1
changelog:
  - add EuroLinux 8 aarch64 (alex@euro-linux.com)
  - add HA and RS configs to EuroLinux configs (alex@euro-linux.com)
  - Add epel9-next configs (carl@george.computer)


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-10
changelog:
  - Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
    as well as attempting to consume numbered mok variables from efivarfs
    when mok-variables aren't present (pjones)
    Resolves: rhbz#1907418


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224
changelog:
  - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
  - handle missing character after backslash in terminfo entry (CVE-2019-17595)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Cdos Support Team <support_os@cpu-os.ac.cn> - 1.1.13-m1.3
changelog:
  - 解决没有生成/var/nfs/license.db文件，造成注册日期随系统时间调整而顺延的问题.
  - Added: /etc/xdg/autostart/nfs-license-agent.desktop 
  - Patch02:	nfs-license-add-log-test-0002.patch
  - deleted /lib/systemd/system/license.service


author: chenghuoju <huoju@nfschina.com> - 1.0.0-3
changelog:
  - 1.1 修改bug编号:61619, 页面提示目录不存在问题
    1.2 修改bug编号:61613,包安装、软件更新、xorg信息日期和时间字段显示不正确问题
    1.3 修改bug编号:61607,选择近三天日志，日期查询不准确问题


author: YangGuangHui <yangguanghui@nfschina.com> - 1.1.0-3.4
changelog:
  - fixed 67877 修复loongarch-231117版本：关闭资源监视器时系统崩溃, 
  - fixed 67873 修复loongarch-231117版本：资源监视器异常，系统服务、进程、文件系统无显示信息，及仪表盘数据统计也都是 
  - Add nfs-stacer-fixed-bug67877.patch


author: yangguanghui <yangguanghui@nfschina.com> - 1.0.0-3.6
changelog:
  - fixed 68504 修复 资源监视器坐标轴没有单位，如果按照百分比理解，则显示出错，top显示CPU使用率单独某一核心都没有超出10%的
  - nfs-stacer-Resources-fixed-cpu.patch


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.1
changelog:
  - 修改"/etc/nfs-release"文件中的版本标识
  - 修改此软件包版本命名规则，去除之前的升级标识，以后有修改在dist信息后升级版本号，添加4.0标识
  - 去除"/etc/os-release"文件中的"BETA"标识


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.7
changelog:
  - add "if $USER==root" for performance.sh
  - add "update-batch-time" for nfs-autoupdate
  - add "RTM4-G310" for VERSION of os-release


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole<pghole@redhat.com> - 0.10.1-1
changelog:
  - Resolves: rhbz#1670001 - redhat-support-tool -o option does not work (soscleaner)
  - Resolves: rhbz#1670369 - redhat-support-lib-python: Traceback on make_report from utils.reporthelper
  - Resolves: rhbz#1670044 - redhat-support-tool proxy does not work on rhel-8


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-1
changelog:
  - Resolves: rhbz#1677257 - redhat-support-lib-python: AttributeError from utils/reporthelper.py no buf


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-2
changelog:
  - Resolves: rhbz#1685296 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1685295 - [RFE][RHEL8] Include Reason in cases of failed proxy
  - Resolves: rhbz#1684321 - redhat-support-tool config debug <level>` fails with "ERROR: debug is not a valid configuration file option.


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Richard W.M. Jones <rjones@redhat.com> - 2.0.11-9.nfs4
changelog:
  - Fix major/minor macros on glibc 2.27.
  - Update config.{guess,sub} with versions which understand riscv64.
  - Remove obsolete Buildroot tag.


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: feifei <feifei@nfs-hlj.com> - 1:1.1.1k-7.0.5
changelog:
  - add: openssl-1.1.1-CVE-2023-0215.patch
  - add: openssl-1.1.1-CVE-2022-4450.patch
  - add: openssl-1.1.1-CVE-2023-0286.patch


author: zhouchang <zhouchang@nfschina.com> - 1:1.1.1k-7.0.9
changelog:
  - Fix CVE-2023-0464,CVE-2023-0465,CVE-2023-3817
  - add: openssl-1.1.1-CVE-2023-0464.patch
  - add: openssl-1.1.1-CVE-2023-0465.patch
  - add: openssl-1.1.1-CVE-2023-3817.patch


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: David Sommerseth <dazo@eurephia.org> - 2.4.6-3
changelog:
  - Enable the asynchronous push feature, which can improve connect speeds with slow authentication backends


author: Michal Hlavinka <mhlavink@redhat.com> - 3.7.0-1
changelog:
  - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436)
  - add support for RCEC Associated Endpoint (#1856440)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Allow pcp-atop to filter processes on state (BZ 1807046)
  - Dynamically adjust the pmproxy open file limit (BZ 1954711)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)
  - PCP scalability and memory footprint improvements (BZ 1942292)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-4
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-1
changelog:
  - Improved diagnostics from pmie service scripts (BZ 1954576)
  - Drop option configuration file env var setting (BZ 1967174)
  - Add pmie support for thermal throttle detection (BZ 1908212)
  - Annotate a couple of obscure config files in rpm (BZ 1964253)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-2
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-3
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.42-2
changelog:
  - Fix handling UTF and start-of-pattern options in C++ wrapper
    (upstream bug #2283)
  - Fix an error message and locale handling in pcregrep tool


author: Petr Pisar <ppisar@redhat.com> - 8.42-3
changelog:
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256
    (bug #1619228)


author: Petr Pisar <ppisar@redhat.com> - 8.42-5
changelog:
  - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled
    and \X or \R has a greater than 1 fixed quantifier) (bug #1852252)
  - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C"))
    (bug #1851552)


author: Petr Pisar <ppisar@redhat.com> - 10.31-6
changelog:
  - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
    matches an empty string, but never at the starting offset


author: Petr Pisar <ppisar@redhat.com> - 10.31-7
changelog:
  - Fix checking that a lookbehind assertion has a fixed length if the
    lookbehind assertion is used inside a lookahead assertion
  - Fix parsing VERSION conditions


author: Petr Pisar <ppisar@redhat.com> - 10.31-8
changelog:
  - Fix backtracking atomic groups when they are not separated by something with
    a backtracking point


author: Petr Pisar <ppisar@redhat.com> - 10.31-9
changelog:
  - Recognize all Unicode space characters with /x option in a pattern
    (bug #1617960)
  - Fix changing dynamic options (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 255,
    (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256,
    (bug #1617960)


author: Petr Pisar <ppisar@redhat.com> - 10.32-1
changelog:
  - 10.32 bump (bug #1628200)
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (bug #1628200)
  - Fix matching a zero-repeated subroutine call at a start of a pattern
    (bug #1628200)
  - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.6-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Added python bundled dependencies: dacite, dataclasses
  - Added new bundled rubygem ruby2_keywords
  - Updated rubygem bundled packages: backports, ethon, ffi, json, mustermann, rack, rack_protection, rack_test, sinatra, tilt
  - Updated pcs-web-ui
  - Updated test run, only tier0 tests are running during build
  - Removed BuildRequires needed for tier1 tests which were removed for build (pacemaker-cli, fence_agents-*, fence_virt, booth-site)
  - Resolves: rhbz#1387358 rhbz#1684676 rhbz#1722970 rhbz#1778672 rhbz#1782553 rhbz#1790460 rhbz#1805082 rhbz#1810017 rhbz#1817547 rhbz#1830552 rhbz#1832973 rhbz#1833114 rhbz#1833506 rhbz#1838853 rhbz#1839637


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.6-2
changelog:
  - Added resource and operation defaults that apply to specific resource/operation types
  - Added Requires/BuildRequires: python3-pyparsing
  - Added Requires: logrotate
  - Fixed resource and stonith documentation
  - Fixed rubygem licenses
  - Fixed update_times()
  - Updated rubygem rack to version 2.2.3
  - Removed BuildRequires execstack (it is not needed)
  - Resolves: rhbz#1805082 rhbz#1817547


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.6-3
changelog:
  - Added Upgrade CIB if user specifies on-fail=demote
  - Fixed rpmdiff issue with binary stripping checker
  - Fixed removing non-empty tag by removing tagged resource group or clone
  - Resolves: rhbz#1843079 rhbz#1857295


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.6-4
changelog:
  - Fixed invalid CIB error caused by resource and operation defaults with mixed and-or rules
  - Updated pcs-web-ui
  - Resolves: rhbz#1867516


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.7-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Added python bundled dependency dateutil
  - Fixed virtual bundle provides for ember, handelbars, jquery and jquery-ui
  - Resolves: rhbz#1222691 rhbz#1741056 rhbz#1851335 rhbz#1862966 rhbz#1869399 rhbz#1873691 rhbz#1875301 rhbz#1883445 rhbz#1885658 rhbz#1885841


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.7-2
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Changed BuildRequires from git to git-core
  - Resolves: rhbz#1869399 rhbz#1885658 rhbz#1896379


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.7-3
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Add BuildRequires: make
  - Resolves: rhbz#1667061 rhbz#1667066 rhbz#1774143 rhbz#1885658


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.8-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Updated python bundled dependencies: dacite, dataclasses
  - Resolves: rhbz#1457314 rhbz#1619818 rhbz#1667066 rhbz#1762816 rhbz#1794062 rhbz#1845470 rhbz#1856397 rhbz#1877762 rhbz#1917286


author: Miroslav Lisik <mlisik@redhat.com> - 0.10.4-5
changelog:
  - Fixed link to sbd man page from `sbd enable` doc
  - Fixed safe-disabling clones, groups, bundles
  - Fixed sinatra wrapper performance issue
  - Fixed detecting fence history support
  - Fixed cookie options
  - Updated hint for 'resource create ... master'
  - Updated gating tests execution, smoke tests run from upstream sources
  - Resolves: rhbz#1750427 rhbz#1781303 rhbz#1783106 rhbz#1793574


author: Paul Howarth <paul@city-fan.org> - 2.216-1
changelog:
  - Update to 2.216
    - Do not re-fold folded lines
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Drop provides/obsoletes for perl-Email-Simple-Creator added in 2010
  - Make %files list more explicit
  - Simplify find command using -delete
  - Don't need to remove empty directories from the buildroot


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.22-13
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Paul Howarth <paul@city-fan.org> - 2009041301-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package upstream's documentation


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.16-1
changelog:
  - Update to HTML-Formatter-2.16.
  - Reflect upstream having switched to ExtUtils::MakeMaker.
  - Spec cleanup.


author: Tom Callaway <spot@fedoraproject.org> - 12.38-1
changelog:
  - update to 12.38 for CVE-2022-23935
    NOTE: 12.38 is not considered a "Stable" release and is not on CPAN


author: Paul Howarth <paul@city-fan.org> - 5.509-1
changelog:
  - Update to 5.509
    - Makefile.PL failed with no '.' in @INC (CPAN RT#120871)
    - Test t/Ref.t failed on Windows install (CPAN RT#118262)
    - MIME::Parser::parse_data() should check what it gets back (CPAN RT#119166)
    - Allow \r\n to be used as line-end delimiter when outputting MIME message
      (CPAN RT#119568)
  - Drop EL-5 support (should have happened years ago, dependencies not available)
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 3.008-5
changelog:
  - Add bootstrap for EPEL-8
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Drop redundant recoding of Mail::Message::Field manpage
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 3.004-3
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.18-1
changelog:
  - Update to 2.18
    - Mail::Header should accept \r in empty line which ends the
      header (CPAN RT#114382)


author: Paul Howarth <paul@city-fan.org> - 2.19-1
changelog:
  - Update to 2.19
    - Block namespace MailTools (CPAN RT#120905)
  - Add "ancient" to %summary and %description
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 2.20-1
changelog:
  - Update to 2.20
    - Rewrite doc syntax to my current standard style
    - Text corrections (CPAN RT#123823, CPAN RT#123824)
    - Convert to git
    - Move to GitHub


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Fix test prereqs; pod tests moved to xt/ (CPAN RT#122136, CPAN RT#122137)
    - Adopt new repo structure:
      - Delete MANIFEST and META.yml, and hereafter auto-generate them
      - Modernize .gitignore and MANIFEST.SKIP
      - The code says Perl licence but the LICENCE file says Artistic, so replace
        LICENCE file with LICENSE (so spelled), which says Perl
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.1-23
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.99-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Explicitly require perl(Geography::Countries)
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Declare variables with our() to avoid warnings (GH#109, GH#171)
    - Empty mapping value at the end resolves to null (was becoming empty string)
      (GH#131, GH#170)
    - Output key in warning when duplicate key was found (GH#119, GH#169)
    - Allow reading and writing to IO::Handle (GH#157, GH#168)


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - Fix $LoadCode (GH#180, GH#181, GH#182)
  - This release by TINITA → update source URL
  - Drop redundant Group: tag


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
changelog:
  - Resolves: rhbz#2015165 strongswan-5.9.4 is available
  - Resolves: rhbz#2015612 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
  - Resolves: rhbz#2015615 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
  - Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.4-2
changelog:
  - Resolves rhbz#2018547 'strongswan restart' breaks ipsec started with strongswan-starter
  - Return to using tmpfiles, but extend to cover strongswan-starter service too
  - Cleanup old patches


author: Neal Gompa <ngompa@datto.com> - 5.9.4-4
changelog:
  - Disable TPM/TSS 1.2 support for F36+ / RHEL9+
  - Resolves: rhbz#2033299 Drop TPM/TSS 1.2 support (trousers)


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.2.6.3-1
changelog:
  - update to 1.2.6.3
  - add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Petr Pisar <ppisar@redhat.com> - 1.0.20-2
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Filip Januš <fjanus@redhat.com> - 10.21-2
changelog:
  - Resolves: CVE-2022-1552
  - Release bump due to wrongly reported CVE of libpq
    Build after reverted changes in libpq package


author: chaodong <chaodong@nfschina.com> - 10.21-2.0.1.1
changelog:
  - Disable plperl on loongarch64.
  - Support sw_64; Disable runselftest,spinlocks on sw_64.
  - postgresql-10.21-Support-sw_64.patch


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-9
changelog:
  - Subpackage python2-Bottleneck has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.7-3
changelog:
  - Subpackage python2-bcrypt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Matthias Runge <mrunge@redhat.com> - 2.2.3-1
changelog:
  - fix CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting
    via HTTPS (rhbz#1726014)


author: Matthias Runge <mrunge@redhat.com> - 2.2.4-1
changelog:
  - fix CVE-2019-14235 (rhbz#1735784)
  - fix CVE-2019-14234 (rhbz#1735780)
  - fix CVE-2019-14233 (rhbz#1735775)
  - fix CVE-2019-14232 (rhbz#1735771)


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.13-1
changelog:
  - Update to 2.2.13
  - Security fix for CVE-2020-7471 (rhbz#1798516)
  - Security fix for CVE-2020-9402 (rhbz#1810093)
  - Security fix for CVE-2020-13254 (rhbz#1843617)
  - Security fix for CVE-2020-13596 (rhbz#1843627)


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.6-3
changelog:
  - Subpackage python2-numexpr has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7.0-1
changelog:
  - Update to latest version (#1614993)
  - Various modernization to the spec file. Actually fail %check if the test
    suite fails.


author: Miro Hrončok <mhroncok@redhat.com> - 0.24.1-2
changelog:
  - Subpackage python2-pandas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Howarth <paul@city-fan.org> - 2.10.2-1
changelog:
  - Update to 2.10.2
    - Fix Python 2 compatibility breakage introduced in 2.10.1 (GH#2001)
  - Re-enable sftp tests, no longer failing under mock


author: Paul Howarth <paul@city-fan.org> - 2.10.3-1
changelog:
  - Update to 2.10.3
    - Certificate-based pubkey auth was inadvertently broken when adding SHA2
      support in version 2.9.0 (GH#1963, GH#1977)
    - Switch from module-global to thread-local storage when recording thread IDs
      for a logging helper; this should avoid one flavor of memory leak for
      long-running processes (GH#2002, GH#2003)


author: Paul Howarth <paul@city-fan.org> - 2.10.4-1
changelog:
  - Update to 2.10.4
    - Update 'camelCase' method calls against the 'threading' module to be
      'snake_case'; this and related tweaks should fix some deprecation warnings
      under Python 3.10 (GH#1838, GH#1870, GH#2028)
    - '~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
      guard in place to ensure they were being compared to another 'PKey' object,
      causing occasional spurious 'BadHostKeyException', among other things
      (GH#1964, GH#2023, GH#2024)
    - Servers offering certificate variants of hostkey algorithms (e.g.
      'ssh-rsa-cert-v01@openssh.com') could not have their host keys verified by
      Paramiko clients, as it only ever considered non-cert key types for that
      part of connection handshaking (GH#2035)


author: Paul Howarth <paul@city-fan.org> - 2.11.0-1
changelog:
  - Update to 2.11.0
    - Align signature verification algorithm with OpenSSH re: zero-padding
      signatures that don't match their nominal size/length; this shouldn't
      affect most users, but will help Paramiko-implemented SSH servers handle
      poorly behaved clients such as PuTTY (GH#1933)
    - OpenSSH 7.7 and older has a bug preventing it from understanding how to
      perform SHA2 signature verification for RSA certificates (specifically
      certs - not keys), so when we added SHA2 support it broke all clients using
      RSA certificates with these servers; this has been fixed in a manner similar
      to what OpenSSH's own client does - a version check is performed and the
      algorithm used is downgraded if needed (GH#2017)
    - Recent versions of Cryptography have deprecated Blowfish algorithm support;
      in lieu of an easy method for users to remove it from the list of
      algorithms Paramiko tries to import and use, we've decided to remove it
      from our "preferred algorithms" list, which will both discourage use of a
      weak algorithm, and avoid warnings (GH#2038, GH#2039)
    - Windows-native SSH agent support as merged in 2.10 could encounter
      'Errno 22' 'OSError' exceptions in some scenarios (e.g. server not cleanly
      closing a relevant named pipe); this has been worked around and should be
      less problematic (GH#2008, GH#2010)
    - Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
      directives (GH#1951)
    - Apply unittest 'skipIf' to tests currently using SHA1 in their critical
      path, to avoid failures on systems starting to disable SHA1 outright in
      their crypto backends (e.g. RHEL 9) (GH#2004, GH#2011)


author: Paul Howarth <paul@city-fan.org> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2140281)
    - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
      to gain more control over early Transport setup and manipulation (GH#2054,
      GH#2125)
    - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
      socket object upon encountering socket errors at connection time; this
      should help somewhat with certain classes of memory leaks, resource
      warnings, and/or errors (though we hasten to remind everyone that Client
      and Transport have their own '.close()' methods for use in non-error
      situations!) (GH#1822)
    - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
      key data is loaded, instead of the natural result of 'IndexError'; this
      should help more bits of Paramiko or Paramiko-adjacent codebases to
      correctly handle this class of error (GH#1599, GH#1637)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.12.0-2
changelog:
  - Address CVE 2023-48795 (a.k.a. the "Terrapin Attack", a vulnerability found
    in the SSH protocol re: treatment of packet sequence numbers) as follows:
    - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem
      with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko currently only
      implements ``hmac-sha2-(256|512)-etm`` in tandem with 'AES-CBC'
    - As the fix for the vulnerability requires both ends of the connection to
      cooperate, the below changes will only take effect when the remote end is
      OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
      patch version) and configured to use the new "strict kex" mode
    - Paramiko will always attempt to use "strict kex" mode if offered by the
      server, unless you override this by specifying 'strict_kex=False' in
      'Transport.__init__'
    - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
      when protocol messages are received in unexpected order; this includes
      situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
      exchange, which are no longer allowed during strict mode
    - Key (re)negotiation, i.e. 'MSG_NEWKEYS', whenever it is encountered, now
      resets packet sequence numbers (this should be invisible to users during
      normal operation, only causing exceptions if the exploit is encountered,
      which will usually result in, again, 'MessageOrderError')
    - Sequence number rollover will now raise 'SSHException' if it occurs during
      initial key exchange (regardless of strict mode status)
  - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the original
    implementation made assumptions based on an OpenSSH implementation detail
  - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
    packet-handler class used internally; this is mostly for testing, but advanced
    users may find this useful when doing deep hacks
  - A handful of lower-level classes (notably 'paramiko.message.Message' and
    'paramiko.pkey.PKey') previously returned 'bytes' objects from their
    implementation of '__str__', even under Python 3, and there was never any
    '__bytes__' method; these issues have been fixed by renaming '__str__' to
    '__bytes__' and relying on Python's default "stringification returns the
    output of '__repr__'" behavior re: any real attempts to 'str()' such objects


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.10-11
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.10-13
changelog:
  - Subpackage python2-setproctitle has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.5.2-2
changelog:
  - Subpackage python2-tables has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.4-3
changelog:
  - Python 2 binary package renamed to python2-chardet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.1-8
changelog:
  - Python 2 binary package renamed to python2-nose-exclude
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: mulhern <amulhern@redhat.com> - 0.20.0
changelog:
  - Remove parsing code added in previous release
  - No longer do CI for Python 2.6
  - Eliminate all wildcard imports and __all__ statements
  - No longer use deprecated Device.from_sys_path() method
  - Minor pylint induced changes
  - Documentation fixes


author: mulhern <amulhern@redhat.com> - 0.21.1
changelog:
  - Deprecate use of Device object as mapping from udev property names to values
  - Add a Properties class and a Device.properties() method for udev properties
  - Fix places where Device object was incorrectly used in a boolean context
  - Return an empty string, not None, if the property value is an empty string
  - Exceptions re-raised from libudev calls now have a message string
  - Insert a warning about using a Device in a boolean context in docs
  - Infrastructure for vagrant tests is removed
  - Various internal refactorings
  - Extensive test improvements
  - Numerous documentation fixes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-7
changelog:
  - Python 2 binary package renamed to python2-cherrypy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dan Radez <dradez@redhat.com> - 18.1.2-3
changelog:
  - Update to 18.1.2
  - Replaced Python2 package with Python 3 package
  - python3-cherrypy-18.1.2-2 is already built by package python3-cherrypy
    this release is to migrate python3-cherrypy into python-cherrypy


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.3.7-1
changelog:
  - Update to upstream 0.3.7 release
  - Drop upstreamed patch: 0003-Fix-tests_api-list-traceback.patch
  - Drop upstreamed patch: 0001-Fix-arguments-with-type-list-705.patch
  - Drop upstreamed patch: 0002-Support-aniso8601-3.0-in-tests.patch
  - Drop no longer needed patch: python-flask-restful.remove_q0_testcase.patch
  - Drop Fedora 27 support
  - Drop Python 2 support


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.5-2
changelog:
  - Python 2 binary package renamed to python2-logutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.2-5
changelog:
  - Subpackage python2-pecan has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 19.0.0-5
changelog:
  - Subpackage python2-pyOpenSSL has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.3-6
changelog:
  - Subpackage python2-pyroute2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: lilinjie <lilinjie@nfschina.com> - 4.14.3-19.8
changelog:
  - add patch set-python-to-python3.patch
  - rpm-4.14.2-conflict-check.patch
  - rpm-secadm-only-in-normal-mode.patch
  - rpm-sign-ima.patch
  - rpm-4.14.2-sm3sum.patch
  - rpm-modify-rpm.sig-file-path.patch
  - rpm-add-secadm-switch.patch


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-14
changelog:
  - Subpackage python2-simplegeneric has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.4.0.3-15
changelog:
  - Subpackage python2-singledispatch has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.4-4
changelog:
  - Subpackage python2-sqlparse has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-3
changelog:
  - Subpackage python2-vine has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Kevin Fenzi <kevin@scrye.com> - 1.2.1-2
changelog:
  - Remove non free docs from src.rpm and provide script to do so before upload. 
  - Fixes bug #1684335


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-5
changelog:
  - Subpackage python2-waitress has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.5-4
changelog:
  - Subpackage python2-webob has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 2.0.33-2
changelog:
  - Removed python2 support (BZ#1747970)
  - Updated documentation (remove unwanted files and add CHANGELOG instead
    of it's broken symlink)


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-4
changelog:
  - Subpackage python2-zc-lockfile has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Remi Collet <rcollet@redhat.com> - 6.0.9-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Todd Zullinger <tmz@pobox.com> - 1.10-12
changelog:
  - Properly handle the exception on missing files (bz1574509)
  - Explicitly disable the non-standard-group check


author: Todd Zullinger <tmz@pobox.com> - 1.10-15
changelog:
  - Fix mixed-use-of-spaces-and-tabs warning (in this spec file)
  - Remove el4/el5 configs and /usr/bin symlinks
  - Disable automatic compilation of Python files in /usr/share/rpmlint
  - Fix non-ghost-in-run filter in config


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-1
changelog:
  - New version 3.2.5
  - Resolves: #2115430 - remote arbitrary files write inside the directories of connecting peers
  - Fix for CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-9
changelog:
  - fixing configure option --with-usb
  - 1530216 - Samsung scanners need proprietary driver for working [Fedora-ALL]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-2
changelog:
  - Update provider registration script to use systemctl to stop/start sfcb
  - Use new macros for %pre/%post/%preun from sblim-cmpi-devel


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)
    Resolves: #1543825


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2036697
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054882
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055547
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz1873185
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2042966


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: bz2055002
  - [sapnw] Fix IndexError exception
    Resolves: bz1992938
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: bz1726023
  - [Ceph] Add support for containerized Ceph setup
    Resolves: bz1882544
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: bz2018228
  - [discovery] Add new discovery plugin
    Resolves: bz2018549
  - [vdsm] Exclude /var/lib/vdsm/storage/transient_disks
    Resolves: bz2029154


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095263
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079485
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2062908
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2065805
  - crio: switch from parsing output in table format to json
    Resolves: bz2092969
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079187
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079484
  - [utilities] Close file only when storing to file
    Resolves: bz2079486
  - [presets] Adjust OCP preset options, more OCP backports
    Resolves: bz2058279


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-3
changelog:
  - [vdsm] Set LVM option use_devicesfile=0
    Resolves: bz2093993
  - [Plugin] Make forbidden path checks more efficient
    Resolves: bz2099598


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-1
changelog:
  - Rebase on upstream 4.4
    Resolves: bz2082614
  - [redhat] Honour credential-less --upload-url on RedHat distro properly
    Resolves: bz2059572
  - [sos] Fix unhandled exception when concurrently removing temp dir
    Resolves: bz2088439
  - [specfile] drop python3-libxml2 dependency
    Resolves: bz2125486
  - [md] Restrict data capture to raid members
    Resolves: bz2125485
  - [cleaner] Use compiled regex lists for parsers by default
    Resolves: bz2043233
  - [cgroups] not collect memory.kmem.slabinfo
    Resolves: bz1995120
  - [report] Fix loop devices data gathering
    Resolves: bz2010735
  - [insights] Collect /var/lib/insights
    Resolves: bz2103233
  - [candlepin] collect information about SCA
    Resolves: bz2060925
  - [manpages] Clarify --upload-directory applicable to FTP protocol only
    Resolves: bz2063259
  - [cleaner] Dont obfuscate tmpdir path of local private_map
    Resolves: bz2064815
  - [fibrechannel] collect Cisco fnic statistics
    Resolves: bz2074715
  - [pulpcore] Collect db_tables_sizes
    Resolves: bz2081433
  - [fibrechannel]: Update fibrechannel plugin to collect HBA logs
    Resolves: bz2089591
  - [arcconf]: Update arcconf plugin to collect UART logs
    Resolves: bz2090283
  - [pulpcore] Stop collecting commands relevant to old taskig system
    Resolves: bz2093191
  - [dnf,yum] Merge plugins into dnf, remove yum plugin
    Resolves: bz2100154
  - [policies] Simplify flow in _container_init()
    Resolves: bz2100480
  - [pacemaker] Update collect cluster profile for pacemaker
    Resolves: bz2065821


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-2
changelog:
  - [utilities] Relax from hard dependency of python3-magic
    Resolves: bz2129038
  - [dnf] Collect legacy yum config symlinks, properly obfuscate pwds
    Resolves: bz2100154


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: RAdovan Sroka <rsroka@redhat.com> - 1.8.29-7.1
changelog:
  RHEL 8.4.0 ZSTREAM ERRATUM
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#2015136


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 4.2.0-1
changelog:
  - Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13@gmail.com>
  - Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Santín <tsao@gpul.org>


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.6-1
changelog:
  - Update to v12.5.6 (#2059133)
  - Build position independent executables
  - Use systemd-rpm-macros
     - See https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.4-1
changelog:
  - Update to v12.7.4 (rhbz#2216900)
  - CVE-2023-33204 - check_overflow() function can work incorrectly that lead to an overflow


author: Jan Macku <jamacku@redhat.com> - 239-47
changelog:
  - systemd-binfmt: Add safeguard in triggers (#1787144)
  - spec: Requires(post) openssl-libs to fix missing /etc/machine-id (#1947438)
  - spec: Go back to using systemctl preset-all in post (#1783263, #1647172, #1118740)
  - spec: Disable libiptc support (#1817265)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-48
changelog:
  - cgroup: Also set io.bfq.weight (#1927290)
  - seccomp: allow turning off of seccomp filtering via env var (#1916835)
  - meson: remove strange dep that causes meson to enter infinite loop (#1970860)
  - copy: handle copy_file_range() weirdness on procfs/sysfs (#1970860)
  - core: Hide "Deactivated successfully" message (#1954802)
  - util: rework in_initrd() to make use of path_is_temporary_fs() (#1959339)
  - initrd: extend SYSTEMD_IN_INITRD to accept non-ramfs rootfs (#1959339)
  - initrd: do a debug log if failed to detect rootfs type (#1959339)
  - initrd: do a debug log if /etc/initrd-release doesn't take effect (#1959339)
  - units: assign user-runtime-dir@.service to user-%i.slice (#1946453)
  - units: order user-runtime-dir@.service after systemd-user-sessions.service (#1946453)
  - units: make sure user-runtime-dir@.service is Type=oneshot (#1946453)
  - user-runtime-dir: downgrade a few log messages to LOG_DEBUG that we ignore (#1946453)
  - shared/install: Preserve escape characters for escaped unit names (#1952686)
  - basic/virt: Detect PowerVM hypervisor (#1937989)
  - man: document differences in clean exit status for Type=oneshot (#1940078)
  - busctl: add a timestamp to the output of the busctl monitor command (#1909214)
  - basic/cap-list: parse/print numerical capabilities (#1946943)
  - shared/mount-util: convert to libmount (#1885143)
  - mount-util: bind_remount: avoid calling statvfs (#1885143)
  - mount-util: use UMOUNT_NOFOLLOW in recursive umounter (#1885143)
  - test-install-root: create referenced targets (#1835351)
  - install: warn if WantedBy targets don't exist (#1835351)
  - test-install-root: add test for unknown WantedBy= target (#1835351)
  - ceph is a network filesystem (#1952013)
  - sysctl: set kernel.core_pipe_limit=16 (#1949729)
  - core: don't drop timer expired but not yet processed when system date is changed (#1899402)
  - core: Detect initial timer state from serialized data (#1899402)
  - rc-local: order after network-online.target (#1934028)
  - set core ulimit to 0 like on RHEL-7 (#1905582)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#1910425)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-49
changelog:
  - remove a left-over break (#1970860)
  - basic/unit-name: do not use strdupa() on a path (#1974700)
  - sd-event: change ordering of pending/ratelimited events (#1968528)
  - sd-event: drop unnecessary "else" (#1968528)
  - sd-event: use CMP() macro (#1968528)
  - sd-event: use usec_add() (#1968528)
  - sd-event: make event_source_time_prioq_reshuffle() accept all event source type (#1968528)
  - sd-event: always reshuffle time prioq on changing online/offline state (#1968528)
  - ci: run unit tests on z-stream branches as well (#1970860)
  - ci: drop forgotten Travis references (#1934504)
  - ci: run unit tests on CentOS 8 Stream as well (#1934504)
  - ci: add missing test dependencies (#1934504)
  - meson: bump timeout for test-udev to 180s (#1934504)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-50
changelog:
  - Added option --check-inhibitors for non-tty usage (#1269726)
  - logind: Introduce RebootWithFlags and others (#1269726)
  - logind: add …WithFlags methods to policy (#1269726)
  - logind: simplify flags handling a bit (#1269726)
  - Update link to RHEL documentation (#1982584)
  - Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
  - shared/seccomp-util: address family filtering is broken on ppc (#1982650)
  - logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
  - logind: fix serialization/deserialization of user's "display session" (#1642460)
  - logind: turn of stdio locking when writing session files too (#1642460)
  - units: set StopWhenUnneeded= for the user slice units too (#1642460)
  - units: improve Description= string a bit (#1642460)
  - logind: improve logging in manager_connect_console() (#1642460)
  - logind: save/restore User object's "stopping" field during restarts (#1642460)
  - logind: correct bad clean-up path (#1642460)
  - logind: fix bad error propagation (#1642460)
  - logind: never elect a session that is stopping as display (#1642460)
  - logind: introduce little helper that checks whether a session is ready (#1642460)
  - logind: propagate session stop errors (#1642460)
  - logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
  - logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
  - logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
  - logind: improve error propagation of user_check_linger_file() (#1642460)
  - logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
  - pam_systemd: simplify code which with we set environment variables (#1642460)
  - logind: validate /run/user/1000 before we set it (#1642460)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-51
changelog:
  - define newly needed constants (#1850986)
  - sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#1850986)
  - sd-netlink: introduce sd_netlink_message_read_strv() (#1850986)
  - sd-netlink: introduce sd_netlink_message_append_strv() (#1850986)
  - test: add a test for sd_netlink_message_{append,read}_strv() (#1850986)
  - util: introduce ifname_valid_full() (#1850986)
  - rename function (#1850986)
  - udev: support AlternativeName= setting in .link file (#1850986)
  - network: make Name= in [Match] support alternative names of interfaces (#1850986)
  - udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#1850986)
  - udev: do not fail if kernel does not support alternative names (#1850986)
  - udev: introduce AlternativeNamesPolicy= setting (#1850986)
  - network: set AlternativeNamesPolicy= in 99-default.link (#1850986)
  - random-util: call initialize_srand() after fork() (#1850986)
  - sd-netlink: introduce rtnl_resolve_link_alternative_names() (#1850986)
  - udev: sort alternative names (#1850986)
  - netlink: introduce rtnl_get/delete_link_alternative_names() (#1850986)
  - netlink: do not fail when new interface name is already used as an alternative name (#1850986)
  - udev: do not try to reassign alternative names (#1850986)
  - Fix LGTM build (#1850986)
  - sd-hwdb: allow empty properties (#1930568)
  - Update hwdb (#1930568)


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Mark de Does <mark@mdedoes.com> 2.12-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Solid shading of paragraphs and table cells.
  - Colored table cell borders, Text colors.


author: Mark de Does <mark@mdedoes.com> 2.13-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Options for making much more compact PostScript when a document 
  is printed.
  - Support for smallcaps.
  - Upgraded the pdfmarks to a version that more recent versions of 
  acroread support.


author: Mark de Does <mark@mdedoes.com> 2.14-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Table Headers
  - Tabs in page headers/footers compatible with MS-Word 2000


author: Mark de Does <mark@mdedoes.com> 2.16-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Fonts can be embedded in the printout to print on any printer.
  - Version 2.15 was skipped.


author: Mark de Does <mark@mdedoes.com> 2.17-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Numbered lists finished.
  - Yet more footnote bugs fixed.
  - Behaviour of explicit line and page breaks simulates that of MS-Word.
  - Made a configurable resources mechanism that works without X11 
  for command line calls.
  - Improvements in numbered lists functionality: Opened user interface.
  - Preliminary support for 'shapes': The newer Word figures mechanism. 
  The Word 97 Drawing Objects are mapped to 'shapes'.


author: Mark de Does <mark@mdedoes.com> 2.20-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Vertical alignment of table cells.
  - Multi column layout (of sections).
  - Text background and text borders
  - Table of Contents
  - Unicode compliant (So most scripts and fonts are now supported)
  - Use fontconfig: Removed restrictions on the collection of fonts that 
  Ted can use; Use Freetype/Xft for anti aliassed text rendering
  - Can now render nested tabes. (They are not yet supprted in the user 
  interface)
  - Versions 2.18 and 2.19 were skipped.


author: Mark de Does <mark@mdedoes.com> 2.21-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Many improvements in the rendering of embedded images.
  - Removed functionality that is not directly related to word processing 
  and document formatting. (Email, Fax)
  - Added GUI functionality that I forgot while moving to GTK.
  - Can now embed fonts from a true type collection in the printout
  - Moved more ad-hoc dialogs to the format tool as a preparation for a 
  better UI


author: Mark de Does <mark@mdedoes.com> 2.22-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Thorough brush-up of the internals.
  - Undu/Redo/Recovery
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.


author: Mark de Does <mark@mdedoes.com> 2.23-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Stability fixes.
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.
  - Preparations for bidirectional text support
  - Comply with LSB directory layout.
  - Conformant deb and rpm packages


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: zhangjun <zhangjun2023@nfschina.com> - 2:8.0.1763-17
changelog:
  - Fix CVE-2022-2206,CVE-2022-2207,CVE-2022-2210,
  - CVE-2021-3872,CVE-2021-4069,CVE-2022-0261,CVE-2022-0318,
  - CVE-2022-0359,CVE-2022-0361,CVE-2022-0392,CVE-2022-0413,
  - CVE-2022-2124,CVE-2022-2125,CVE-2022-2126,CVE-2022-2129,
  - CVE-2022-1616,CVE-2022-1620,CVE-2021-4192,CVE-2021-4193,
  - CVE-2021-4019,CVE-2021-3984


author: zengyi <zengyi@nfschina.com> - 2:8.0.1763-17.3
changelog:
  -vim-8.0-CVE-2023-4735.patch
  -vim-8.0-CVE-2023-4736.patch
  -vim-8.0-CVE-2023-4751.patch
  -vim-8.0-CVE-2023-4781.patch


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-2
changelog:
  - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275)
  - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780)
  - enable WIFI_DISPLAY (rh #1755941)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-3
changelog:
  - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684)
  - allow changing 'bridge' via D-Bus (rh #1888050)
  - expose OWE configurability via D-Bus (rh #1888718)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-5
changelog:
  - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
  - Fix buffer overflow when processing P2P group information (CVE-2021-0326)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: feifei <feifei@nfs-hlj.com> - 1.20.11-2.1.1
changelog:
  - add 0002-xorg-server-CVE-2023-0494.patch 
    add 0003-xorg-server-CVE-2022-46342.patch
    add 0004-xorg-server-CVE-2022-46343.patch
    add 0005-xorg-server-CVE-2022-46344.patch
    add 0006-xorg-server-CVE-2022-4283.patch
    add 0007-xorg-server-CVE-2022-46340.patch
    add 0008-xorg-server-CVE-2022-46341.patch


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.0-1
changelog:
  - Update to version 0.8.0
  - Drop patches xxhash-compiler-warning-32-bit.patch (accepted upstream)
    and xxhash-pkgconfig.patch (issue fixed upstream)
  - Fix empty version in .pc file


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.1-1
changelog:
  - Update to version 0.8.1
  - Drop patch xxhash-pkgconfig-version.patch (accepted upstream)
  - Fix compilation on RHEL 7 ppc64le (gcc 4.8)
  - The x86 dispatch code now enables sse2 and avx2 separately, it can now use
    sse2 on EPEL 7 without trying to use avx2 which is not supported by gcc 4.8
  - Add documentation package - doxygen mark-up was added


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


