# changelog

author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
changelog:
  - Update to a 1.18 snapshot:
  - clients: only ask secrets for settings that require them (rh #1506536)
  - checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
  - lldp: support more VLAN TLVs (rh #1652211)
  - bridge: add VLAN filtering support (rh #1652910)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.8.3-8
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-10
changelog:
  - Build with xmvn
  - Don't generate extra JARs
  - Simplify build dependencies
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0.15-1
changelog:
  - Update to upstream version 1.0.15
  - Remove 0001-execve-path-warning.patch (fixed upstream)
  - Remove patches for s390x and ppc64 (accepted upstream in DAEMON-289)


author: Mat Booth <fedora@matbooth.co.uk> - 1.3.1-1
changelog:
  - Update to latest upstream, rhbz #975516
  - Remove activation dep from pom, rhbz #820963
  - Adapt for current packaging guidelines


author: Orion Poplawski <orion@cora.nwra.com> - 2.1.1-6
changelog:
  - Update to current maven spec guidelines to fix build (bug 979497)
  - Add patch to fix test with junit 4.11


author: Mat Booth <fedora@matbooth.co.uk> - 1.1-10.20100521svn936225
changelog:
  - Remove old obsolete/provides.
  - Build with maven3.
  - Install versionless artifacts only.
  - Conform more to newer guidelines.


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.2-4
changelog:
  - Fix RHBZ #1084441 (see
    https://issues.apache.org/jira/browse/MATH-1057)
  - Disable unit test checking that all StrictMath methods are reimplemented in
    commons-math


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.3-1
changelog:
  - Update to 3.3
  - Drop apache-commons-math-3.2-RHBZ1084441.patch (fixed in 3.3)
  - Drop apache-commons-math-3.2-JDK8.patch (Java 8 support enabled in 3.3)


author: Mat Booth <fedora@matbooth.co.uk> - 2.0.1-11
changelog:
  - Package pom.xml and build with maven, rhbz #825455
  - Remove ancient obsoletes/provides for jakarta package
  - Fix some misc other outdated packaging practices


author: Chris Spike <spike@fedoraproject.org> 1.4.0-1
changelog:
  - Updated to 1.4.0
  - Switched build tool from ant to maven
  - Updated to latest java packaging guidelines
  - Dropped oro BR/R


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3-9
changelog:
  - Install the python3 version of pybabel on Fedora 24+ to match with Fedora's
    default python version


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3-10
changelog:
  - Also make sure that the babel package that has pybabel depends on the correct
    packages (python2 packages on F23 or less and python3 packages on F24 and
    greater.)


author: Nils Philippsen <nils@redhat.com> - 2.3.4-1
changelog:
  - version 2.3.4
  - always build Python3 subpackages
  - remove obsolete packaging constructs
  - update to current Python packaging guidelines
  - build docs non-destructively
  - tag license file as %license
  - use %python_provide macro only if present
  - update remove-pytz-version patch
  - fix build dependencies
  - set TZ in %check


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2.4
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Weinan Liu <liuweinan@loongson.cn> 2.27-41.base.1.loongnix
changelog:
  - 0001-binutils-2.28-GAS-Split-Loongson-MMI-Instructions-from-loongs.patch
  - 0002-binutils-2.28-GAS-Correct-the-AFL_ASE_MASK-macro.patch
  - 0003-binutils-2.28-LD-testsuite-Skip-32bit-test-if-ld-not-su.patch
  - 0004-binutils-2.28-LD-testsuite-Skip-o32-flags-check-on-mips-irix.patch
  - 0005-binutils-2.28-GAS-Split-Loongson-CAM-Instructions-from-loongs.patch
  - 0006-binutils-2.28-GAS-Split-Loongson-EXT-Instructions-from-loongs.patch
  - 0007-binutils-2.28-GAS-Add-Loongson-EXT2-Instructions-support.patch
  - 0008-binutils-2.28-Add-Loongson-3A1000-proccessor-support.patch
  - 0009-binutils-2.28-Add-Loongson-3A2000-3A3000-proccessor-support.patch
  - 0010-binutils-2.28-Add-Loongson-2K1000-proccessor-support.patch
  - 0011-binutils-2.28-Add-myself-as-a-MIPS-port-maintainer.patch
  - 0012-binutils-2.28-Modify-target-mips64-linux-default-ABI-from-N32-to-N.patch
  - 0013-binutils-2.28-GAS-fix-Loongson3-LLSC-errata.patch
  - 0014-binutils-2.28-rename-g464-g464e-g264e-to-gs464.patch
  - 0015-binutils-2.28-Set-ld-default-target-to-n64-abi.patch
  - 0016-binutils-2.28-Add-Loongson-AMO-supported.patch
  - 0017-binutils-2.28-Add-Loongson-csr-supported.patch
  - 0018-binutils-2.28-Add-Loongson-ext3-supported.patch
  - 0019-binutils-2.28-Add-Loongson-spw-supported.patch
  - 0020-binutils-2.28-Add-pxor-as-a-alias-of-xor-fd_ft_fs-insn.patch
  - 0021-binutils-2.28-MIPS-Add-CRC-ASE-support.patch
  - 0022-binutils-2.28-Add-mipsr6p-loongson-supported.patch
  - 0023-binutils-2.28-Fixed-bug-pxor-and-spw-ASE-is-writed-in-membership.patch
  - 0024-Mips-Fix-TLS-LDM-GOT-entry.patch
  - 0025-let_testsuite_not_test_mabi_n32.patch
  - 0026-reset_ASE_value.patch
  - 0027-fix_illegal_memory_access_fault.patch
  - 0028-fix_gsdaui_opcode.patch
  - 0029-fix_error_when_not_nop_after_gsldpc.patch
  - 0030-add_confitions_for_objdump_gsdaui_and_lui.patch
  - 0031-fix_bug_21334.patch
  - Enable gold for mips64el.
  - Add '--enable-mips-fix-loongson3-llsc' configure for MIPS64el.


author: Orion Poplawski <orion@cora.nwra.com> - 1.9.0-1
changelog:
  - Update to 1.9.0 (#1211599)
  - Update URL
  - Disable parallel build
  - Run all tests
  - Ship license files


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: jpena <jpena@redhat.com> - 3.3.6.0-1
changelog:
  - Updated to upstream version 3.3.6.0
  - Added external license file, it is no longer bundled in source
  - Fixed source URL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.16.8-1
changelog:
  - Update to latest upstream release (#1257923)
  - Remove no longer needed patch to prevent coin-or-OS crash in %check


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-5
changelog:
  - Resolves: rhbz#1376819
  - Resolves: rhbz#1634710

  - configure: add --with-initconfigdir option (rhbz#1376819)
  - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
  - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
  - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
  - totemcrypto: Fix importing of the private key (rhbz#1634710)
  - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
  - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
  - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)


author: Thomas Spura <tomspur@fedoraproject.org> - 4.0.5-3
changelog:
  - Cherry-pick patch for protocol downgrade attack (#1221666, CVE-2014-9721)
  - Remove Obsoletes:zeromq-utils
  - Remove %defattr


author: mgalbraith@suse.com
changelog:
  - Merge new cpuset upstream.  Update URL, and add post v1.5.6 fixes.
  - New patches:
    Fix-crash-with-SCHED_IDLE-policy.patch (bnc#959992)
    Handle-unknown-scheduler-policy-codes-gracefully.patch (bnc#959992)
    Parse-proc-pid-stat-properly.patch
    Docu-remove-mention-about-nonexistent-option.patch (bnc#957323)
    Docu-fix-asciidoc-build-error.patch
    Update-URLs-after-project-migration.patch
    Docu-fixed-a-typo.patch
    Fix-typo-in-setup-py.patch


author: lpechacek@suse.com
changelog:
  - Update to ae629aa1dc95, release 1.5.7
  - Deleted patches:
    Docu-fix-asciidoc-build-error.patch
    Docu-fixed-a-typo.patch
    Docu-remove-mention-about-nonexistent-option.patch
    Fix-crash-with-SCHED_IDLE-policy.patch
    Fix-typo-in-setup-py.patch
    Handle-unknown-scheduler-policy-codes-gracefully.patch
    Parse-proc-pid-stat-properly.patch
    Update-URLs-after-project-migration.patch
    cset-make-it-handle-cgroup-mounts.patch


author: tchvatal@suse.com
changelog:
  - Do not require -devel but use only setuptools module
  - Use ~ in version as without it the package is newer than
    release 1.6
  - Reduce the compat py2/py3 choicer, SLE12 can be python3


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Update to latest upstream release
  - Add ppc64le as supported architecture for crash package (BZ #1136050)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210702.4e0ee8fb:
    * Fix: bootstrap: check for missing fields in 'crm_node -l' output (bsc#1182131)
    * Fix: resource: make untrace consistent with trace (bsc#1187396)
    * Dev: sbd: enable SBD_DELAY_START in virtualization environment


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210811.2a30e37e:
    * Dev: ui_resource: Enhancement trace output
    * Fix: doc: Note that resource tracing is only supported by OCF RAs(bsc#1188966)
    * Medium: ra: performance/usability improvement (avoid systemd)
    * Dev: ui_context: Add info when spell-corrections happen
    * Fix: parse: Should still be able to show the empty property if it already exists(bsc#1188290)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20210827.4fb174c4:
    * Fix: hb_report: Using python way to collect ra trace files (bsc#1189641)
    * Fix: bootstrap: adjust host list for parallax to get and copy known_hosts file(bsc#1188971)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211012.52d4086a:
    * Fix: ui_resource: Parse lifetime option correctly (bsc#1191508)
    * Fix: utils: Improve detect_cloud function and support non-Hyper-V in Azure


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211101.7cafcfec:
    * orderedset.py: fix deprecation on collections.MutableSet
    * Dev: crm report: Consolidate collect functions in collect.py and running them in parallel (jsc#SLE-22499)
    * Dev: crm report: Collect report using multiprocessing correctly (jsc#SLE-22499)
    * Fix: bootstrap: Add /etc/crm/crm.conf and /etc/crm/profiles.yml into /etc/csync2/csync2.cfg (bsc#1190466)
    * Dev: Using python logging in all crmsh modules
    * Dev: log: Using logging as log system in crmsh
    * Fix: bootstrap: Adjust corosync and sbd parameters according to the profile environment detected (bsc#1175896, jsc#SLE-22502)
    * Fix: sbd: adjust sbd systemd TimeoutStartSec together with SBD_DELAY_START (jsc#SLE-22502)
    * Dev: Makefile: add etc/profiles.yml and move crm.conf.in into etc


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211116.ef2bce26:
    * Dev: doc: Consolidate help info for those using argparse
    * Dev: ui_cluster: Make sure node is online when stop service
    * Dev: ui_cluster: Graceful shutdown dlm (jsc#SLE-22497)
    * Dev: ui_cluster: Support multi sub-commands with --all option or specific node (jsc#SLE-22497)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211206.e34e2fff:
    * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
    * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
    * Dev: idmgmt: Avoid leading with number for ID
    * Dev: ui_cluster: Check service is available before enable/disable qdevice
    * Dev: ui_node: Improve node standby/online methods
    * Dev: ui_cluster: Remove node from node list if node is unreachable
    * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
    * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
    * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)


author: XLiang@suse.com
changelog:
  - Update to version 4.3.1+20211210.a149de51:
    * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
    * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
    * Dev: log: In status_long function, add a blank line when exception
    * Revert "Dev: ui_cluster: Make sure node is online when stop service"


author: XLiang@suse.com
changelog:
  - Update to version 4.4.0+20220208.5e6dca1d:
    * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
    * Dev: bootstrap: the joining node retries an active cluster
    * Dev: ui_node: Use diff and patch instead of replace cib
    * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
    * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
    * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
    * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
    * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
    * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
    * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
    * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
    * Dev: doc: Replace pingd as ocf:pacemaker:ping
    * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
    * Dev: ra: Support Promoted/Unpromoted
    * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
    * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
    * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
    * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
    * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
    * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
    * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
    * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
    * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
    * Dev: doc: Mention /etc/crm/profiles.yml in man crm
    * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
    * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon


author: XLiang@suse.com
changelog:
  - Update to version 4.4.0+20220321.8cf6a9d1:
    * Dev: Parametrize the log dir
    * Dev: ui_cluster: Check if qdevice can contribute vote
    * Dev: qdevice: Improve remove qdevice process
    * Dev: qdevice: Add lock to protect for the same cluster name
    * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
    * medium: utils: update detect_cloud pattern for aws
    * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
    * Dev: lock: Make lock.py more generic
    * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
    * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
    * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
    * Dev: utils: Remove duplicated debug message


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.184-2
changelog:
  - Add support for vgsplit with cached devices.
  - Fix conversion of cache pool to RAID1 (2.02.184).
  - Fix signal delivery checking race in libdaemon (lvmetad).
  - Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-1
changelog:
  - Fix change of monitoring in clustered volumes.
  - Improve -lXXX%VG modifier which improves cache segment estimation.
  - Add synchronization with udev before removing cached devices.
  - Fix missing growth of _pmspare volume when extending _tmeta volume.
  - Automatically grow thin metadata, when thin data gets too big.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-2
changelog:
  - Fix cluster conversions from linear to mirror.
  - Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
  - Prevent shared active mirror LVs with lvmlockd.
  - Parsing of cache status understand no_discard_passdown.


author: Ihar Hrachyshka <ihrachys@redhat.com> - 1.0.1-0.RC1.1
changelog:
  - removed dibbler-common package, instead put _sharedstatedir in each package
    that needs it.
  - added check section (disabled for now due to upstream bug).
  - cleaned up scripts and examples for non-Linux platforms.
  - removed Group tags.
  - build -docs package as noarch.
  - preserve timestamps for files installed with `install` and `cp`.


author: Petr Menšík <pemensik@redhat.com> - 2.76-16.1
changelog:
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)
  - Handle multiple identical DNS queries better (CVE-2020-25686)
  - Link against nettle for sha256 hash implementation


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Robert Scheck <robert@fedoraproject.org> 2.4-0.23.b1
changelog:
  - Added patch to allow building dsniff with OpenSSL >= 1.1.0
  - Added patch to correct a typo related to the -remote option


author: Raphael Groner <projects.rg@smart.ms> - 0.12.0-2
changelog:
  - Generate documentation for python3
  - Split binaries in subpackage to avoid duplication
  - Execute tests
  - Fix rhbz#1304050


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 20120428-1
changelog:
  - Update to latest upstream release.
  - Rework package build that now uses autotools instead of hand made Makefiles.


author: Jerry James <loganjerry@gmail.com> - 20120830-2
changelog:
  - Add -fi to libtoolize and autoreconf invocations to get updates (bz 925294)
  - Modify libtool to get rid of unused direct library dependencies and rpaths


author: Jerry James <loganjerry@gmail.com> - 20120830-3
changelog:
  - Rebuild for NTL 6.0.0
  - autoreconf already calls libtoolize; don't need to call the latter
  - drop now unneeded -ntl-underlink patch


author: Alexander Kurtakov <akurtako@redhat.com> 1:8.4.0-0.7.git20140506
changelog:
  - Drop the ExclusiveArch it only complicates things and is growing too big with ppc64le and aarch64 to be added.


author: Mat Booth <mat.booth@redhat.com> - 1:4.4.1-5
changelog:
  - Backport patch to make workspace selection dialog visible in the task manager
  - Tidy up SWT symlinks


author: Mat Booth <fedora@matbooth.co.uk> - 3.8.0-1
changelog:
  - Update to latest upstream.
  - Now necessary to explicitly build more fine-grained features.
  - Drop unneeded dep on jakarta-commons-httpclient.
  - Fixed mixed use of tabs and spaces.
  - Switch core package to R: java-headless, rhbz #1068037


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.2-1
changelog:
  - Update to latest upstream, Kepler SR2
  - Drop requires on java, rhbz #1068039
  - Remove unused patch
  - Update project URL


author: Mat Booth <mat.booth@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fix obsoletes on emf-core package, rhbz #1095431
  - Move edit plugin from core to main package


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21
changelog:
  - Fix CVE-2019-1387: remote code execution in recursive clones with nested
    submodules
    Resolves: CVE-2019-1387


author: Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23
changelog:
  - Prevent crafted URL containing new lines, empty host or lacks a scheme
    to cause credential leak.
    Resolves: CVE-2020-11008


author: Peter Lemenkov <lemenkov@gmail.com> - 19.3.4-1
changelog:
  - Ver. 19.3.4
  - Require javapackages-tools (/use/share/java)
  - Use /dev/null as a homedir for EPMD (its shell is /sbin/nologin anyway)


author: Mat Booth <fedora@matbooth.co.uk> - 4.2.0-1
changelog:
  - Update to latest upstream version.
  - Update spec to newer guidelines rhbz #810215.
  - Fix FTBFS following mass rebuild.


author: Jaromir Capik <jcapik@redhat.com> 1.4.0-8
changelog:
  - Extra groupId "org.osgi" added
  - Minor spec file changes according to the latest guidelines
  - fixing "unmappable character for encoding ANSI_X3.4-1968"


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0.2-7
changelog:
  - Install LICENSE and NOTICE with javadoc package
  - Build with maven
  - Move POM file to _mavenpomdir from _datadir/maven2/poms
  - Update to current packaging guidelines
  - Add missing R: java, jpackage-utils


author: Mat Booth <fedora@matbooth.co.uk> - 1.2.0-1
changelog:
  - Update to latest upstream version rhbz #892553.
  - Drop patch, use preferred %pom_* macros instead.


author: Eric Garver <egarver@redhat.com> - 0.6.3-1
changelog:
  - rebase package to v0.6.3, include recent stable fixes
  - use QT4 patch for firewall-applet
  - remove cockpit service definition, cockpit package still ships their own
  - remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
  - remove nftables support


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Petr Vobornik <pvoborni@redhat.com> - 4.0.3-1
changelog:
  - embeddable flag set to installable by ttembed
  - web package license updated to MIT
  - README-Trademarks.txt added


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2-10.el8
changelog:
  - Do not build i686 RPMs.  Make the x86_64 RPMs Obsoletes/Provides
    previous i686 RPMs (RH BZ 1786466).


author: Keith Seitz <keiths@redhat.com> - 8.2-13.el8
changelog:
  - Backport "Fix terminal problems when error() is called."
    (Alan Hayward RH BZ 1852580)
  - Backport "core file memory access problem."
    (Kevin Buettner, RH BZ 1785126)
  - Backport "Stop the BFD library from issuing a warning message..."
    (Nick Clifton, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-14.el8
changelog:
  - Obsolete earlier versions on x86_64 and conflict with 64-bit
    glibc on ix86. (Keith Seitz, RH BZ 1853140)
  - Really fix 1878810 (Keith Seitz, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-15.el8
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903374)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905701)


author: Keith Seitz <keiths@redhat.com> - 8.2-16.el8
changelog:
  - Backport "Fix segfault with nameless fortran modules."
    (Bernhard Heckel, RH BZ 1934673)
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    and related patches.
    (Rogerio Alves et al RH BZ 1854784)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-32
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)
  - Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
    CVE-2018-16509
  - Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
  - Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)
  - Resolves: #1661210 pdf2ps reports an error when reading from stdin
  - Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata


author: Martin Osvald <mosvald@redhat.com> - 9.25-1
changelog:
  - Rebase to latest upstream version (bug #1636115)
  - Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678172 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680026 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-2.2
changelog:
  - Resolves: #1744008 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744012 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744003 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744228 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: gil cattaneo <puntogil@libero.it> 1.2.12-9
changelog:
  - rebuilt rhbz#992387
  - add xmlstreambuffer and jvnet-parent support
  - swith to Xmvn
  - adapt to new guideline


author: Mikolaj Izdebski <mizdebsk@redhat.com> 2.2.1-4
changelog:
  - Change OSGi Bundle-SymbolicName to better match Eclipse needs
  - Update URL
  - Resolves: rhbz#868169


author: Milind Changire <mchangir@redhat.com> - 3.12.2-41
changelog:
  - fixes bugs bz#1390151 bz#1410145 bz#1429190 bz#1510752 bz#1511779 
    bz#1570958 bz#1574490 bz#1595246 bz#1618669 bz#1661393 bz#1668989 bz#1669020


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014087
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test
  - Update patch rhbz1952381
  - Remove rhbz1904567 patch
  - Remove rhbz1939923 patch


author: Alejandro Sáez <asm@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Add remove_waitgroup_misuse_tests patch
  - Add remove_ed25519vectors_test.patch
  - Remove FIPS checks to avoid issues in the CI
  - Related: rhbz#2031116
  - Resolves: rhbz#2022829
  - Resolves: rhbz#2024687
  - Resolves: rhbz#2030851
  - Resolves: rhbz#2031253


author: Guoqi Chen <chenguoqi@loongson.cn> - 1.18.2-1
changelog:
  - go1.18.2 support for loong64.
  - update vendor golang.org/x/sys for byteorder fix.
  - cmd/compile: remove atomic Cas Xchg and Xadd intrinsics.
  - runtime: fix asyncPreempt implementation for errors.
  - cmd/internal/obj: add FuncInfo SPWRITE flag for linux/loong64.
  - runtime: add missing {TOPFRAME,NOFRAME} flag for linux/loong64.
  - cmd/link: call syscall.Fsync on outbuf munmap for linux.
  - cmd/compile: fix loong64 constant folding in division rules.


author: Guoqi Chen <chenguoqi@loongson.cn> - 1.19.0-1
changelog:
  - go1.19 support for loong64.
  - fix mabi to lp64 for loong64
  - fix runtime defs_linux_loong64
  - fix test issue11656 for loong64
  - fixup stack growth after fork in runtime.sigfillset
  - debug/elf: add new-style LoongArch reloc types
  - cmd/link: recognize the new R_LARCH_32_PCREL type on loong64
  - runtime/internal/atomic: enable atomic 64bit types for all functions on linux/loong64
  - cmd/compile: add missing tail calls flag for linux/loong64
  - cmd/compile: remove the resultInArg0 register checks on linux/loong64
  - runtime: remove the fake mstart caller in systemstack on linux/loong64
  - cmd/internal/obj/loong64: save LR after decrementing SP
  - runtime: minor refactoring of _rt0_loong64_linux
  - runtime: fix gcWriteBarrier frame size on loong64,mipsx,mips64x
  - cmd/internal/obj/loong64: remove invalid branch delay slots
  - cmd/compile,cmd/internal/obj: rename loong64 instructions SQRT{F,D} to FSQRT{S,D}
  - math: implement Sqrt in assembly for loong64
  - cmd/asm: add RDTIME{L,H}.W, RDTIME.D support for loong64
  - runtime: use StableCounter implement cputicks() on linux/loong64
  - debug/elf: add new-style LoongArch reloc types
  - cmd/link: recognize the new R_LARCH_32_PCREL type on loong64


author: Orion Poplawski <orion@cora.nwra.com> - 1.8.12-5
changelog:
  - Add patch to fix long double conversions on ppc64le (bug #1078173)
  - Run autoreconf for patches and to remove rpaths


author: Jeff Peeler <jpeeler@redhat.com> 1.2.6-1
changelog:
  - rebase to 1.2.6
  - added new doc files
  - bump boto version requirement
  - add python-pbr buildrequire
  - fixed previous changelog date


author: Jeff Peeler <jpeeler@redhat.com> 1.2.8-1
changelog:
  - rebase to 1.2.8
  - remove wget dependency as it's no longer required
  - remove rubygems dependency as it's too big for non-ruby users


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1479471


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-6
changelog:
  - Resolves: rhbz#1666381 - CVE-2018-12121 http-parser: nodejs: Denial of
                             Service with large HTTP headers [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-7
changelog:
  - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                             allowed for spaces inside Content-Length header
                             values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-8
changelog:
  - Backport needed test fixes
  - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-7]


author: Sergio Correia <scorreia@redhat.com> - 2.7.1-8.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.4-3.el7
changelog:
  - Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-4.el7
changelog:
  - Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1598117 client uninstall fails when installed using non-existing hostname
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
    - Fix regression: Handle unicode where str is expected
  - Resolves: #1591824 Installation of replica against a specific master
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix CA topology warning
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
  - Resolves: #1591647 Increase WSGI worker process count
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-5.el7
changelog:
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-6.el7
changelog:
  - Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
    - Re-open the ldif file to prevent error message
  - Resolves: #1608783 ipa trust-add fails in FIPS mode.
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-7.el7
changelog:
  - Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
    - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
  - Resolves: #1598662 Replica installation fails with connection refused error 
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Fix KRA replica installation from CA master
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
    - Fix ipa-replica-install when key not protected by PIN
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
    - uninstall -v: remove Tracebacks
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
    - ipa commands: print 'IPA is not configured' when ipa is not setup
    - Disable message about log in ipa-backup if IPA is not configured
  - Resolves: #1591824 Installation of replica against a specific master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623113 Replica install: certmonger sometimes fails
    - Wait for client certificates
    - Auto-retry failed certmonger requests


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-8.el7
changelog:
  - Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
    - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-9.el7
changelog:
  - Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
    - ipa-replica-install: properly use the file store
  - Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup
  - Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
    - Update minimum selinux-policy to 3.13.1-224


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7
changelog:
  - Resolves: 1630361 PKINIT fails in FIPS mode
    - Ensure that public cert and CA bundle are readable
    - Always make ipa.p11-kit world-readable
    - Make /etc/httpd/alias world readable & executable
    - Fix permission of public files in upgrader


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Phil Sutter - 1.4.21-29
changelog:
  - Do not attempt to unload any modules when stopping the firewall (RHBZ#1520534)
  - Fix for covscan warnings (RHBZ#1525980)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-31
changelog:
  - Fix iptables-restore with empty comment in rule (RHBZ#1668475)
  - Fix parsing and printing of -m ipvs --vproto option (RHBZ#1679726)
  - Fix for wrong location of devgroup definition file (RHBZ#1657075)
  - Fix for non-numeric devgroup name output (RHBZ#1657075)
  - Reject negative realm values (RHBZ#1657075)


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.60-1.b32.rc26
changelog:
  - upgrade from jdk8u25-b17 to jdk8u60-b32
  - fix known issues
  - support G1 garbage collector
  - interpreter optimization


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.60-1.b32.8
changelog:
  - new version number
  - far jump support
  - fix the JNI null pointer problem of building OpenJDK
  - add CLASSPATH EXCEPTION statement
  - update OpenJFX


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.181-1.b13.8.1
changelog:
  - upgrade from jdk8u60-b32 to jdk8u181-b13
  - fix known issues
  - platform related name changed from mips64 to mips64el


author: Ao Qi <aoqi@loongson.cn> - 1:1.8.0.212-1.b08.8.1.3
changelog:
  - upgrade from jdk8u202-b08 to jdk8u212-b03
  - implemented UseMontgomeryMultiplyIntrinsic and UseMontgomerySquareIntrinsic, crypto.rsa in SPECjvm2008 is increased by more than 100%
  - solved the problem of unstable performance of scimark.monte_carlo in SPECjvm2008
  - changed mips64 to mips64el in the output of java -Xinternalversion


author: gil cattaneo <puntogil@libero.it> 1.0.1-1
changelog:
  - Upstream release 1.0.1.Final
  - fix BR list and use BR mvn()-like
  - introduce license macro
  - fix some rpmlint problem


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Erinn Looney-Triggs <erinn.looneytriggs@gmail.com> - 9.1.3-3
changelog:
  - Adjust useradd to be more flexible as shown here:
    https://fedoraproject.org/wiki/Packaging:UsersAndGroups


author: Michael Simacek <msimacek@redhat.com> - 9.1.4-2
changelog:
  - Install startup script into correct directory
  - Add a notice about httpd_execmem into the startup script


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.0-3
changelog:
  - Change remote-resources version compare from > to >=
  - Removed generation of javadocs (wasn't working anyway)


author: Ray Wang <wanglei@loongson.cn> - 3.10.0-3
changelog:
  - commit: 29f2fb67cbc4140f99f8845f03c4e4444881556e
  - Date:   Tue Sep 24 14:58:59 2019
  - Loongson-3: LS3000/4000VZ: Disable VINT for KVM


author: Nan xiongchao <nanxiongchao@loongson.cn> - 3.10.0-5
changelog:
  - sync from gerrit commit 1adf8d01cd10d48be4bacd0b141c5f0b697ff38a
  - Merge: 3b99bfa f47ccf2
  - Author: 李雪峰 <lixuefeng@loongson.cn>
  - Date:   Thu Nov 7 09:19:34 2019 +0800
  - Merge "Loongson-3: LS3000VZ: Optimized IOAPIC interrupt simulation."


author: yangminglei <minglei@nfschina.com> [4.19.113-18.99.nfs]
changelog:
  - fix CVE-2022-21123, CVE-2022-21125, CVE-2022-21166
  - backport the following patches:
  x86/cpu: Add a steppings field to struct x86_cpu_id
  x86/cpu: Add 'table' argument to cpu_matches()
  x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
  x86/speculation: Add SRBDS vulnerability and mitigation documentation
  x86/speculation: Add Ivy Bridge to affected list
  cpu/speculation: Add prototype for cpu_show_srbds()
  Documentation: Add documentation for Processor MMIO Stale Data
  x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  x86/speculation: Add a common function for MD_CLEAR mitigation update
  x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale
  x86/speculation/srbds: Update SRBDS mitigation selection
  x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  KVM: x86/speculation: Disable Fill buffer clear within guests
  - Add Intel CPU models Lakefield, Alder Lake and Rocket Lake etc.


author: fenghui <fenghui@nfschina.com> [4.19.113-18.102.nfs]
changelog:
  - fix 66286:
  	fix sw cpufreq. Add SW64_CPUFREQ in cpufreq/Makefile.
  	Error deleting SW64_CPUFREQ in loongarch-3C500-support.patch file.


author: jiajie <jiajie@nfschina.com>[4.19.113-18.47.nfs]
changelog:
  - Compiled and passed in the nfs-mips architecture.
  - Fix: mips. kernel-4.19.113-change-reallocarray-to-realloc.patch
  - Config: mips. CONFIG_CRYPTO_XTS=y   add luks encryption type, supprot Disk Encryption.
  - Config: mips. CONFIG_BLK_DEV_RBD=m  support rbd.ko. for ceph.


author: xunian <xunian@nfschina.com>[4.19.113-18.49.nfs]
changelog:
  - Update sw64 to 2022.9, commit at 3d8cb0ddab.  
  - Support kvm , sport 1.2.0 hmcode.
  - Add KVM MEMHOTPLUG ich, and reconfig sw configs.
  - kvm: add guest live migration support;
  - sw64: kvm: enable binding_vcpu debug dynamically;
  - sw64: add memhotplug support for guest os;
  - lpc: ich: add lpc driver support;
  - flash: ich: add lpc mem flash support;
  - sw64: ich: add gpio driver support.
  - Input: i8042: add ich keyboard and mouse controller driver support;
  - usb: xhci: add ich xhci driver support;
  - uart: 8250: add ich uart driver support;
  - hwmon: add support for sw64 temperature sensor.


author: chunchao <chunchao@nfschina.com>[4.19.113-18.50.nfs]
changelog:
  - Fix: drivers/pci add ft-2500 pci_dev_acs_eabled table id.
  - ft-2500 summu group is print incorrectly.


author: xunian <xunian@nfschina.com>[4.19.113-18.51.nfs]
changelog:
  - Config SW，add RTC，I2C drivers support,fix hwclock.
  - Config SW, add VIRTIO_VSOCKETS, HOTPLUG_PCI_PCIE support.


author: chunchao <chunchao@nfschina.com>[4.19.113-18.56.nfs]
changelog:
  - CONFIG_CRC_CCITT=y  CONFIG_CAIF=y  CONFIG_CAIF_VIRTIO=y  CONFIG_VIRTIO_PCI=y  
  - CONFIG_VIRTIO_MMIO=y  CONFIG_VIRTIO=y  CONFIG_VHOST_RING=y
  - CONFIG_VHOST=m CONFIG_VHOST_VSOCK=m CONFIG_VIRTIO_VSOCKETS_COMMON=m
  - CONFIG_VIRTIO_VSOCKETS=m


author: chunchao <chunchao@nfschina.com>[4.19.113-18.54.nfs]
changelog:
  - Fix: mm/memoryblock: do not start bottom-up allocations with kernel_end.
  - upstream commit id: 50b2181099c0b66e80bbb940c22881f2552ce7be.
  - Fix: update loongarch support patch version 52.


author: yangguanghui <yangguanghui@nfschina.com>[4.19.113-18.57.nfs]
changelog:
  - Fix: Xen vm. 
  - modify kernel-CVE-2020-27675.patch:43  WRITE_ONCE(evtchn_to_irq[col], -1) <--->WRITE_ONCE(evtchn_to_irq[row][col], -1)


author: chunchao <chunchao@nfschina.com>[4.19.113-18.58.nfs]
changelog:
  - Fix: security/keys: KEYS: reaching the keys quotas correctly. 
  - upstream commit id: 2e356101e72ab1361821b3af024d64877d9a798d.


author: chunchao <chunchao@nfschina.com>[4.19.113-18.59.nfs]
changelog:
  - Fix: net/ipv6: fix restrict IPV6_ADDRFORM operation. 
  - upstream commit id: 82c9ae440857840c56e05d4fb1427ee032531346.


author: fenghui <fenghui@nfschina.com>[4.19.113-18.63.nfs]
changelog:
  - Support: support zram.
  - Loongarch config: CONFIG_ZRAM CONFIG_ZSMALLOC
  - Sw config: CONFIG_ZRAM CONFIG_ZSMALLOC
  - Mips config: CONFIG_ZRAM CONFIG_ZSMALLOC
  - fix: process_configs.sh error: CONFIG_PNFS_FLEXFILE_LAYOUT=y
  - Mips: CONFIG_NFS_V3=m and CONFIG_PNFS_FLEXFILE_LAYOUT=m


author: chunchao <chunchao@nfschina.com> [4.19.113-18.71.nfs]
changelog:
  - Fix: disable loongarch LS_DUP defaule.
  - Fix: change loongarch HAVE_LIVEPATCH to HAVE_LIVEPATCH_FTRACE.


author: chunchao <chunchao@nfschina.com> [4.19.113-18.72.nfs]
changelog:
  - Config sw for VHOST_VSOCK modules:
  - Modify VIRTIO_VSOCKETS=y to VIRTIO_VSOCKETS=m;
  - Modify VIRTIO_VSOCKETS_COMMON=y to VIRTIO_VSOCKETS_COMMON=m.


author: xunian <xunian@nfschina.com> [4.19.113-18.74.nfs]
changelog:
  - Config sw: add CIFS for samba.
  - 	CONFIG_CIFS=m
  -	CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
  -	CONFIG_CIFS_DEBUG=y
  - Config sw: kernel samepage merging support for ksm.service (CONFIG_KSM=y).


author: zhangjun <zhangjun2023@nfschina.com> [4.19.113-18.75.nfs]
changelog:
  - config sw: add NFT CONFIG for firewalld
  -  	CONFIG_NFT_FIB_INET=m CONFIG_NFT_FIB_NETDEV=m
  -  	CONFIG_NFT_CHAIN_ROUTE_IPV6=m CONFIG_NFT_CHAIN_NAT_IPV6=m
  -  	CONFIG_NFT_DUP_IPV6=m CONFIG_NFT_FIB_IPV6=m
  -  	CONFIG_NF_DUP_IPV6=m  CONFIG_NF_NAT_IPV6=m
  - config sw: support firewalld log no err


author: fenghui <fenghui@nfschina.com> [4.19.113-18.76.nfs]
changelog:
  - Support: misp openstack and guest network.
  - Config: openstack
  - 	CONFIG_NF_TABLES_INET=y
  -	CONFIG_NF_TPROXY_IPV6=m
  -	CONFIG_NF_TABLES_IPV6=y
  -	CONFIG_NFT_REJECT_IPV6=m
  -	CONFIG_NFT_REJECT_INET=m
  -	CONFIG_NF_REJECT_IPV6=m
  - config: guest network
  -	CONFIG_IP6_NF_RAW=m
  -	CONFIG_NF_NAT_IPV6=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.77.nfs]
changelog:
  - Support: Export task/process statistics through netlink
  - config:
  - 	CONFIG_TASKSTATS=y
  - 	CONFIG_TASK_DELAY_ACCT=y
  - 	CONFIG_TASK_XACCT=y
  - 	CONFIG_TASK_IO_ACCOUNTING=y


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Add libperf-jvmti.so in sw_64
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n 

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: fenghui <fenghui@nfschina.com> [4.19.113-18.80.nfs]
changelog:
  - Support: mips64 support FCoE Offload functionality over Chelsio \
  		T4-based 10Gb Converged Network Adapters
    Config: CONFIG_SCSI_CHELSIO_FCOE=m

  - Support: mips64 zram support wirteback
    Config: CONFIG_ZRAM_WRITEBACK=y


author: fenghui <fenghui@nfschina.com> [4.19.113-18.81.nfs]
changelog:
  - Support: Add dm-raid.ko to support lvcreate cmd.
  - Config: mips64 CONFIG_DM_RAID=m
  - Config: loongarch CONFIG_DM_RAID=m


author: fenghui <fenghui@nfschina.com> [4.19.113-18.83.nfs]
changelog:
  - Add: Newly added char drivers app-control.ko
  - Del: Delete "linux-firmware >=20150904-56.git6ebf5d57" dependent packages.
         Support for mini installation of JOS


author: zhuyunfei <zhuyunfei@nfschina.com> [4.19.113-18.79.nfs]
changelog:
  - Support smzy feature from zhuanyong with ko module
    Include interface:
    smzy_selinux_audit_on、smzy_is_enable、smzy_avc_denied、smzy_avc_has_perm_noaudit

  - Disable 1394 support for control requirement
    config x86_64 :CONFIG_FIREWIRE=n

  - Add AQTJ patches:
    kernel-4.19.113-ngac-kernel-key-module.patch
    kernel-4.19.113-ngac-kernel-key-pro.patch
    kernel-4.19.113-ngac-kernel-lsm-extend.patch
    kernel-4.19.113-ngac-kernel-privilege-proc.patch
    kernel-4.19.113-ngac-kernel-software-pro.patch
    kernel-4.19.113-ngac-kernel-software-vim-bugfix.patch
    kernel-4.19.113-ngac-kernel-support-multi-privilage.patch
    kernel-4.19.113-ngac-kernel-hook.patch
    kernel-4.19.113-ngac-kernel-add-nfssec-switch.patch
    kernel-4.19.113-ngac-spro-panic-fixbug.patch


author: chunchao <chunchao@nfschina.com> [4.19.113-18.86.nfs]
changelog:
  - Fix: fs/btrfs allow btrfs_truncate_block() to fallback to nocow for data
  - upstream commitid: 6d4572a9d71d5fc2affee0258d8582d39859188c
  - Config: set CONFIG_IGB to m


author: yangminglei <minglei@nfschina.com> [4.19.113-18.87.nfs]
changelog:
  - Fix: CVE patches:
          kernel-CVE-2021-0920.patch
          kernel-CVE-2021-34981.patch
          kernel-CVE-2021-45486.patch
          kernel-CVE-2022-1789.patch
          kernel-CVE-2022-2586.patch
          kernel-CVE-2022-2588.patch
          kernel-CVE-2022-2639.patch
          kernel-CVE-2022-3061.patch
          kernel-CVE-2022-3239.patch
          kernel-CVE-2022-3545.patch
          kernel-CVE-2022-3586.patch
          kernel-CVE-2022-3594.patch
          kernel-CVE-2022-4378.patch
          kernel-CVE-2022-39842.patch
          kernel-CVE-2022-42896.patch
          kernel-CVE-2022-43750.patch
          kernel-CVE-2023-0266.patch
          kernel-CVE-2023-26545.patch


author: yangminglei <minglei@nfschina.com> [4.19.113-18.90.nfs]
changelog:
  - backport nvme double reset prevention.
  - fix CVE patches:
      kernel-CVE-2022-1184.patch
      kernel-CVE-2022-2977.patch
      kernel-CVE-2022-3169.patch
      kernel-CVE-2023-1281.patch


author: wangxi <wangxi@nfschina.com> [4.19.113-18.91.nfs]
changelog:
  - fix CVE patches:
      kernel-CVE-2022-2663.patch
      kernel-CVE-2022-3303.patch
      kernel-CVE-2022-36280.patch
      kernel-CVE-2022-41848.patch
      kernel-CVE-2022-41850.patch


author: fenghui <fenghui@nfschina.com> [4.19.113-18.92.nfs]
changelog:
  - BUG:54316 
  - Using tp_reserve to calculate netoff can overflow as \
     tp_reserve is unsigned int and netoff is unsigned short.

  - kernek commit: 8e8e2951e3095732d7e780c241f61ea130955a57
     kernel-4.19.113-net-packet-make-tp_drops-atomic.patch

  - kernel commit: acf69c946233259ab4d64f8869d4037a198c7f06  (CVE-2020-14386).
     kernel-4.19.113-net-packet-fix-overflow-in-tpacket_rcv.patch


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Andreas Schneider <asn@redhat.com> - 1.0.0-1
changelog:
  - Update to version 1.0.0:
    * Added new test runner with group fixtures. The old runner is deprecated
    * Added an extensible message output formatter
    * Added jUnit XML message output
    * Added subunit message output
    * Added Test Anything Protocol message output
    * Added skip() command
    * Added test_realloc()
    * Added a cmockery compat header
    * Fixed a lot of bugs on Windows


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
      * Added support to catch multiple exceptions
      * Added support to verify call ordering
      * Added support to pass initial data to test cases
      * Added will_return_maybe() for ignoring mock returns
      * Added subtests for groups using TAP output
      * Added support to write multiple XML files for groups
      * Improved documentation
      * Fixed XML output generataion
      * Fixed Windows builds with VS2015


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Lukas Nykryn <lnykryn@redhat.com> - 219-58
changelog:
  - tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
  - timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
  - doc: fix links to binfmt_misc kernel documentation (#1572244)
  - man/udevadm: remove superfluous --version from subcommand (#1553076)
  - man/udevadm: correctly show the short version of --exit (#1552712)
  - core/timer: downgrade message about random time addition (#5229) (#1587906)
  - fd-util: add new acquire_data_fd() API helper (#1446095)
  - systemd-analyze: make dump work for large # of units (#1446095)
  - use max. message size allowed by DBus spec (#8936) (#1446095)
  - cryptsetup: support LUKS2 on-disk format (#1573838)
  - units: don't put udev to its own mount namespace with slave propagation (#1432211)
  - rules: disable support for Lenovo IR cameras (#1540418)
  - core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
  - core: fix confusing logging of instantaneous jobs (#1506256)
  - core: correct return value from reload methods (#1506256)
  - core: always try harder to get unit status message format string (#1506256)
  - core: unit_get_status_message_format() never returns NULL (#1506256)
  - core: try harder to get job completion messages too (#1506256)
  - core: remove generic job completion messages from unit vtables (#1506256)
  - core: do not log done failed-condition jobs as if unit started (#1506256)
  - core: log completion of remaining job types (#1506256)
  - core: adjust job completion message log levels (#1506256)
  - mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
  - rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)
  - journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
  - tmpfiles: use safe_glob() (#1436004)
  - core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-59
changelog:
  - man: correct the meaning of TimeoutStopSec= (#1305509)
  - rules: mark hotplugged memory as movable (#1563532)
  - udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
  - rules: disable support for Dell IR cameras (#1591316)
  - rpm: fix 
  if [ $1 -eq 1 ] ; then 
                  systemctl preset \--global  >/dev/null 2>&1 || : 
  fi 
  () macro. (#1582383)
  - rpm: remove confusing --user before --global (#1582383)
  - automount: handle state changes of the corresponding mount unit correctly (#1596241)
  - man: document that SIGCONT always follows SIGTERM (#1601794)
  - rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-60
changelog:
  - Revert "rules: mark hotplugged memory as movable" (#1614686)
  - rules: implement new memory hotplug policy (#1614686)
  - Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62
changelog:
  - cryptsetup-generator: introduce basic keydev support (#1619743)
  - cryptsetup-generator: don't return error if target directory already exists (#1619743)
  - cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
  - Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-63
changelog:
  - dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
  - journald: do not store the iovec entry for process commandline on stack (#1657788)
  - journald: set a limit on the number of fields (1k) (#1657792)
  - journal-remote: set a limit on the number of fields in a message (#1657792)
  - journald: free cmdline buffers owned by iovec (#1666646)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-64
changelog:
  - detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
  - core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
  - networkd: respect DHCP UseRoutes option (#1663365)
  - networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
  - networkd: dont crash when mtu changes (#6594) (#1663365)
  - tmpfiles: "e" takes globs (#1641764)
  - tmpfiles: 'e' is supposed to operate on directory only (#1641764)
  - tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
  - bus-message: do not crash on message with a string of zero length (#1643396)
  - Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
  - set automount state to waiting when the mount is stopped (#1651257)
  - core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
  - shorten hostname before checking for trailing dot (#1631625)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
  - local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
  - rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
  - 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
  - core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
  - units/rescue.service.in: fix announcement message (#1660422)
  - systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
  - main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
  - shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
  - journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
  - journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
  - journal-remote: show error message if output file name does not end with .journal (bz#1267552)
  - artificially serialize building of .policy files (#1272485)
  - cryptsetup: add support for sector-size= option (#9936) (#1571801)
  - cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
  - journal: fix syslog_parse_identifier() (#1657794)
  - journal: do not remove multiple spaces after identifier in syslog message (#1657794)
  - tmpfiles: change ownership of symlinks too (#1620110)
  - tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
  - shared/install: allow "enable" on linked unit files (#1628575)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-65
changelog:
  - backport fd_is_fs_type (#1663143)
  - backport chase_symlinks (#1663143)
  - fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
  - fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
  - sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
  - notify: add new --uid= command (#1663143)
  - core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
  - journald: respect KeepFree= as well as MaxUse= values (#1361893)
  - shutdown: in_container was used before its definition (#1693716)
  - core: Fix edge case when processing /proc/self/mountinfo (#1691511)
  - sd-bus: deal with cookie overruns (#1693559)
  - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
  - Allocate temporary strings to hold dbus paths on the heap (#1667871)
  - sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
  - udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
  - udev: call poll() again after killing the spawned process (#1697909)
  - udev: check age against both timeouts to prevent integer wraparound (#1697909)
  - avoid possible hang if our child process hangs (#1697909)
  - missing: when adding syscall replacements, use different names (#1694605)
  - include sys/sysmacros.h in more places (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-66
changelog:
  - sd-bus: unify three code-paths which free struct bus_container (#1643394)
  - hashmap: don't use mempool (#1609349)
  - man: be more explicit about thread safety of sd_journal (#1609349)
  - selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Martin Pitt <mpitt@redhat.com> - 0.7.1-7
changelog:
  - resolves: #1637182 - Add SHA256 fingerprint support
  - Fix regression with keyboard interactive authentication introduced in
    previous update


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-1
changelog:
  - Rebased to libvirt-4.5.0 (rhbz#1563169)
  - The rebase also fixes the following bugs:
      rhbz#1291851, rhbz#1393106, rhbz#1468422, rhbz#1469338, rhbz#1526382
      rhbz#1529059, rhbz#1541921, rhbz#1544869, rhbz#1552092, rhbz#1568407
      rhbz#1583623, rhbz#1584091, rhbz#1585108, rhbz#1586027, rhbz#1588295
      rhbz#1588336, rhbz#1589730, rhbz#1590214, rhbz#1591017, rhbz#1591561
      rhbz#1591628, rhbz#1591645, rhbz#1593549


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-2
changelog:
  - qemu: Add capability for the HTM pSeries feature (rhbz#1525599)
  - conf: Parse and format the HTM pSeries feature (rhbz#1525599)
  - qemu: Format the HTM pSeries feature (rhbz#1525599)
  - qemu: hotplug: Don't access srcPriv when it's not allocated (rhbz#1597550)
  - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE (rhbz#1598084)
  - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs (rhbz#1598087)
  - virsh.pod: Drop --persistent for detach-device-alias (rhbz#1598087)
  - qemu: don't use chardev FD passing with standalone args (rhbz#1598281)
  - qemu: remove chardevStdioLogd param from vhostuser code path (rhbz#1597940)
  - qemu: consolidate parameters of qemuBuildChrChardevStr into flags (rhbz#1597940)
  - qemu: don't use chardev FD passing for vhostuser backend (rhbz#1597940)
  - qemu: fix UNIX socket chardevs operating in client mode (rhbz#1598440)
  - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set (rhbz#1515533)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-3
changelog:
  - qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
  - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
  - spec: Explicitly require matching libvirt-libs (rhbz#1600122)
  - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
  - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
  - qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
  - virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
  - qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
  - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
  - qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
  - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
  - virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
  - docs: schema: Add missing <alias> to vsock device (rhbz#1600345)
  - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-4
changelog:
  - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
  - qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
  - qemu: Fix setting global_period cputune element (rhbz#1600427)
  - tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
  - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
  - qemu: command: Move graphics iteration to its own function (rhbz#1475770)
  - qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
  - conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
  - conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
  - qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
  - tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
  - tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
  - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
  - qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
  - qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
  - qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
  - conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
  - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
  - conf: Introduce new <hostdev> attribute 'display' (rhbz#1475770)
  - qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
  - docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
  - conf: Introduce new video type 'none' (rhbz#1475770)
  - virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
  - tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
  - src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-5
changelog:
  - esx storage: Fix typo lsilogic -> lsiLogic (rhbz#1571759)
  - networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
  - nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
  - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
  - qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
  - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
  - examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-6
changelog:
  - qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
  - conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-7
changelog:
  - qemu_migration: Avoid writing to freed memory (rhbz#1593137)
  - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
  - tests: rename hugepages to hugepages-default (rhbz#1591235)
  - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
  - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
  - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
  - tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
  - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
  - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
  - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
  - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
  - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
  - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
  - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
  - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
  - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
  - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
  - tests: introduce hugepages-nodeset (rhbz#1591235)
  - conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
  - conf: Move hugepages validation out of XML parser (rhbz#1591235)
  - conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
  - tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
  - qemu: Fix probing of AMD SEV support (rhbz#1612009)
  - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-8
changelog:
  - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
  - access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
  - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-9
changelog:
  - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
  - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
  - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-17
changelog:
  - cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-18
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)
  - util: require command args to be non-NULL (rhbz#1672957)
  - qemu: use line breaks in command line args written to log (rhbz#1672957)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-19
changelog:
  - virfile: added GPFS as shared fs (rhbz#1710728)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
  - vircpuhost: Add support for reading MSRs (rhbz#1641702)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
  - qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
  - qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
  - util: Add virHostCPUGetTscInfo (rhbz#1641702)
  - conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
  - cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
  - qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
  - util: Propagate numad failures correctly (rhbz#1716387)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-20
changelog:
  - util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
  - util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
  - util: Introduce virBitmapUnion() (rhbz#1703661)
  - util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
  - qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
  - qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-22
changelog:
  - qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
  - qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Yaling Fang <fangyaling@loongson> - 4.5.0-23.1.loongnix
changelog:
  - Sync from gerrit:
  - commit: 8fa05653469430b071da27f988dc03c8a27ca8d1
  - Author: Zhu Chen <zhuchen@loongson.cn>
  - Date: Thu, 7 Nov 2019 11:06:34
  - qemu: fix patch:qemu: Avoid duplicate resume events and state changes
  - Add Loongson 3A Support for libvirt-4.5
  - change id: I9d3934b4e5dedcfce15ad6e0f00853d79c12e11e
  - libvirt-Add-loogson-3A-support.patch
  - libvirt-fix-patch-Avoid-duplicate-resume-events-and-state-changes.patch


author: Nan xiongchao <nanxiongchao@loongson.cn> -4.5.0-23.2.loongnix
changelog:
  - sync from gerrit:
  - commit e69db9a753ede576e68f75595a6fa7d45f31d16c
  - Author: yangxiaojuan <yangxiaojuan@loongson.cn>
  - Date:   Tue Dec 17 15:40:35 2019 +0800
  - Add new 3A4000 prid support and rebase some
  - nonstandard modify.
  - 1.3A4000 and later use new prid 0x14c00x,so use value
  - and mask to determine the cpu model.
  - 2.Revert some nonstandard modify for loongson support.
  - 3.Reserve some pci slot for particular device.
  - Change-Id: Ia9d7cb4c9e842253dc76799059fff4d169ba333b
  - 0001-Add-new-3A4000-prid-support-and-rebase-some.patch


author: Nan xiongchao <nanxiongchao@loongson.cn> -4.5.0-23.3.loongnix
changelog:
  - sync from gerrit:
  - commit d698476b3ff234a1dbc0ec4a49b16bc1ace050ee
  - Author: yangxiaojuan <yangxiaojuan@loongson.cn>
  - Date:   Tue Mar 24 23:21:12 2020 -0400
  - Update libvirt 4.5.0 version for Loongnix Server 1.0 release
  - Change-Id: I254572087d9353802be3fcd02c7b5decd06a31cf
  - 0001-Add-loongson7a-machine-support.patch
  - 0002-Update-libvirt-4.5.0-version-for-Loongnix-Server-1.0.patch


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-10
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157671)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157671)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157671)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157671)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-11
changelog:
  - Fix a crash in the VNC server library on connecting an IPv4 client if the
    server could not start listening on an IPv6 socket (bug #1314814)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-13
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662996)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.28-3
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Neal Gompa <ngompa@datto.com> - 1.0.225-3
changelog:
  - Clean up the spec file for legibility and modern spec standards
  - Split out tools into their own subpackage
  - Remove archfulness from the build path to fix documentation build


author: Honza Horak <hhorak@redhat.com> - 3:10.1.14-4
changelog:
  - Revert Update to 10.1.15, this release is broken
    https://lists.launchpad.net/maria-discuss/msg03691.html


author: Michele Baldessari <michele@acksyn.org> - 3:10.1.18-2
changelog:
  - Back out upstream commit 7497ebf8a49bfe30bb4110f2ac20a30f804b7946 as it
    breaks the resource agent


author: Michael Bayer <mbayer@redhat.com> - 3:10.1.20-1
changelog:
  - Update to version 10.1.20
  - Add explicit EVR requirement in main package for -libs
    Related: #1406320
  - Use correct macro when removing doc files
    Resolves: #1400981
  - JdbcMariaDB.jar test removed
  - PCRE version check added
    Related: #1382988, #1396945, #1096787
  - added temporary support to build with OpenSSL 1.0 on Fedora >= 26
  - added krb5-devel pkg as Buldrquires to prevent gssapi failure


author: Javier Peña <jpena@redhat.com> - 1.4.57.0-1
changelog:
  - Updated to upstream version 1.4.57.0
  - Updated source URL
  - License file is no longer included in source


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-44
changelog:
  - Intel CPU microcode update to 20180807a.
  - Add README.caveats documentation file.
  - Add intel-microcode2ucode manual page.
  - Add check for early microcode load, use it in microcode_ctl dracut module.
  - Resolves: #1596627.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-59
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-60
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.1
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.3
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-61.5
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827189):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a;
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.
  - Change the URL in the intel-microcode2ucode.8 to point to the GitHub
    repository since the microcode download section at Intel Download Center
    does not exist anymore.


author: Jorge A Gallegos <kad@blegh.net> - 2.0.16-1
changelog:
  - Conditionally disable router-access for tcp_wrappers deprecation (Jorge Gallegos)
  - Updated to 2.0.16 which includes fix for CVE-2018-6758 (Jorge Gallegos)


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-44
changelog:
  - add support for glusterfs (#1316386)
  - change services to start after network-online.target (#1388118)
  - fix interface fadeout configuration (#1547355)
  - fix scanf pattern for ICMP stats (#1693547)
  - change buffer size in pass_common.c file (#1695363 and #1731357)
  - remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
  - fix for CVE-2018-18066 (#1638911)
  - add Counter64 support for UCD-SNMP-MIB (#1703752)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-49
changelog:
  - add missing part of memory leak patch (#1794168)
  - fix if_inet6 messages floood (#1765449)
  - revert bz#1486733 (#1771050)
  - fix issue for process status when process name contains whitespace (#1782180)


author: hanxf <hanxiaofeng@cpu-os.ac.cn> -0.1-2
changelog:
  - add yelp
  - 更新部分截图：通过更新tar包
  - 删除5.2.12 fonts
    Patch: 001-add-yelp.patch
    Patch: 002-del-Mfonts.patch


author: xupengfei <xupengfei@nfschina.com> -0.1-7.2
changelog:
  - 删除nfs-help-0.1-using-lbrowser-in-loongarch-architecture.patch
  - 添加nfs-help-0.1-modify-nfs_help.patch


author: Cdos Support Team <support_os@cpu-os.ac.cn> - 1.1.13-m1.3
changelog:
  - 解决没有生成/var/nfs/license.db文件，造成注册日期随系统时间调整而顺延的问题.
  - Added: /etc/xdg/autostart/nfs-license-agent.desktop 
  - Patch02:	nfs-license-add-log-test-0002.patch
  - deleted /lib/systemd/system/license.service


author: heyanbing <heyanbing@loongson.cn> - 4.1-27.lns7.1.loongnix
changelog:
  - use loongnix-release instead of centos-release for lsb checks
  - add mips support, skip redhat_lsb_trigger


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.1
changelog:
  - 修改"/etc/nfs-release"文件中的版本标识
  - 修改此软件包版本命名规则，去除之前的升级标识，以后有修改在dist信息后升级版本号，添加4.0标识
  - 去除"/etc/os-release"文件中的"BETA"标识


author: Dong Chuanjian <chuanjian@nfschina.com> - 4.0-****.nfs4.7
changelog:
  - add "if $USER==root" for performance.sh
  - add "update-batch-time" for nfs-autoupdate
  - add "RTM4-G310" for VERSION of os-release


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 9.1.0-84
changelog:
  - Revert dropping brp-java-repack-jars
  - fix generating group owner name when processing a jar file (#1460628)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-85
changelog:
  - Fix generation of kernel module versioned symbol dependencies for the case
    when module depends on a symbol with the same name as the one present
    in kernel but with a different version (#1619235)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-86
changelog:
  - Add support for compressed kernel modules to find-provides,
    find-provides.ksyms, find-requires, find-requires.ksyms (#1619891)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-87
changelog:
  - Revert to usage of join instead of comm in find-requires.ksym:mod_requires()
    as generated "Requires:" and "Provides:" lists have different format
    and unsuitable for processing with comm (#1619235)


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Keith Robertson <kroberts@redhat.com> - 0.9.7-1
changelog:
  - Allow the CLI to return more than 50 results
  - TypeError: Incorrect padding with a specific password and not working further.
  - diagnose filename output gives URLs to the XML file, not html, and XML displays author sso name
  - getcase subcommand of redhat-support-tool doesn't show the group name


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - bz1161141 - search plugin output gives URLs to the XML page, not html
  - bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
  - Resolves: rhbz#1168414 - rhel7 vmcore offset
  - Resolves: rhbz#1174461 - skip already downloaded attachments
  - Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
  - Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1196297 - typos in opencase
  - Resolves: rhbz#1196316 - change menus when closing a case
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
  - Resolves: rhbz#1104344 - add soscleaner
  - Resolves: rhbz#1273976 - caches bad password
  - Resolves: rhbz#1284306 - improve ? help
  - Resolves: rhbz#1284308 - show attachment sizes
  - Resolves: rhbz#1284309 - show attachment full path
  - Resolves: rhbz#1284314 - differentiate diagnose and analyze
  - Resolves: rhbz#1290909 - change case internal status
  - Resolves: rhbz#1351141 - reverse severity list


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
  - Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
  - Resolves: rhbz#1342628 - When opening a new case, offer a default product.
  - Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole <pghole@redhat.com> - 0.9.11-1
changelog:
  - Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
  - Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
  - Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
  - Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy


author: David Shea <dshea@redhat.com> - 0.8.9-1
changelog:
  - backup old product id certificates before installation of new ones (jdornak)
    Resolves: rhbz#1148783


author: Nikola Đipanov <ndipanov@redhat.com> - 0.4-5
changelog:
  - Change FLAGS to the new CONF module in nova-novncproxy
  - Drop the hard dwp on whole nova package and require only nova-common


author: Alan Pevec <apevec@redhat.com> - 0.5.1-1
changelog:
  - update to the new upstream version, for changes since 0.4 see:
    https://github.com/kanaka/noVNC/releases/tag/v0.5
    https://github.com/kanaka/noVNC/releases/tag/v0.5.1


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-26
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
  - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
  - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
  - fix crash in parsing of received address in ntpq (#1616250)
  - avoid reading freed memory after disabling netlink socket (#1555401)
  - don't disable netlink socket on ENOBUFS error (#1555413)
  - replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29.el7_8.2
changelog:
  - don't update transmission time on invalid response (CVE-2020-11868)
  - randomize transmit timestamp in client requests (CVE-?, #1813787)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: Pádraig Brady <pbrady@redhat.com> - 2014.1-3
changelog:
  - Add dependency on curl, needed by openstack-status
  - openstack-service: improve support for systemd based platforms
  - openstack-db: improve diagnostics for db sync failure
  - openstack-demo-install: remove as no longer supported
  - openstack-status: handle http redirects (to https etc.)


author: Pádraig Brady <pbrady@redhat.com> - 2014.2-1
changelog:
  - openstack-service: don't restart neutron-ovs-cleanup (rhbz#1133920)
  - openstack-status: don't display status for uninstalled services on systemd platforms
  - openstack-status: list "target" service status instead of obsolete "tgtd"
  - openstack-status: list openstack-ceilometer-notification and neutron-metering-agent services


author: Pádraig Brady <pbrady@redhat.com> - 2015.2-1
changelog:
  - openstack-status: list all nova optional services
  - openstack-status: list tuskar and ironic services
  - openstack-status: list nova instances for all tenants
  - openstack-status: list enabled sahara services


author: Timothy Redaelli <tredaelli@redhat.com> - 2.9.2-3
changelog:
  - Build OVS as shared library
  - Build the C json native extension for Python (60x faster)
  - Fix TPS VerifyTest (rpm -V) by do not verify md5, size and mtime of
    /etc/sysconfig/openvswitch
  - Backport spec file modfications from "rhel: Use openvswitch user/group for
    the log directory"


author: Timothy Redaelli <tredaelli@redhat.com> - 2.9.2-6
changelog:
  - Backport "Add ovs.compat module to python package" (#1619712)
  - Backport a variant of "dhparams: Fix .c file generation with OpenSSL >= 1.1.1-pre9"


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-4
changelog:
  - Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
  - Resolves: rhbz#1478451


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-7
changelog:
  - Shutdown corosync locally if fenced
  - Count start failure once
  - Resolves: rhbz#1448221
  - Resolves: rhbz#1549576


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-1
changelog:
  - pcs status now shows when a standby node still has active resources
  - Allow clean-up of guest nodes and bundles without unmanaging first
  - pcs status now shows pending and failed fence actions by default
  - Improve pcs status display when disconnected from cluster
  - Ensure node attributes are recorded if attrd writer is shutting down
  - Synchronize fencing history across all nodes
  - Add stonith_admin option to clear fencing history
  - Don't schedule unneeded bundle actions when connection is on different node
  - Allow use of sbd in clusters with guest nodes and bundles
  - Schedule bundle clone notifications correctly when connection is moving
  - Rebase on upstream 1.1.20-rc1 version
  - Avoid unneeded resource restarts when remote connection fails to start
  - Allow crm_resource --move to work when a previous move had a lifetime
  - Wait for all replies when refreshing a resource
  - Don't schedule clone notifications for a stopped bundle
  - Allow option to crm_resource --clear to clear only expired constraints
  - Fix result reporting when cleanup is done while an operation is in-flight
  - Resolves: rhbz#1419548
  - Resolves: rhbz#1448467
  - Resolves: rhbz#1461964
  - Resolves: rhbz#1486869
  - Resolves: rhbz#1535221
  - Resolves: rhbz#1555938
  - Resolves: rhbz#1595422
  - Resolves: rhbz#1627948
  - Resolves: rhbz#1638593
  - Resolves: rhbz#1644076
  - Resolves: rhbz#1644864
  - Resolves: rhbz#1648507
  - Resolves: rhbz#1648620
  - Resolves: rhbz#1652053
  - Resolves: rhbz#1652752
  - Resolves: rhbz#1658650
  - Resolves: rhbz#1665343


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-2
changelog:
  - Assume unprivileged ACL if unable to get user information from host
  - Delay 2 seconds before re-attempting a failed node attribute write
  - SNMP alert sample script now sends all OIDs with every alert
  - Recover dependent resources correctly with asymmetric ordering
  - Rebase on upstream 1.1.20 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1597695
  - Resolves: rhbz#1608979
  - Resolves: rhbz#1628966
  - Resolves: rhbz#1644864


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-3
changelog:
  - Support more than 64KB of fence agent output
  - Avoid unnecessary recovery of group member
  - Improve IPC clients' authentication of servers (CVE-2018-16877)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Resolves: rhbz#1549366
  - Resolves: rhbz#1609453
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-4
changelog:
  - Update security patches
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.2.6.3-1
changelog:
  - update to 1.2.6.3
  - add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Ville Skyttä <ville.skytta@iki.fi> - 0.7.3-3
changelog:
  - Build Python 3 version (#1004668).
  - Add dependency on setuptools.
  - Update summary and description.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.7.3-4
changelog:
  - Avoid interfering with pies in version check (#1039706, Timothy Crosley).
  - Refresh Debian additions tarball.


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.1.10-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Russell Bryant <russellb@fedoraproject.org> - 2.0.0-2
changelog:
  - Remove unnecessary cleaning of the buildroot in %install section
  - Add %check section to run the unit tests
  - Rename package from python-sendfile to pysendfile


author: Ralph Bean <rbean@redhat.com> - 3.4.0.2-4
changelog:
  - Apply upstream patch to fix python namespace handling.
  - Narrow down directory ownership to just the ssl_match_hostname module.


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 3.5.0.1-1
changelog:
  - New upstream release
  - Brings IP Address ServerAltName handling
  - Better fix for namespace issues that doesn't involve setuptools.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.5.4-1
changelog:
  - Update to 1.5.4
  - Fix for python3 module and anydbm
  - Tried enabling unittests on python3 -- still no joy


author: Robert Kuska <rkuska@redhat.com> - 1.5.4-8
changelog:
  - Change beaker.session to use sha1 instead of md5 because of failures in fips mode
  Resolves: rhbz#996219


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.32.1-1
changelog:
  - Updated to 2.32.1 (RH #1126056, RH #1132348)
  - Added python3-boto (RH #1024363)
  - Added (but did not enable) unit tests (RH #1072946, RH #1072923)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-1
changelog:
  - Updated to 2.34.0 (RH #1072925, RH #1072928, RH #1161229)
  - Made executables point to python2 (RH #1152444)
  - Enabled unit tests on Fedora (RH #1072946)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-2
changelog:
  - Added missing python-requests and python-rsa dependencies
  - Disabled unit tests due to rawhide/F21 python regression (RH #1161166:c4)


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Pradeep Kilambi <pkilambi@redhat.com> - 1.2.7-1
changelog:
  - Rebase to 1.2.7
  - move sphinx-build to %build
  - move buildRequires/requires to python2-cotyledon 
  - run python3 tests


author: Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 1:2.5.0-1
changelog:
  - Update to latest upstream version
  - The patch to make dateutil.zoneinfo.gettz() use the system database is dropped.
    Upstream recommends using dateutil.tz.gettz() instead.


author: Avram Lubkin <aviso@fedoraproject.org> - 1.12.0GITa4774ee-1
changelog:
  - Latest Snapshot
  - Drop EPEL5 from master spec
  - Patch to support EL6
  - Disable python2 package for EPEL7+


author: Ralph Bean <rbean@redhat.com> - 0.4.0-3.20130103hg71
changelog:
  - Moved to post-release hg checkout snapshot.
  - Testing experimental background value creation.
  - Temporarily removed the CHANGES doc


author: Ralph Bean <rbean@redhat.com> - 0.4-4
changelog:
  - Merge branches together and bump release for bodhi updates.
  - Removed empty %check section.
  - Fix incorrect usage of %{pypi_name}.


author: Kevin Fenzi <kevin@scrye.com> 0.9-6
changelog:
  - Add patch to fix http over proxy. Fixes bug #857514
  - Add patch to fix CVE-2013-2037. Fixes bug #958640
  - Add patch to fix binary headers in python3. Fixes bug #1205127


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
  - Add syncrepl_refreshdone() method to SyncreplConsumer class.
    Need by FreeIPA, subsequently accepted upstream.
  - Resolves: rhbz#1122495


author: Dominik Mierzejewski <rpm@greysector.net> - 2.0.0-0.1.b4
changelog:
  - Update to 2.0.0b4
  - Drop upstreamed or obsolete patches
  - python-cycler >= 0.10.0 is required
  - move around Requires and BRs and sort more or less alphabetically
  - don't ship baseline images for tests (like Debian)
  - Require stix fonts only when they're not bundled
  - disable HTML doc building for bootstrapping 2.0.x series
  - relax image rendering tests tolerance due to freetype version differences
  - disable some failing tests on aarch64 for now


author: Adam Williamson <awilliam@redhat.com> - 2.0.0-0.7.rc2
changelog:
  - Update to 2.0.0rc2
  - Fix more big-endian integer issues
  - Apply the 'aarch64' test tolerance patch on ppc64 also (it's affected by same issues)
  - Tweak the 'i686' test tolerance patch a bit (some errors are gone, some new ones)
  - Re-enable test suite for all arches
  - Note a remaining quasi-random test issue that causes build to fail sometimes


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1.0.2-9
changelog:
  - Removed Python2 binary package 
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.53-1
changelog:
  - New upstream release 1.53
  - Fixing set_multi() so that if the server closes the connection it will no
    longer raise AttributeError
  - readline() now will mark the connection dead if the read fails
  - Changing check_keys to use re.match() instead of str.translate(), because
    re.match() works with Python < 2.6
  - Add a MANIFEST.in file
  - Client() now takes a "check_keys" option, which defaults to True
  - Converting control character checking of keys based on performance testing of
    alternatives
  - Converted unicode tests from using u''
  - Doing a "set" after server goes away, raised AttributeError: 'NoneType'
    object has no attribute 'sendall'
  - incr/decr return None instead of 0 on server connection failure
  - Supports IPv6 connections using: "inet6:[fd00::32:19f7]:11000"


author: Jerry James <loganjerry@gmail.com> - 1.9-1
changelog:
  - New upstream version
  - Drop upstreamed -test-rounding-fix patch
  - Upstream no longer bundles python-decorator; drop the workaround


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server
    mode (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 2.1.5.
    Resolves #1557142


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-4
changelog:
  - Add a dependency on python2-pyasn1. It used to be a dependency
    of python2-cryptography, but it is not the case with newer versions.
    (RHBZ #1559133)


author: Jake Hunsaker <jhunsake@redhat.com> - 2.1.1-9
changelog:
  - Fix a security flaw (CVE-2018-1000805) in Paramiko's server
    mode (does not effect client mode).
    Backported from 2.1.6
    Resolves rhbz#1637366


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-3
changelog:
  - Ugh.  Enable unittests and make a note that the python3 module is totally
    non-functional.  Open a bug for that for the actual package maintainers to
    make a decision on.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-4.20111221hg1498
changelog:
  - Tarball is missing files, use a snapshot to get those files and also pick up
    several bug fixes (one related to serving CGI scripts, another for http
    Continue requests, and a third regarding digest authentication and internet
    explorer)


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Orion Poplawski <orion@cora.nwra.com> - 1.2.1-2
changelog:
  - Only enable python3 on Fedora
  - Drop old python-imaging conditional
  - Drop unneeded manual bytecompile


author: Darryl L. Pierce <dpierce@redhat.com> - 1.1.0-0.1
changelog:
  - Replaced the python-qpid-proton requirement.
  - Added egg info to the list of docs for this package.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.17.0-8
changelog:
  - Python 2 binary package renamed to python2-qpid-proton
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Luke Macken <lmacken@redhat.com> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Run the test suite
  - Add a python3 subpackage
  - Remove obsolete buildroot tag and cleanup


author: Ralph Bean <rbean@redhat.com> - 0.4-3
changelog:
  - Removed clean section.
  - Removed defattr.
  - Removed removing of buildroot in install section.
  - Added removal of egg-info in prep section.
  - Added python3 subpackage.


author: Jamie Lennox <jamielennox@gmail.com> - 0.7.0-1
changelog:
  - Update package to new version.
  - Add python2 subpackage for new python packaging guidelines.
  - Redo patch1 to still apply.


author: Thomas Spura <tomspur@fedoraproject.org> - 0.6-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - missing BR: python-devel


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1.18-3
changelog:
  - Do not include the sqlformat script in the python-sqlparse package, only in
    the python3-sqlparse package.  This will fix the script not working if the
    python2-sqlparse package is installed but not python3-sqlparse and it will
    keep the python2-sqlparse package from depending on python3.


author: Paul Belanger <pabelanger@redhat.com> - 3.2.1-2
changelog:
  - Ensure python3-statsd only exists when with_python3 defined
  - Add python3 testing dependencies
  - Run tests under python3


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.2-5
changelog:
  - Update provides filter
  - Ship python2 package
  - Use %python3_pkgversion for EPEL7 compatibility
  - Use current python macros


author: Lumír Balhar <lbalhar@redhat.com> - 12.1.0-7
changelog:
  - Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
  Resolves: rhbz#1813439 rhbz#1813447
  - Remove useless macros definitions


author: Julien Enselme <jujens@jujens.eu> - 1.0.0-3
changelog:
  - Add provides for python2-txaio
  - Remove usage of python2 and python3 dirs
  - Unbundle jquery
  - Don't remove _sources of documentation


author: Piotr Popieluch <piotr1212@gmail.com> - 1.1.2-2
changelog:
  - deleted group tag
  - added license to python3 module
  - rewritten summary
  - wrapped description
  - added rm -rf *.egg-info to %prep
  - added comments to the rm commands in %install section


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Lumír Balhar <lbalhar@redhat.com> - 15.1.0-3
changelog:
  - Add three new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1643829


author: Lorenzo Gil Sanchez <lorenzo.gil.sanchez@gmail.com> - 0.8.5-2
changelog:
  - Update description to use the new Fedora 20 _pkgdocdir macro, which
    is also defined for backwards cmompatibility


author: Lorenzo Gil Sanchez <lorenzo.gil.sanchez@gmail.com> - 0.8.9-4
changelog:
  - Fix comment in %description about versioned directory for docs
  - Use __python2 macro instead of __python


author: Chandan Kumar <chkumar246@gmail.com> - 0.4.3.2-3
changelog:
  - Fixed shebang rpmlint issue in .svg files
  - use roboto-fontface-fonts due to bug in google-roboto-fonts


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-3
changelog:
  - Python 2 binary package renamed to python2-alembic
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Eric Smith <brouhaha@fedoraproject.org> 16.1.0-1
changelog:
  - Updated to latest upstream.
  - Removed patch, no longer necessary.
  - Removed "with python3" conditionals.


author: Julien Enselme <jujens@jujens.eu> - 0.10.4-3.git29f8acc
changelog:
  - Build python2 and python3 in the same dir
  - Update dependencies
  - Put python2 package in a subpackage
  - Add provides
  - Correct %files section


author: Julien Enselme <jujens@jujens.eu> - 0.10.9-1.gitcf10233
changelog:
  - Update to 0.10.9
  - Apply patch to correct allowedOrigin validation. See bz:1359792, bz:1359791 and https://github.com/crossbario/autobahn-python/pull/693


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 2.0.0-2
changelog:
  - Fix the license as the package has some Public Domain files
  - Ensure the .so files are not executable


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 2.0.0-3
changelog:
  - Add conflicts to py-bcrypt since they both provide a bcrypt python module
  - Fix macro that were using %{module} instead of %{modname}
  - In fact the .so files must be executable, so ensure they are such


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.1-2
changelog:
  - Python 2 binary package renamed to python2-cachetools
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.4-3
changelog:
  - Python 2 binary package renamed to python2-chardet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.8-12
changelog:
  - Python 2 binary package renamed to python2-cmd2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.5-3
changelog:
  - Python 2 binary package renamed to python2-contextlib2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.4-12
changelog:
  - Python 2 binary package renamed to python2-croniter
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1.2-5
changelog:
  - Python 2 binary package renamed to python2-daemon
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Carl George <carl.george@rackspace.com> - 1.0.0-2
changelog:
  - Remove separate py3 build directory
  - Update summary and description
  - Use a common license and documentation directories between PY2/3 packages


author: Carl George <carl.george@rackspace.com> - 1.0.1-2
changelog:
  - Remove coverage build dependency
  - Change python3 control macros to a bcond macro
  - Add bcond macro to optionally require explicit python2 names


author: Ralph Bean <rbean@redhat.com> - 0.4.1-6
changelog:
  - Added explicit python2 subpackage with modern provides statement.
  - Only apply the entity_loop patch on enterprisey builds.


author: Adam Williamson <awilliam@redhat.com> - 0.5.0-1
changelog:
  - Update to 0.5.0, drop merged/superseded patches
  - Enable Python 3 build for EPEL 7, per https://fedoraproject.org/wiki/PackagingDrafts:Python3EPEL
  - Drop format-string patch as Python 2.6 is no longer supported anyway
  - Update URL to github
  - Update source URL for pypi changes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1-5
changelog:
  - Python 2 binary package renamed to python2-django-compressor
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Germano Massullo <germano.massullo@gmail.com> - 0.6.2-1
changelog:
  - Heavy edits to make spec file compliant to https://fedoraproject.org/wiki/Packaging:Python (package python-docopt did not provide a python2-docopt package in Fedora repositories)
  - Removed egg files stuff since they are no longer present in upstream source file.
  - 0.6.2 minor update


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 0.6.2-3
changelog:
  - Don't own __pycache__ directory in python3 subpackage
  - Really run tests (setup.py test doesn't do anything)
  - Drop copy-pasted Requires (RHBZ #1405639)
  - Trivial cleanups


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.0.3-17
changelog:
  - Python 2 binary package renamed to python2-extras
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Carl George <carl.george@rackspace.com> - 0.3.0-1
changelog:
  - Upstream 0.3.0
  - Add patch1 to fix GH#558
  - Update to new packaging guidelines
  - Add new test suite dependencies
  - Call nosetests directly


author: Carl George <carl.george@rackspace.com> - 0.3.0-4
changelog:
  - Specify minimum version of python-six
  - Change python3 control macros to a bcond macro
  - Add bcond macro to optionally require explicit python2 names


author: Carl George <carl.george@rackspace.com> - 1.0.0-1
changelog:
  - Latest upstream
  - Patch002 and Patch003 fixed upstream
  - Patch004 added to make test suite pass with old version of mimeparse


author: Matthias Runge <mrunge@redhat.com> - 0.14.1-6
changelog:
  - Use time.monotonic if available (Python3 > 3.2)
    patch thanks to Ville Skyttä (rhbz#1294335)
  - modernize spec


author: Paul Belanger <pabelanger@redhat.com> 1.4.0-1
changelog:
  - New upstream 1.4.0 release
  - Update spec file latest python support
  - Fix bogus date warning
  - rpmlint warnings


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.0-6
changelog:
  - Python 2 binary package renamed to python2-fixtures
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Michele Baldessari <michele@acksyn.org> - 1.4.0-1
changelog:
  - Update to latest version
  - Add python3 package
  - Tag LICENSE with appropriate macro
  - Generate {python,python3}-google-api-client packages to be more consistent
    within Fedora
  - Add python-oauthclient dependency


author: Michele Baldessari <michele@acksyn.org> - 1.4.2-3
changelog:
  - Cleanup spec according to newest python policy
  - Drop python3 conditional, we'll build this for Fedora only for now anyways


author: Kevin Fenzi <kevin@scrye.com> 0.4.7-2
changelog:
  - Re-enable tests on secondary arches. Fixes #1252899
  - Applied patch to build on ppc64le. Fixes #1252900


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.18-3
changelog:
  - Python 2 binary package renamed to python2-ipaddress
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Aurelien Bompard <abompard@fedoraproject.org> - 0.1.11-7
changelog:
  - Build for Python3 on EPEL:
    http://fedoraproject.org/wiki/PackagingDrafts:Python3EPEL
  - Modernize the spec a bit (build and install macros, no explicit buildroot)


author: Orion Poplawski <orion@cora.nwra.com> - 2.5.1-3
changelog:
  - Enable python3 builds for EPEL (bug #1395653)
  - Ship python2-jsonschema
  - Modernize spec
  - Use %license


author: Carl George <carl@george.computer> - 1.6.1-1
changelog:
  - Latest upstream
  - Add patch0 to remove pytest-{cov,runner} deps
  - Share doc and license dir between subpackages
  - Enable EPEL PY3 build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0-10
changelog:
  - Python 2 binary package renamed to python2-ldappool
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0 and run tests
  - Add a Python 3 subpackage
  - Add dependency on python-setuptools


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.7.0-3
changelog:
  - Update patch to build against system libs and add compress_fast method
  - Add BR for python[3]-nose
  - Run bundled test in %check


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.7.0-6
changelog:
  - Spec file cleanup
  - Add use of python_provide macro
  - Remove python 3 conditional build - always build
  - Use standard python packaging build and install macros


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Use new upstream URL
  - Drop upstreamed patch
  - Use PyPi source url with hash, for now


author: Carl George <carl.george@rackspace.com> - 1.6.0-1
changelog:
  - New upstream https://github.com/dbtsai/python-mimeparse
  - Modernize spec file per Python Packaging Guidelines


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2-7
changelog:
  - Python 2 binary package renamed to python2-monotonic
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: aarem AT fedoraproject DOT org - 2.2-3
changelog:
  - renamed spec file to match package as per BZ #1381029
  -fixed bug (incorrect python3_provides) as per BZ #1381029
  - use common macro for description as per suggestion in BZ #1381029


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-14
changelog:
  - Python 2 binary package renamed to python2-mox
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.2.0-2
changelog:
  - Python 2 binary package renamed to python2-munch
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ihar Hrachyshka <ihrachys@redhat.com> - 0.4.2-2
changelog:
  - Added missing python-setuptools as a build dependency.
  - Include documentation and examples.
  - Run unit tests on build.
  - Rebuild egg file.
  - Added python2 macros needed for el6.
  - Made python macros more specific (python -> python2).
  - Made /usr/lib/python2.7/site-packages file inclusion wildcard a bit more strict.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.7-5
changelog:
  - Python 2 binary package renamed to python2-ncclient
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.19-4
changelog:
  - Python 2 binary package renamed to python2-netaddr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: RDO <dev@lists.rdoproject.org> 7.0.0-1
changelog:
  - Update to 7.0.0

   * Fri Dec 02 2016 Koki Sanagi<sanagi.koki@jp.fujitsu.com> - 2.0.0-1
   - Initial package.


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.13.3-5
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Michele Baldessari <michele@acksyn.org> - 1.5.2-2
changelog:
  - Remove dependency on sphinx-contrib-napoleon now that sphinx is at version >= 1.3
  - Tighten versioned dependencies
  - Update to latest python policy


author: John Dennis <jdennis@redhat.com> - 2.0.1-8
changelog:
  - add missing Obsoletes for prior python-oauthlib package,
    replaced by python2-oauthlib
    Resolves: rhbz#1401784


author: Sandro Mani <manisandro@gmail.com> - 0.44-0.2.gitbc9d196
changelog:
  - Use %py_build and %py_install macros
  - Use %summary, %url to reduce duplicate text
  - Add %check
  - Move BR to subpackages


author: Neal Gompa <ngompa13{%}gmail{*}com> - 0.10.0-1
changelog:
  - Upgrade to version 0.10.0
  - Refactor to meet current Fedora guidelines
  - Add Python 3 subpackage (with EPEL 7 compatibility)


author: Neal Gompa <ngompa13{%}gmail{*}com> - 0.10.0-3
changelog:
  - Fix builds by defining python3_pkgversion if it doesn't exist
  - Add missing BRs for py3-other variant (for EPEL 7)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.1-9
changelog:
  - Python 2 binary package renamed to python2-pluggy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Luke Macken <lmacken@redhat.com> - 2.0.0-1
changelog:
  - The pep8 project has been renamed to pycodestyle
  - Create python2 subpackage
  - Update the source url to use pypi.io
  - Build a man page instead of html docs


author: Luke Macken <lmacken@redhat.com> - 2.0.0-2
changelog:
  - Use the new python setup/build/install macros
  - Remove Obsoletes/Provides for pep8, since it is currently not a drop-in replacement.
    https://bugzilla.redhat.com/show_bug.cgi?id=1342839#c10


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.0-3
changelog:
  - Python 2 binary package renamed to python2-pyeclib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.12-4
changelog:
  - Python 2 binary package renamed to python2-pyghmi
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Antoni S. Puimedon <antonisp@celebdor.com> 0.4.13-1
changelog:
  - upgrade to 0.4.13
  - ipset hash:mac support
  - ipset: hash:mac support
  - ipset: list:set support
  - ifinfmsg: allow absolute/relative paths in the net_ns_fd NLA
  - ipdb: #322 -- IPv6 updates on interfaces in DOWN state
  - rtnl: #284 -- support vlan_flags
  - ipdb: #307 -- fix IPv6 routes management
  - ipdb: #311 -- vlan interfaces address loading
  - iprsocket: #305 -- support NETLINK_LISTEN_ALL_NSID


author: Haïkel Guémar <hguemar@fedoraproject.org> - 0.4.15-1
changelog:
  - Upstream 0.4.15
  - req: #365 -- full and short nla notation fixed, critical
  - iproute: #364 -- new method, brport()
  - ipdb: -- support bridge port options


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.1.1-5
changelog:
  - Python 2 binary package renamed to python2-pyserial
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.2.2-1
changelog:
  - Update to 3.2.2.
  - Move BRs to their respective subpackages.
  - Enable the platform-python subpackage only on F27+.


author: Björn Esser <besser82@fedoraproject.org> - 0.16.1-4
changelog:
  - Discard results of testsuite on %{arm} for now
    Segfaults on non-aligned memory test (expected for arm)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-5
changelog:
  - Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  - Move docs to their proper place


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-6
changelog:
  - Add the platform-python subpackage
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-7
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Miro Hrončok <mhroncok@redhat.com> - 37.0.0-1
changelog:
  - Update to 37.0.0 (fixes #1474126)
  - Removed not needed pip3 patch (upstream included different version of fix)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.6-9
changelog:
  - Python 2 binary package renamed to python2-subprocess32
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marcel Plch <mplch@redhat.com> - 3.2.6-14
changelog:
  - Backport upstream patch for heap overflow when parsing too many arguments
  - Resolves: rhbz#1619386


author: Jerry James <loganjerry@gmail.com> - 1.2.0-7
changelog:
  - Fix -python3 dependency on /usr/bin/python (bz 1342508)
  - Comply with latest python packaging guidelines
  - Drop workaround for bz 1251568, now fixed


author: Scott Talbert <swt@techie.net> - 0.7-0.1.94664dd
changelog:
  - Switched to Jurko fork of suds
  - Modernize python packaging, build python3 package
  - Fixed bogus changelog dates


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.0.20-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5
  - Remove check phases as tests arent run at all


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.0.20-10
changelog:
  - Python 2 binary package renamed to python2-testrepository
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-7
changelog:
  - Python 2 binary package renamed to python2-testscenarios
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Javier Peña <jpena@redhat.com> - 0.6.0-3
changelog:
  - Fix shebang for certain test scripts in python3 subpackage, so python2 is not included (bz#1390505)
  - Invert test execution, so python3 tests are executed
  - Use pypi.io for Source0 URL


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1-6
changelog:
  - Python 2 binary package renamed to python2-trollius
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 15.1.0-1
changelog:
  - Update to 15.1.0 (RHBZ#1187921,RHBZ#1192707)
  - Require python-service-identity (RHBZ#1119067)
  - Obsolete python-twisted-core-doc (RHBZ#1187025)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 16.1.1-3
changelog:
  - Drop tkinter dependency (only required for tkconch)
  - Use python3 conditionals
  - Move BR under the proper subpackage


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.7.3-1
changelog:
  - Update to 1.7.3 (#1466976).
  - Provide python2-webob.
  - Use the license macro to mark the license file.
  - Remove commented code.
  - Remove an empty docs file.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11.10-7
changelog:
  - Python 2 binary package renamed to python2-werkzeug
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Julien Enseme <jujens@jujens.eu> - 0.6.2-5
changelog:
  - Fix tests in mock
  - Use %py2_build, %py3build, %py2_install and %py2_install
  - Make a python2 subpackage


author: kgronlund@suse.com
changelog:
  - Release 1.0.5
  - Surpress warning messages when needed (bsc#1146748)
  - Fix assert_ DeprecationWarning


author: kgronlund@suse.com
changelog:
  - Release 1.0.6
  - Replace preexec_fn as start_new_session
  - No need to mask signals for subprocess call


author: XLiang@suse.com
changelog:
  - Add ssh_key option used by -i option of ssh and scp(bsc#1169581)
    Add patch 0001-Add-ssh_key-option-used-by-i-option-of-ssh-scp.patch


author: XLiang@suse.com
changelog:
  - Change format of scp command for ipv6 compatible(bsc#1174894)
    Add patch 0002-Change-format-of-scp-command-for-ipv6-compatible.patch


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Lumír Balhar <lbalhar@redhat.com> - 1.24.2-3
changelog:
  - Enable TLS 1.3 post-handshake authentication
  - Adjust RECENT_DATE variable according to rules
  Resolves: rhbz#1726743


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-18
changelog:
  - SAPInstance: add reload-action
  - LVM-activate: support LVs from same VG
  - Remove grpc from bundle

    Resolves: rhbz#1642069
    Resolves: rhbz#1667413
    Resolves: rhbz#1683629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-20
changelog:
  - IPsrcaddr: add proto and table parameters
  - iSCSILogicalUnit: only create iqn when it doesnt exist

    Resolves: rhbz#1504055
    Resolves: rhbz#1598969


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-22
changelog:
  - IPsrcaddr: make proto optional to fix regression when used without
    NetworkManager

    Resolves: rhbz#1504055


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-23
changelog:
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1697558


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
  - Add popt-based options --setcaps and --restore (#1550745)
  - Improve hardlink handling in disk space calculation (#1491786)
  - Remove perl dependencies that are provided in the same file (#1570181)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: <kwenning@redhat.com> - 1.3.1-3
changelog:
  - mention timeout caveat with SBD_DELAY_START
    in configuration template
  - make systemd wait for sbd-start to finish
    before starting pacemaker or dlm

    Resolves: rhbz#1525981


author: <kwenning@redhat.com> - 1.3.1-7
changelog:
  - reenable sbd on upgrade so that additional
    links to make pacemaker properly depend on
    sbd are created

    Resolves: rhbz#1525981


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-2
changelog:
  - rebuild against pacemaker 1.20 to make sbd actually use
    the new libpengine API

    Resolves: rhbz#1661233


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-3
changelog:
  - finalize cmap connection if disconnected from cluster
  - make handling of cib-connection loss more robust

    Resolves: rhbz#1691484


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246
changelog:
  - Allow ngaios to use chown capability
  Resolves: rhbz#1653309
  - Dontaudit gpg_domain to create netlink_audit sockets
  Resolves: rhbz#1535109
  - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
  Resolves: rhbz#1558836
  - Update domain_can_mmap_files() boolean to allow also mmap lnk files


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247
changelog:
  - Fix typo in gpg SELinux module
  - Update gpg policy to make ti working with confined users
  Resolves: rhbz#1535109
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  Resolves: rhbz#1653309
  - Allow nrpe_t domain to be dbus cliennt
  Resolves: rhbz#1653309
  - Add interface sssd_signull()
  Resolves: rhbz#1653309
  - Update userdomains to allow confined users to create gpg keys
  Resolves: rhbz#1535109


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2036697
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054882
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055547
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz1873185
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2042966


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: bz2055002
  - [sapnw] Fix IndexError exception
    Resolves: bz1992938
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: bz1726023
  - [Ceph] Add support for containerized Ceph setup
    Resolves: bz1882544
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: bz2018228
  - [discovery] Add new discovery plugin
    Resolves: bz2018549
  - [vdsm] Exclude /var/lib/vdsm/storage/transient_disks
    Resolves: bz2029154


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095263
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079485
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2062908
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2065805
  - crio: switch from parsing output in table format to json
    Resolves: bz2092969
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079187
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079484
  - [utilities] Close file only when storing to file
    Resolves: bz2079486
  - [presets] Adjust OCP preset options, more OCP backports
    Resolves: bz2058279


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-3
changelog:
  - [vdsm] Set LVM option use_devicesfile=0
    Resolves: bz2093993
  - [Plugin] Make forbidden path checks more efficient
    Resolves: bz2099598


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-1
changelog:
  - Rebase on upstream 4.4
    Resolves: bz2082614
  - [redhat] Honour credential-less --upload-url on RedHat distro properly
    Resolves: bz2059572
  - [sos] Fix unhandled exception when concurrently removing temp dir
    Resolves: bz2088439
  - [specfile] drop python3-libxml2 dependency
    Resolves: bz2125486
  - [md] Restrict data capture to raid members
    Resolves: bz2125485
  - [cleaner] Use compiled regex lists for parsers by default
    Resolves: bz2043233
  - [cgroups] not collect memory.kmem.slabinfo
    Resolves: bz1995120
  - [report] Fix loop devices data gathering
    Resolves: bz2010735
  - [insights] Collect /var/lib/insights
    Resolves: bz2103233
  - [candlepin] collect information about SCA
    Resolves: bz2060925
  - [manpages] Clarify --upload-directory applicable to FTP protocol only
    Resolves: bz2063259
  - [cleaner] Dont obfuscate tmpdir path of local private_map
    Resolves: bz2064815
  - [fibrechannel] collect Cisco fnic statistics
    Resolves: bz2074715
  - [pulpcore] Collect db_tables_sizes
    Resolves: bz2081433
  - [fibrechannel]: Update fibrechannel plugin to collect HBA logs
    Resolves: bz2089591
  - [arcconf]: Update arcconf plugin to collect UART logs
    Resolves: bz2090283
  - [pulpcore] Stop collecting commands relevant to old taskig system
    Resolves: bz2093191
  - [dnf,yum] Merge plugins into dnf, remove yum plugin
    Resolves: bz2100154
  - [policies] Simplify flow in _container_init()
    Resolves: bz2100480
  - [pacemaker] Update collect cluster profile for pacemaker
    Resolves: bz2065821


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-2
changelog:
  - [utilities] Relax from hard dependency of python3-magic
    Resolves: bz2129038
  - [dnf] Collect legacy yum config symlinks, properly obfuscate pwds
    Resolves: bz2100154


author: Jeremy White <jwhite@codeweavers.com> 0.1.2-2
changelog:
  - Revise the .spec file to use %{name}, and remove a few uneeded statements
  - No longer install apache.conf, just put a sample under doc/
  - Switch to an alternate download location, more easily updated


author: Jeremy White <jwhite@codeweavers.com> 0.1.3-1
changelog:
  - Correct spice_auto.html for a missing include for the spice array buffer.
  - Provide limited compatibility for IE10.
  - Amos Benari: added on succeess event and added sendCtrlAltDel method.


author: Jeremy White <jwhite@codeweavers.com> 0.1.4-1
changelog:
  - Reduce memory leaks
  - Ack every message.
  - Aric Stewart: Fix and implement cache handling
  - Jordan Pittier: Fix default websocket port detection in spice_auto.html
  - Alon Levy: remove default password
  - Thomas Goirand - Adds missing mapping of the alphanumeric minus key


author: Jeremy White <jwhite@codeweavers.com> 0.1.5-1
changelog:
  - If an agent is attached, enable dynamic resizing of the guest screen.
  - Add support for audio streams using the Opus encoding.
  - Vladik Romanovsky: Use wss scheme when accessing with https protocol


author: Jeremy White <jwhite@codeweavers.com> 0.1.6-1
changelog:
  - Pavel Grunt: Implement file transfer from client to guest
  - Pavel Grunt: Report agent capabilities, handle agent tokens
  - Pavel Grunt: Use WheelEvent instead of MouseWheelEvent
  - Frantisek Kobzik: Improve error messages
  - Report a modern number of tokens


author: Jeremy White <jwhite@codeweavers.com> 0.1.7-1
changelog:
  - Jeremy White: Add support for vp8 video streams
  - Jeremy White: Support sized data streams and stream data reports
  - Jeremy White: Add minor debug tools for media playback
  - Jeremy White: Enable file transfer for spice_auto.html
  - Oliver Gutierrez: avoid an unwanted exception when used by cockpit plugin
  - Martin Hradil: Make spice_auto.html respect an input path
  - Pavel Grunt: Minor Coverity adjustments
  - Pavel Grunt: Improve log messages


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
  - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
    sites
  - Resolves: #1717430 - Excessive memory usage when running out of descriptors
  - Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
  - Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
    in cachemgr.cgi
  - Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15.1
changelog:
  - Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  - Resolves: #1829772 - CVE-2019-12525 squid: parsing of header
    Proxy-Authentication leads to memory corruption


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Kevin Fenzi <kevin@scrye.com> 3.1.3-1
changelog:
  - Update to 3.1.3
  - Move socket to /var/run/supervisor. Fixes bug #1247877
  - Clean up old spec cruft. Possibly fixes bug #1094933


author: Kevin Fenzi <kevin@scrye.com> - 3.1.4-1
changelog:
  - Update to 3.1.4.
  - Fix CVE-2017-11610 supervisor: Command injection via malicious XML-RPC request - Fixes bug #1476143
  - Fix systemd unit file up. Fixes bug #1475938


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 4.2.0-1
changelog:
  - Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13@gmail.com>
  - Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Santín <tsao@gpul.org>


author: Jerry James <loganjerry@gmail.com> - 0.7.5-1
changelog:
  - Update to 0.7.5 (bz 1066951)
  - Binaries now default to using python3
  - Use py3dir macro to simplify python3 build
  - Add BRs for more comprehensive testing
  - Workaround bz 1075826
  - Add -test patch to fix Unicode problem in the tests


author: Jerry James <loganjerry@gmail.com> - 0.7.5-3
changelog:
  - Install both isympy and python3-isympy to comply with packaging standards
  - Add -is-tangent patch (bz 1135677)
  - Temporarily disable tests that fail due to mpmath bugs (bz 1127796)
  - Fix license handling
  - Add python3-six BR and R; see bz 1140413 for details


author: Jerry James <loganjerry@gmail.com> - 0.7.6-1
changelog:
  - Update to 0.7.6
  - Drop upstreamed -test and -is-tangent patches
  - Drop obsolete bug workarounds
  - Add python(3)-fastcache BR and R
  - Recommend python-theano
  - Fix executable bits on tm_sympy


author: Mark de Does <mark@mdedoes.com> 2.12-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Solid shading of paragraphs and table cells.
  - Colored table cell borders, Text colors.


author: Mark de Does <mark@mdedoes.com> 2.13-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Options for making much more compact PostScript when a document 
  is printed.
  - Support for smallcaps.
  - Upgraded the pdfmarks to a version that more recent versions of 
  acroread support.


author: Mark de Does <mark@mdedoes.com> 2.14-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Table Headers
  - Tabs in page headers/footers compatible with MS-Word 2000


author: Mark de Does <mark@mdedoes.com> 2.16-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Fonts can be embedded in the printout to print on any printer.
  - Version 2.15 was skipped.


author: Mark de Does <mark@mdedoes.com> 2.17-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Numbered lists finished.
  - Yet more footnote bugs fixed.
  - Behaviour of explicit line and page breaks simulates that of MS-Word.
  - Made a configurable resources mechanism that works without X11 
  for command line calls.
  - Improvements in numbered lists functionality: Opened user interface.
  - Preliminary support for 'shapes': The newer Word figures mechanism. 
  The Word 97 Drawing Objects are mapped to 'shapes'.


author: Mark de Does <mark@mdedoes.com> 2.20-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Vertical alignment of table cells.
  - Multi column layout (of sections).
  - Text background and text borders
  - Table of Contents
  - Unicode compliant (So most scripts and fonts are now supported)
  - Use fontconfig: Removed restrictions on the collection of fonts that 
  Ted can use; Use Freetype/Xft for anti aliassed text rendering
  - Can now render nested tabes. (They are not yet supprted in the user 
  interface)
  - Versions 2.18 and 2.19 were skipped.


author: Mark de Does <mark@mdedoes.com> 2.21-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Many improvements in the rendering of embedded images.
  - Removed functionality that is not directly related to word processing 
  and document formatting. (Email, Fax)
  - Added GUI functionality that I forgot while moving to GTK.
  - Can now embed fonts from a true type collection in the printout
  - Moved more ad-hoc dialogs to the format tool as a preparation for a 
  better UI


author: Mark de Does <mark@mdedoes.com> 2.22-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Thorough brush-up of the internals.
  - Undu/Redo/Recovery
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.


author: Mark de Does <mark@mdedoes.com> 2.23-1
changelog:
  - New upstream release.
  See http://ftp.nluug.nl/pub/editors/ted/announce.html
  - Stability fixes.
  - Many-many annoying bugs fixed.
  - Some steps to support the few missing features such as absolutely 
  positioned objects and shapes.
  - Preparations for bidirectional text support
  - Comply with LSB directory layout.
  - Conformant deb and rpm packages


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
  - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  - Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  - Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
  - Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
  - Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-12
changelog:
  - Resolves: rhbz#1367492 harden package permissions
  - Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
  - Resolves: rhbz#1629162 tomcat-dbcp.jar is missing from tomcat package
  - Resolves: rhbz#1822453 Tomcat parses a request having an absolute URI path incorrectly and returns 404 Not Found
  - Resolves: rhbz#1795645 connection leak with StatementCache, SlowQueryReport or StatementDecoratorInterceptor
  - Resolves: CVE-2019-17563 tomcat: session fixation when using FORM authentication


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-14
changelog:
  - Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127
  - Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-15
changelog:
  - Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS


author: Hui Wang <huwang@redhat.com> 0:7.0.76-16
changelog:
  - Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1643654
    - disable KSM only once, re-enable it only on full rollback
      resolves: rhbz#1622239
    - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
      resolves: rhbz#1649408
    - updated virtual-host profile
      resolves: rhbz#1569375
    - added log message for unsupported parameters in plugin_net
      resolves: rhbz#1533852
    - added range feature for cpu exclusion
      resolves: rhbz#1533908
    - make a copy of devices when verifying tuning
      resolves: rhbz#1592743
    - fixed disk plugin/plugout problem
      resolves: rhbz#1595156
    - fixed unit configuration reading
      resolves: rhbz#1613379
    - reload profile configuration on SIGHUP
      resolves: rhbz#1631744
    - use built-in functionality to apply system sysctl
      resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1643654
    - used dmidecode only on x86 architectures
      resolves: rhbz#1688371
    - recommend: fixed to work without tuned daemon running
      resolves: rhbz#1687397


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Martin Osvald <mosvald@redhat.com> - 1.6.6-2
changelog:
  - Do not search for DNSSEC info when domain-insecure is set
    for stub zone (#1678550)
  - Remove KSK-2010 from configuration files - it has been revoked (#1665503)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.6.6-4
changelog:
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2-1
changelog:
  - rename the license now that we have proper git
  - prefix httpd-exported directory with an underscore (thanks to Joe Orton)
  - add "Require all granted" (thanks to Remi Collet)
  - alias /usr/share/javascript explictly


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 5-1
changelog:
  - switch to dot-prefixed Aliases
  - order Aliases for compatibility with older Apache releases
  - enable webfonts
  - enable symlinks in %{_webassetdir} and %{_jsdir}
  - re-enable httpd subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 001.001-2
changelog:
  - unzip manually to avoid leaving stray directories
  - split off shadow fontface into subpackage
  - mark fontconfig files as sans-serif


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3.8-4
changelog:
  - Fix pom filenames (Resolves rhbz#655829)
  - Changes according to new guidelines (versionless jars)
  - Fix few packaging problems (post/postun deps)


author: Kalev Lember <kalev@smartlink.ee> - 2.2.3-8
changelog:
  - Require fully versioned main package for -devel subpackage
  - Don't build static library
  - Removed library Requires which are automatically picked up by rpm
  - Removed spurious BR autoconf automake libtool
  - Build -doc subpackage as noarch
  - Install documentation with %doc macro
  - Use %{_prefix} instead of hardcoding /usr
  - Use parallel make
  - Various other spec file clean ups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.2.4-2
changelog:
  - revive xqilla from deprecated
  - add man page from debian for xqilla command-line tool
  - do not install bundled xqc.h and Requires: xqc


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-159
changelog:
  - Retry on gpgkey timeout from MirrorManager
  - Resolves: bug#1520454
  - docs: baseurl: clarify multiple URLs
  - Resolves: bug#1509831
  - updateinfo: preload pkgSack
  - Resolves: bug#1528608
  - update(): honor multilib_policy for obsoletes
  - Resolves: bug#1477574
  - Print a disk usage summary on "yum clean all" and clarify docs
  - Resolves: bug#1481220
  - depsolve: filter out conflicting provider
  - Resolves: bug#1480065
  - Change 'size' option to 'maxsize' in yum.logrotate
  - Resolves: bug#1506890


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-162
changelog:
  - downloadonly: unlink .tmp files on ctrl-c
  - Resolves: bug#1410234
  - Fix calculation of uncleaned disk space after "yum clean all"
  - Resolves: bug#1645173
  - Speed up depsolving in Anaconda for large transactions
  - Resolves: bug#1600383


author: CentOS Sources <bugs@centos.org> - 3.4.3-163.el7.centos
changelog:
  - CentOS yum config
  -  use the CentOS bug tracker url
  -  retain installonly limit of 5
  -  ensure distrover is always from centos-release
  - Make yum require yum-plugin-fastestmirror


author: Nan xiongchao <nanxiongchao@loongson.cn> - 3.4.3-163.2.loongnix
changelog:
  - fix loongnix-branding-yum
  - loongnix yum config
  -  use the loongnix bug tracker url
  -  ensure distrover is always from loongnix-release
  -  use installonlypkgs to make sure muti kernel instation


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


