# changelog

author: Philip Prindeville <philipp@fedoraproject.org> - 1.6.4-0
changelog:
  - Version bump to 1.6.4 per bz #1158667 (okay, that bug was for 1.6.3)
  - Remove geoipupdate as it will be moving into its own package


author: Paul Howarth <paul@city-fan.org> - 1.6.4-2
changelog:
  - Only require geoipupdate prior to F-22, for back-compatibility
  - Use %license where possible
  - GeoIP-devel provides geoip-devel as well as obsoleting it
  - Update bundled databases


author: Paul Howarth <paul@city-fan.org> - 1.6.4-3
changelog:
  - Sub-package the data; going forward, this would be better as a separate
    package, since it has separate upstream releases than the library


author: Paul Howarth <paul@city-fan.org> - 1.6.4-4
changelog:
  - Databases now unbundled to the GeoIP-GeoLite-data package
  - Drop long-unused perl helper scripts
  - Add explicit pkgconfig dependency for EL-5 build
  - Drop timestamp hack for configure, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.6.5-1
changelog:
  - Update to 1.6.5
    - Fixed a segmentation fault in geoiplookup when the utility was passed an
      invalid database (#1180874)
    - Additional validation was added for the size used in the creation of the
      index cache (#832913)
    - Changed the code to only look up country codes by using functions that
      ensure that we do not try to look past the end of an array (GitHub #53)


author: Chris Lumens <clumens@redhat.com> 3.23-4
changelog:
  - Change license to GPLv2 only.
  - minor cleanups for merge review (Todd Zullinger <tmz@pobox.com>):
    - rpmlint warnings fixed:
      - buildprereq and prereq use
      - quoted macros in %changelog
      - summary-ended-with-dot
    - create vcsa user and floppy group according to packaging guidelines
      (Packaging/UsersAndGroups)
    - note that we are upstream for MAKEDEV above the source tag
    - bring BuildRoot tag in line with the packaging guidelines
    - remove grep and mktemp from Require


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Null-upmerge the fix of bug#37165: This spec file is not affected.
  - Replace "/var/lib/mysql" by the spec file variable "/var/lib/mysql".


author: Jonathan Perkin <jonathan.perkin@oracle.com>
changelog:
  - Add support for Oracle Linux 6 and Red Hat Enterprise Linux 6.  Due to
    changes in RPM behaviour ($RPM_BUILD_ROOT is removed prior to install)
    this necessitated a move of the libmygcc.a installation to the install
    phase, which is probably where it belonged in the first place.


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Let the RPM capabilities ("obsoletes" etc) ensure that an upgrade may replace
    the RPMs of any configuration (of the current or the preceding release series)
    by the new ones. This is done by not using the implicitly generated capabilities
    (which include the configuration name) and relying on more generic ones which
    just list the function ("server", "client", ...).
    The implicit generation cannot be prevented, so all these capabilities must be
    explicitly listed in "Obsoletes:"


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Fix duplicate mentioning of "mysql_plugin" and its manual page,
    it is better to keep alphabetic order in the files list (merging!).


author: Joerg Bruehe <joerg.bruehe@oracle.com>
changelog:
  - Add a macro "runselftest":
    if set to 1 (default), the test suite will be run during the RPM build;
    this can be oveeridden via the command line by adding
        --define "runselftest 0"
    Failures of the test suite will NOT make the RPM build fail!


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-7
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-10
changelog:
  - removed OpenIPMI-gui subpackage, because TCL is compile without
    multithreading support and the gui relies on it (#588332)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Joe Orton <jorton@redhat.com> - 1.3.9-4
changelog:
  - add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
  - add fix for CVE-2011-0419 (#703520)


author: Ed Hein <eduard_hein@mcafee.com> 6.1-9
changelog:
  - new upstream release 6.1 build 9
    this release adds support for new intel platforms, but is missing support
    for legacy platforms, thus we have to support parallel installation of ASC 5
    and ASC 6


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.10-43
changelog:
  - 630019 set correct (f)pie build flags
  - 615104 fix double echo in initscript
  - 589099 Wrong file permissions for atd configuration
  - Resolves: rhbz#630019, rhbz#615104, rhbz#589099


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-47
changelog:
  - do not use perr() in running atd (#994201)
  - correct Requires/BuildRequires (#712079)
  - mention all options in the usage() (#784814)
  - do not leave zero-byte sized files when filesystem is full (#1166882)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.10-49
changelog:
  - correct the DST correction when using UTC time specification (#1320322)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages (#1226958)


author: Kamil Dudka <kdudka@redhat.com> 2.4.44-5
changelog:
  - encode NULs properly with getfattr --encoding=text (#651119)
  - return non-zero exit code on failure of getfattr (#665050)
  - document supported encodings of values (#674870)
  - update project URL in package specification (#702639)


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: Steve Grubb <sgrubb@redhat.com> 2.1-1
changelog:
  resolves: #688664 - Logging does not resume from SYSLOG on full disk action
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #584981 - ausearch/report performance improvement needed


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Tomas Mraz <tmraz@redhat.com> - 6.1.8-1
changelog:
  - add pam_systemd to the PAM configuration (#612712)
  - fix force smarcard setting read when Kerberos enabled (#620475)
  - fix duplication of dialogs when the revert is cancelled (#621632)
  - add --enable/disableforcelegacy option (#605857)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.9-1
changelog:
  - removed support for setting up pam_smb_auth authentication - long
    ago deprecated
  - added code for better synchronization of files with duplicate
    settings such as login.defs, libuser.conf and system-auth-ac (#565521)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.11-1
changelog:
  - do not restart services when configuration did not change
  - dissallow setting identity or authentication services with missing
    installed files (#590447)
  - eliminate unnecessary updates of PAM config files and sssd.conf (#639978)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-1
changelog:
  - give proper warnings on missing packages if configuration
    supported by SSSD (#663882)
  - do not delete mdns4_minimal from nsswitch.conf (#645295)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-5
changelog:
  - prevent the traceback also when std file descriptors are not
    tty, print out an error message instead of executing authconfig


author: Stepan Kasal <skasal@redhat.com> 2.62-4
changelog:
  - add a quick fix for #449944
  - remove Requires: mktemp, imake, grep; these are required by the generated
    configure, but not by Autoconf.
  - switch on make check


author: Ian Kent <ikent@redhat.com> - 5.0.5-112
changelog:
  - bz1124083 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - fix use after free in patch to handle duplicate in multi mounts.
    - change log messages to try and make them more sensible.
  - fix log entry for rev 5.0.5-111 below.
  - Related: rhbz#1124083


author: Ian Kent <ikent@redhat.com> - 5.0.5-113
changelog:
  - bz1201195 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1201195


author: Ian Kent <ikent@redhat.com> - 5.0.5-115
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - add dependent patch series.
    - add aditional bug fix patches, including updated error handling on ldap bind fail.
    - add reinit method and change lookup to use reinit instead of reopen for its shared
      libraries.
  - Resolves: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-116
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix mistake in the updated error handling on ldap bind fail patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-117
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix error handling on ldap bind fail patch again.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-118
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix unbind external mech.
    - fix sasl connection concurrancy problem.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-119
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - rework sasl connection concurrancy problem patch.
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-120
changelog:
  - bz1161031 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - bz1248798 - Request to add a configuration option to force use of the map entry
    hostname for mounts
    - add configuration option to use fqdn in mounts.
  - also update changelog with patches include from other bugs in rev 115 to support
    changes for bug 1243525.
    - fix left mount count return from umount_multi_triggers() (1227496).
    - fix return handling in sss lookup module (1227496).
    - move query dn calculation from do_bind() to do_connect() (1227496).
    - make do_connect() return a status (1227496).
    - make connect_to_server() return a status (1227496).
    - make find_dc_server() return a status (1227496).
    - make find_server() return a status (1227496).
    - fix return handling of do_reconnect() in ldap module (1227496).
    - fix race accessing qdn in get_query_dn() (1084254).
    - init qdn before use in get_query_dn() (1084254).
    - fix direct mount stale instance flag reset (1232074).
  - bz1263505 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - bz1238605 - On every system boot automount needs a restart to access NIS map
    - fix lsb service name in init script.
  - bz1097864 - Duplicate mounts created or leftovers in mtab
    - revert special case cifs escapes.
  - bz1203139 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - bz1222522 - Parent directory in nested mount gets unmounted while the child
    remains mounted
    - guard against incorrect umount return.
  - bz1233057 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initail empty map.
  - Resolves: rhbz#1161031 rhbz#1248798 rhbz#1227496 rhbz#1084254 rhbz#1232074
  - Resolves: rhbz#1263505 rhbz#1238605 rhbz#1097864 rhbz#1203139 rhbz#1222522
  - Resolves: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-121
changelog:
  - bz1243525 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - Some Coverity identified fixes for recent changes for this bug.
    - fix memory leak in nisplus lookup_reinit().
    - fix memory leak in ldap do_init().
    - fix use after free in sun parser parse_init().
    - fix use after free in open_lookup().
    - fix typo in autofs_sasl_bind().
  - Related: rhbz#1243525


author: Ian Kent <ikent@redhat.com> - 5.0.5-122
changelog:
  - bz1233057 - Direct map does not expire if map is initially empty
    - don't schedule new alarms after readmap.
  - Related: rhbz#1233057


author: Ian Kent <ikent@redhat.com> - 5.0.5-123
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - fix error handing in do_mount_indirect().
    - check negative cache much earlier.
    - log pipe read errors.
    - fix handle_mounts() termination condition check.
  - Resolves: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-124
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - wait for master map available at start.
    - add master read wait option.
  - Resolves: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-125
changelog:
  - bz703846 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-126
changelog:
  - bz1384404 - Automounter does not fetch maps from AD
    - work around sss startup delay.
    - add sss master map wait config option.
  - Resolves: rhbz#1384404


author: Ian Kent <ikent@redhat.com> - 5.0.5-127
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - fix included master map not found return.
    - dont exit on master map read fail timeout.
    - set sane default master read wait timeout.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-128
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - don't return until after master map retry read.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-129
changelog:
  - bz1350786 - On every system boot automount needs a restart to access
    NIS map
    - make lookup_nss_read_master() return nss status.
  - Related: rhbz#1350786


author: Ian Kent <ikent@redhat.com> - 5.0.5-130
changelog:
  - bz703846 - Incorrect autofs.schema
    - fix autofs.schema.new not copied to package.
  - Resolves: rhbz#703846


author: Ian Kent <ikent@redhat.com> - 5.0.5-131
changelog:
  - bz1396403 - Trying to access a non-existent directory using automount
                results in 4 minute hang with nfs-utils-1.2.3-73.el6
    - fix inconsistent signed usage for __rpc_ping().
    - check NFS server availability on local mount fallback
  - Resolves: rhbz#1396403


author: Ian Kent <ikent@redhat.com> - 5.0.5-132
changelog:
  - bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - make set_direct_mount_catatonic() more general.
    - set autofs mounts catatonic at exit
  - Related: rhbz#1277033


author: Ian Kent <ikent@redhat.com> - 5.0.5-133.el6_9
changelog:
  - bz1501922 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - only take master map mutex for master map update.
  -Resolves: rhbz#1501922


author: Ian Kent <ikent@redhat.com> - 5.0.5-133
changelog:
  - bz1496901 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - only take master map mutex for master map update.
  - Resolves: rhbz#1496901


author: Ian Kent <ikent@redhat.com> - 5.0.5-134
changelog:
  - bz1496901 - Autofs processes hung while waiting for the release of an
    entry master_lock that is held by another thread waiting on a bind mount
    - fix incorrect patch specification in spec file.
  - Related: rhbz#1496901


author: Ian Kent <ikent@redhat.com> - 5.0.5-135
changelog:
  - bz1463004 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1463004


author: Ian Kent <ikent@redhat.com> - 5.0.5-136
changelog:
  - bz1495442 - automount crashes due to segfault
    - fix create_client() RPC client handling
  - Resolves: rhbz#1495442


author: Ian Kent <ikent@redhat.com> - 5.0.5-137
changelog:
  - bz1463004 - Server availability probe broke tunneling nfs via localhost
    - update "add version parameter to rpc_ping()" patch to current updtream
      version which fixes 2 covarity warnings.
  - Resolves: rhbz#1463004


author: Ian Kent <ikent@redhat.com> - 5.0.5-138
changelog:
  - bz1559295 - autofs: can't mount nfs vers=2
    - fix NFS version mask usage.
  - Resolves: rhbz#1559295


author: Ian Kent <ikent@redhat.com> - 5.0.5-139
changelog:
  - bz1495442 - automount crashes due to segfault
    - fix fd leak in rpc_do_create_client().
  - Related: rhbz#1495442


author: Ian Kent <ikent@redhat.com> - 5.0.5-140
changelog:
  - bz1627004 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1627004


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Karsten Hopp <karsten@redhat.com> 1.11.1-1.1
changelog:
  - remove vala from buildrequires and from self checks
  - fix variable usage in spec file
  - use pregenerated manpages from automake-1.11


author: Pavel Raiskup <praiskup@redhat.com> - 1.11.1-3
changelog:
  - fix for CVE-2012-3386 -- 'make distcheck' was making the directory distdir
    world-readable (#848469)


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Ondrej Vasik <ovasik@redhat.com> 1.06-95-1
changelog:
  - update to upstream alpha 1.06.95 (in use in Gentoo, Slackware
    for quite a long time, marked stable there)
  - removed already applied patches, fix small memory leak
    (gentoo patch)
  - add missing BR for bison and texinfo


author: Tomas Hozza <thozza@redhat.com> - 32:9.8.2-0.43.rc1
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1227189)
  - Added the fixed tarball with configuration to Sources (Related: #1223359)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.47.rc1.4
changelog:
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.59.rc1
changelog:
  - Use /lib or /lib64 only if directory in chroot already exists
  - Tighten NSS library pattern, escape chroot mount path


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.67.rc1
changelog:
  - Change EDNS flags only after successful query (#1416035)
  - Fix crash in ldap driver at bind-sdb stop (#1426626)


author: Petr Menšík <pemensik@redhat.com> - 32:9.8.2-0.68.rc1.4
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Jeff Law <law@redhat.com> - 2.20.51.0.2-5.38
changelog:
  - Use thread-safe PLT stubs for Power. (#906079)
  - Avoid segfault when arch member uses long names, but no longname
    table exists.  (#909056)
  - Correct patch for 773526. (#922393)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.2-1
changelog:
  - version 0.6.2
  Resolves: rhbz#1003465,rhbz#1084225,rhbz#1133523,rhbz#1158564,rhbz#1207557,rhbz#1212449


author: Petr Machata <pmachata@redhat.com> - 1.41.0-9
changelog:
  - Use a .gz archive instead of bz2, because that's what's hosted now.
    Fill in the full URL.
  - Resolves: #571607


author: Petr Machata <pmachata@redhat.com> - 1.41.0-10
changelog:
  - Turn on OpenMPI support on non-s390 arches.  It was accidentally
    turned off everywhere.
  - Move cmake files to libdir to avoid multilib conflicts.
  - Also install Boost.cmake, which is included by BoostConfig.cmake
  - Change soname selection to work on RHELs.
  - Resolves: #586204
  - Resolves: #592516
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-11
changelog:
  - ... and revert the soname change, because that's not the smartest
    thing to do mid-release.
  - Resolves: #594146


author: Petr Machata <pmachata@redhat.com> - 1.41.0-16
changelog:
  - Fix a GCC warning for looser throw specifier in
    boost::exception_ptr::~exception_ptr.
    (boost-1.41.0-exception_ptr.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-21
changelog:
  - Fix building of Python module for Boost-MPI and ship it
    (boost-1.41.0-mpi-python.patch, __init__.py)


author: Jonathan Wakely <jwakely@redhat.com> - 1.41.0-22
changelog:
  - Fix shared_ptr to work with recent GCC and C++11.
    (boost-1.41.0-shared_ptr-deleted-copy.patch)
  - Resolves: #1108268


author: Petr Machata <pmachata@redhat.com> - 1.41.0-23
changelog:
  - Fix conformance problems in Boost.Interprocess, Boost.Intrusive and
    Boost.Graph
    (boost-1.41.0-graph-conformance.patch,
    boost-1.41.0-interprocess-conformance.patch,
    boost-1.41.0-interprocess-conformance-maxval.patch,
    boost-1.41.0-intrusive-conformance.patch)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-24
changelog:
  - Fix conformance problems in Boost.Numeric (uBLAS) and
    Boost.CircularBuffer (boost-1.41.0-numeric-conformance.patch,
    boost-1.41.0-circular_buffer-adl.patch)


author: Michal Schmidt <mschmidt@redhat.com> - 1.41.0-25
changelog:
  - mpich obsoleted mpich2. Build against mpich and rename subpackages
    accordingly. Obsolete mpich2 subpackages.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-26
changelog:
  - Change Requires: and other package references to use %{?_isa}, so
    that dependencies are arch-aware.


author: Petr Machata <pmachata@redhat.com> - 1.41.0-27
changelog:
  - Fix the way MPI_VERSION is compared with (>=2 rather than ==2) so
    that an arg-less boost::mpi::environment ctor is exposed for MPI
    libraries with MPI_VERSION of 3.
    (boost-1.41.0-mpi-NOARG_INIT.patch)
  - Fix boost::interprocess::move (boost-1.41.0-interprocess-move.patch)
  - Fix copy construction of boost::weak_ptr
    (boost-1.41.0-weak_ptr-copy.patch)
  - Undo the change of non-Requires: package references to not use
    %{?_isa} again.


author: Thomas Woerner <twoerner@redhat.com> - 1.2-10
changelog:
  - Added support for brctl show <bridge> (rhbz#690529)
  - Added multicast option documentation to man page (rhbz#676355)


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.19.4-4
changelog:
  - Fixed breakage with newer kernel headers
  - Excluded Sun-RPC dependednt features not available in newer static glibc


author: Petr Machata <pmachata@redhat.com> - 1.9.20050813-1
changelog:
  - Thomas Dickey's 20050813 version of byacc:
    - own build system (linux patch reverted)
    - use tmpfile (security patch reverted)
  - Tidy up the specfile per rpmlint comments


author: Matthias Saou <http://freshrpms.net/> 1.9.20050813-2
changelog:
  - Update summary.
  - Remove useless doc copying in install section.
  - Add NOTES and NO_WARRANTY docs.


author: Kai Engert <kaie@redhat.com> - 2014.1.98-65.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.20-65.1
changelog:
  - Update to CKBI 2.20 from NSS 3.34.1 with legacy modifications.
    In the original upstream release, Mozilla.org removed all trust for
    the code signing usage. As part of the default legacy configuration,
    this package retains code signing trust for all CAs that are still
    trusted for the server authentication usage.
    The ca-legacy disable configuration disables all code signing trust.


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-60.0
changelog:
  -Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -    # Certificate "Visa eCommerce Root"
  -    # Certificate "AC Raiz Certicamara S.A."
  -    # Certificate "TC TrustCenter Class 3 CA II"
  -    # Certificate "ComSign CA"
  -    # Certificate "S-TRUST Universal Root CA"
  -    # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -    # Certificate "Certplus Root CA G1"
  -    # Certificate "Certplus Root CA G2"
  -    # Certificate "OpenTrust Root CA G1"
  -    # Certificate "OpenTrust Root CA G2"
  -    # Certificate "OpenTrust Root CA G3"
  -   Adding:
  -    # Certificate "GlobalSign Root CA - R6"
  -    # Certificate "OISTE WISeKey Global Root GC CA"
  -    # Certificate "GTS Root R1"
  -    # Certificate "GTS Root R2"
  -    # Certificate "GTS Root R3"
  -    # Certificate "GTS Root R4"
  -    # Certificate "UCA Global G2 Root"
  -    # Certificate "UCA Extended Validation Root"
  -    # Certificate "Certigna Root CA"
  -    # Certificate "emSign Root CA - G1"
  -    # Certificate "emSign ECC Root CA - G3"
  -    # Certificate "emSign Root CA - C1"
  -    # Certificate "emSign ECC Root CA - C3"
  -    # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-65.1
changelog:
  - Remove expired 1024 bit roots
  -    Removing:
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure CA"
  -     # Certificate "ValiCert Class 1 VA"
  -     # Certificate "ValiCert Class 2 VA"
  -     # Certificate "RSA Root Certificate 1"
  -     # Certificate "Entrust.net Secure Server CA"
  -     # Certificate "NetLock Business (Class B) Root"
  -     # Certificate "NetLock Express (Class C) Root"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-60.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Latest update from NSA
  	* Update checkpolicy for user and role mapping support from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Latest update from NSA
  	* Properly escape regex symbols in the lexer from Stephen Smalley.
  	* Add bounds support from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Latest update from NSA
  	* Fix alias field in module format, caused by boundary format change
  	  from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number
  Resolves: #588260


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.49.4-1
changelog:
  - chkconfig: don't create symlinks if they already exist
  - chkconfig: resetpriorities should work on all runlevels
  - leveldb: fix segfault when selinux policy is not present
  - alternatives: always recreate symlinks when the alternative is updated


author: Jeff Layton <jlayton@redhat.com> 4.8.1-11
changelog:
  - add cifs.idmap, binaries and autoconf goop (bz 843617)
  - add getcifsacl and setcifsacl tools (bz 843612)
  - add more missing mount.cifs options to manpage (bz 843596)
  - enable PIE and RELRO (bz 838606)
  - mount.cifs: handle usernames differently for sec=krb5 (bz 826825)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-15
changelog:
  - fix several issues in cifs.idmap (bz 843617)
  - fix several issues in getcifsacl/setcifsacl (bz 843612)


author: Jeff Layton <jlayton@redhat.com> 4.8.1-16
changelog:
  - fix even more issues in cifs.idmap (bz 843617)
  - fix even more issues in getcifsacl/setcifsacl (bz 843612)
  - fixes for problems in setcifsacl found by coverity (bz 873683)


author: David Walluck <dwalluck@redhat.com> 0:1.0-13.1
changelog:
  - add %{_javadir}/jaf.jar as %ghost
  - add %{_javadir}/activation.jar as alternative
  - remove jaf-%{jafver}.jar link
  - own %{_libdir}/gcj/%{name}
  - add generic javadoc directories as alternatives


author: Dodji Seketeli <dodji@redhat.org> - 0.15-0.6.gitad322
changelog:
  - Remove the cloog.info that is in the tarball
    That forces the regeneration of a new cloog.info with
    suitable INFO_DIR_SECTION, so that install-info doesn't cry
    at install time.
  - Slightly changed the patch to make install-info actually
    install the cloog information in the info directory file.
  - Run install-info --delete in %preun, not in %postun,
    otherwise the info file is long gone with we try to
    run install-info --delete on it.


author: Dodji Seketeli <dodji@redhat.com> - 0.15-0.8.git1334c
changelog:
  - Update to new upstream git snapshot
  - Drop the cloog.info patch as now upstreamed
  - No need to add an argument to the --with-ppl
    configure switch anymore as new upstream fixed this


author: Dodji Seketeli <dodji@redhat.com> - 0.15.7-1
changelog:
  - Update to new upstream version (0.15.7)
  - Do not build from git snapshot anymore. Rather, got the tarball from
    ftp://gcc.gnu.org/pub/gcc/infrastructure/cloog-ppl-0.15.7.tar.gz
  - The upstream tarball is named cloog-ppl, not cloog. Adjusted thusly.
  - Use system libtool to disable standard rpath
  - Do not try to touch the info file if it's not present. Closes #515929.


author: Alan Pevec <apevec@redhat.com> 0.7.1-2
changelog:
  - define default user (Joe VLcek)
  - set distro to rhel in default config
  - adjust logger call for older util-linux


author: Steven Hardy <shardy@redhat.com> 0.7.2-1
changelog:
  - Update to 0.7.2
  - Added dependency on python-requests
  - Removed write-ssh-key-fingerprints patch (in upstream release)
  - Added boto >= 2.6.0 requirement


author: Juerg Haefliger <juergh@gmail.com> - 0.27-4
changelog:
  - Break out the growpart script into its own subpackage to prevent pulling a
    boatload of unnecessary dependencies into a cloud image.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-5
changelog:
  - Don't make gdisk a hard requirement for cloud-utils-growpart to save some
    space on systems that don't use GPT partitions.


author: Juerg Haefliger <juergh@gmail.com> - 0.27-8
changelog:
  - Make the package a no-noarch package on EPEL so that the build of the main
    package can be prevented for the arches that don't support it [bz#986809].


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 1.2-1
changelog:
  - initial import to rhel6
  - commented out lua-posix
  - the work horse file changed to 644 (as it do not work without lua-posix)
  - Resolves: rhbz#1391735


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Steven Dake <sdake@redhat.com> 1.2.3-13
changelog:
  - Resolves: rhbz#614219
  - Add upstream revision 2989 - Don't reset the token timer when a retransmitted
    token is received.  Only reset when a token is received.


author: Steven Dake <sdake@redhat.com> 1.2.3-15
changelog:
  - Resolves: rhbz#611676
  - Add upstream revision 3000 - ensure aborts happen even if the currently
    running sync engine doesn't have an abort operation.
  - Add upstream revision 2999 - reset internal variable in syncv2 on
    configuration change.


author: Angus Salkeld <asalkeld@redhat.com> 1.2.3-16
changelog:
  - Resolves: rhbz#579126
  - Add upstream revision 3004 - Fix merge error with revision 3001.
  - Add upstream revision 3003 - Fix problem where flow control could lock
    up ipc under very heavy load in very rare circumstances.


author: Steven Dake <sdake@redhat.com> 1.2.3-17
changelog:
  - Resolves: rhbz#618570
  - Add upstream revision 3006 - Remove consensus timeout floor check that leads
    to exit in two node clusters with smaller consensus timeouts.


author: Steven Dake <sdake@redhat.com> 1.2.3-18
changelog:
  - Resolves: rhbz#619565
  - Add upstream revision 3013 - dont cancel token retransmit timeout on receipt
    of a multicast message.


author: Steven Dake <sdake@redhat.com> 1.2.3-19
changelog:
  - Resolves: rhbz#623790
  - Add upstream revision 3023 - Properly detect server failure instead of falsely
    detecting during a configuration change.


author: Steven Dake <sdake@edhat.com> 1.2.3-21.1
changelog:
  - Resolves: rhbz#638592
  - merge upstream commit bab4945b57c150301c034085f3ce7b4187b6c864
  -  Works around problem where some switch hardware delays multicast
  -  packets compared to the unicast token.  This would result in messages
  -  being retransmitted when no retransmission was necessary.


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-15
changelog:
  - Resolves: rhbz#902397

  - totemip: Properly detect ipv6 address (rhbz#902397)
  - merge upstream commit d76759ec26ecaeb9cc01f49e9eb0749b61454d27 (rhbz#902397)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-16
changelog:
  - Resolves: rhbz#854216
  - Resolves: rhbz#877349
  - Resolves: rhbz#880598
  - Resolves: rhbz#881729
  - Resolves: rhbz#906432
  - Resolves: rhbz#907894
  - Resolves: rhbz#915490
  - Resolves: rhbz#915769
  - Resolves: rhbz#916227
  - Resolves: rhbz#922671
  - Resolves: rhbz#924261
  - Resolves: rhbz#947936
  - Resolves: rhbz#949491
  - Resolves: rhbz#959184
  - Resolves: rhbz#959189

  - If failed_to_recv is set, consensus can be empty (rhbz#854216)
  - merge upstream commit 81ff0e8c94589bb7139d89e573a75473cfc5d173 (rhbz#854216)
  - objdb: Don't read uninitialized memory in inc/dec (rhbz#880598)
  - merge upstream commit 0a11d261a361726703084897471608d9914e0548 (rhbz#880598)
  - log: Handle race in printf_to_logs and format_set (rhbz#881729)
  - merge upstream commit a282eeecb4899ec415f76442217836338edfbeec (rhbz#881729)
  - log: Avoid deadlock caused by previous commit (rhbz#881729)
  - merge upstream commit e69f322d52a967e19ac6cf4eba60c54fc64b1688 (rhbz#881729)
  - Handle colon in configuration file (rhbz#906432)
  - merge upstream commit c04af91ada3c4ca29643cad599ed5605f6bb10bd (rhbz#906432)
  - Handle unexpected closing brace in config file (rhbz#906432)
  - merge upstream commit 60a9f809c17d6cfe73c34263233dbf8e4677d6b5 (rhbz#906432)
  - Put handle to hdb in dispatch on unknown message (rhbz#922671)
  - merge upstream commit 5a4610628334b1e02f87b7e6a8946b59b65a1ec1 (rhbz#922671)
  - Properly check result of coroipcc_dispatch_put (rhbz#922671)
  - merge upstream commit dc31a079e8374329f0818f16e74b619f31aa835e (rhbz#922671)
  - Handle config file with service without name (rhbz#915769)
  - merge upstream commit 6b719961b36b3b780f2c9ff148aa2273872f8788 (rhbz#915769)
  - Move corosync exit semaphore initialization (rhbz#916227)
  - merge upstream commit b6aaa6e2af625467316e54e67a39c6327cf73cbc (rhbz#916227)
  - coroipcs: Ensure rb data are not overwritten (rhbz#922671)
  - merge upstream commit c7e686181bcd0e975b09725502bef02c7d0c338a (rhbz#922671)
  - Properly lock pending_semops (rhbz#922671)
  - merge upstream commit 4d050cfac3cd30ad60a58e8294298968ee9d89f9 (rhbz#922671)
  - cfg: When send_shutdown fails, clear shutdown_con (rhbz#924261)
  - merge upstream commit fd967b6db504b1fe6667da8ce8a141924e3914a9 (rhbz#924261)
  - cfgtool: Retry shutdown on CS_ERR_TRY_AGAIN (rhbz#924261)
  - merge upstream commit 3324d31819d359fae75d6f91a942fc84e3b9be23 (rhbz#924261)
  - totempg: Make iov_delv local variable (rhbz#907894)
  - merge upstream commit 3e3231375c29d562af050a48f18b301bf1cdca82 (rhbz#907894)
  - Fix race for sending_allowed (rhbz#907894)
  - merge upstream commit 94331b5e0226f985364ef0632fdf4d5f0d91d625 (rhbz#907894)
  - schedwrk: Set values before create callback (rhbz#907894)
  - merge upstream commit 7f00dcb548584911191f1e70483d4523c3ba1319 (rhbz#907894)
  - Remove exit thread and replace it by exit pipe (rhbz#907894)
  - merge upstream commit 9f8279a3f1853139e9bd472c23f905baf9298c32 (rhbz#907894)
  - totempg: Store and restore global variables (rhbz#907894)
  - merge upstream commit 5e6e1a000db8b066aff08b0649886e4ce07b843c (rhbz#907894)
  - Logsys: Ensure logging PID is really corosync (rhbz#915490)
  - merge upstream commit 830df013a853ffa7e9b49efb030ccc7920d2f683 (rhbz#915490)
  - fplay: Check minimum record size (rhbz#915490)
  - merge upstream commit ef63aae13945bd790e54181593561468426baca4 (rhbz#915490)
  - corosync-fplay: Check incorrect idx and cycle (rhbz#915490)
  - merge upstream commit d8761bae84c12285ef40426c0ad7f09f569c3d87 (rhbz#915490)
  - Improve handling of getpwnam_r() and getgrnam_r() (rhbz#947936)
  - merge upstream commit c3422128a45a2833103c8351e0adc84ba6c341be (rhbz#947936)
  - Detect big scheduling pauses (rhbz#949491)
  - merge upstream commit 7475db7102bf387cfcd16a65b0b0ace3e194bd4b (rhbz#949491)
  - Improve corosync-notifyd example (rhbz#877349)
  - merge upstream commit 614d897209c8d9d8b38bc583d0ce056a5d3445b6 (rhbz#877349)
  - Install sysconfig/corosync-notifyd in specfile (rhbz#877349)
  - merge upstream commit bc130cb10c4ec014829286ba61c0de544f82656d (rhbz#877349)
  - Free confdb message holder list on confdb exit (rhbz#959189)
  - merge upstream commit 013b4ba8ebdc089da76313d43b1454fe324d597b (rhbz#959189)
  - Handle SIGPIPE in req_setup_send (rhbz#959184)
  - merge upstream commit a9c4bbd9f10d9453730f71d8bd9a02ee8bcf2eed (rhbz#959184)
  - confdb: Make objdb_notify_dispatch preemptable (rhbz#959189)
  - merge upstream commit 0194e6455983947c9c496658b5d593c769e58bfe (rhbz#959189)
  - Lock sync_in_process variable (rhbz#907894)
  - merge upstream commit 460a495243b1ebb225e15c1757554ff625aca99e (rhbz#907894)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-17
changelog:
  - Resolves: rhbz#956739

  - Add timestamps to the Corosync black-box output (rhbz#956739)
  - merge upstream commit 3ede0352ea4a7ea71ebe16db59c0c7ad0a01f733 (rhbz#956739)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-18
changelog:
  - Resolves: rhbz#1001210
  - Resolves: rhbz#1011307
  - Resolves: rhbz#1018232
  - Resolves: rhbz#1025321
  - Resolves: rhbz#1067043

  - totemiba: Properly allocate RDMA buffers (rhbz#1001210)
  - merge upstream commit 795b04780ff6cd94b2e10aa1826a289f36119ce7 (rhbz#1001210)
  - totemiba: Del channel fd from poll before destroy (rhbz#1001210)
  - merge upstream commit 86fd9a14f6e74b711eb7e89cec72096bdcd1441b (rhbz#1001210)
  - totemiba: Fix parameters position for poll_add (rhbz#1001210)
  - merge upstream commit cba0f90af4af55702c1daa7afa03c8be10eaa5f3 (rhbz#1001210)
  - corosync to start in infiniband + redundant ring active/passive mode (rhbz#1001210)
  - merge upstream commit d0ca2ceb980242dd8c28b57f449eeeac1eb54176 (rhbz#1001210)
  - totemiba: Check if configured MTU is allowed by HW (rhbz#1001210)
  - merge upstream commit 3403fe06e8a915632679c48ccccb2662521746f2 (rhbz#1001210)
  - logsys: Handle full /dev/shm correctly (rhbz#1011307)
  - merge upstream commit 095a114ab84074e16d384f3ccaadfecff80b54a2 (rhbz#1011307)
  - ipcs: Backport socket creds handling from libqb (rhbz#1018232)
  - merge upstream commit 7897e4ae3e1c1ff20a2f375a0a5dc102ab0e98e8 (rhbz#1018232)
  - ipcs: Set SO_PASSCRED also on listening socket (rhbz#1018232)
  - merge upstream commit f11e5bf61941fd6aca018bb2f15f2371c668974f (rhbz#1018232)
  - cpg: Avoid list corruption (rhbz#1025321)
  - merge upstream commit 3c11ea7b84c109e6f8451229437351c5a14c7168 (rhbz#1025321)
  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067043)
  - merge upstream commit e9d9c4be7293c04ca97bfd84f95b76a22690a92a (rhbz#1067043)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067043)
  - merge upstream commit 0b825f22f2b95beca1aeb614d22a7e74a84c66b5 (rhbz#1067043)
  - cpg: Make sure left nodes are really removed (rhbz#1067043)
  - merge upstream commit b55f32fe2e1538db33a1ec584b67744c724328c6 (rhbz#1067043)
  - totemiba: Add multicast recovery (rhbz#1001210)
  - merge upstream commit 0ea20a3d545c4bf1a02306dd2152eb497a03b7d0 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.1-19
changelog:
  - Related: rhbz#1001210

  - totemiba: Fix incorrect failed log message (rhbz#1001210)
  - merge upstream commit 4130d7448dcea024820d20e3c474c54e14ec9cb5 (rhbz#1001210)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-2
changelog:
  - Resolves: rhbz#1136431
  - Resolves: rhbz#1141367
  - Resolves: rhbz#1163846
  - Resolves: rhbz#742999

  - Adjust MTU for IPv6 correctly (rhbz#1136431)
  - merge upstream commit 6fc58377d9f3201a74afedbb53311ff95fde700b (rhbz#1136431)
  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#742999)
  - merge upstream commit df4d4da6e204a9f151a764c868bf7c99c97186f5 (rhbz#742999)
  - config: Process broadcast option consistently (rhbz#742999)
  - merge upstream commit 90d458532b59a15ae8e936f43e8bf1f8f3a32ac7 (rhbz#742999)
  - config: Ensure mcast address/port differs for rrp (rhbz#742999)
  - merge upstream commit 6f74374d3ff23735cf5e1d5e01e56d6cd866085c (rhbz#742999)
  - totem: Inform RRP about membership changes (rhbz#1163846)
  - merge upstream commit f35ffb168f8ee3eac4660309088372df4cb215f2 (rhbz#1163846)
  - totemnet: Add totemnet_member_set_active (rhbz#1163846)
  - merge upstream commit 3dafc4c508e4928d459719958918052ce49fd223 (rhbz#1163846)
  - totemrrp: Implement *_membership_changed (rhbz#1163846)
  - merge upstream commit 3dcdfeaddbe054fad63d3a3cb046dd018e118e69 (rhbz#1163846)
  - totemudpu: Implement member_set_active (rhbz#1163846)
  - merge upstream commit bd02ac319af40e4c484c6e4cdb8e049db8813541 (rhbz#1163846)
  - totemudpu: Send msgs to all members occasionally (rhbz#1163846)
  - merge upstream commit 0bd29025419204672e4d7857434019045bf7b456 (rhbz#1163846)
  - ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch (rhbz#1141367)
  - merge upstream commit 83bf77e6f42c2a8b01b1d079e8dc792d9cc7d35d (rhbz#1141367)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-3
changelog:
  - Resolves: rhbz#1200387
  - Resolves: rhbz#1278473
  - Resolves: rhbz#1278478
  - Resolves: rhbz#1278490

  - config: Fix 'then' for 'than' typos in messages and some comments. (rhbz#1278478)
  - merge upstream commit 1be4f7b899f91a8dc23ade10c539177f2b39d88e (rhbz#1278478)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1278478)
  - merge upstream commit 17e90526aaa702cc3079fe5089253590267418d4 (rhbz#1278478)
  - Reset timer_problem_decrementer on fault (rhbz#1278473)
  - merge upstream commit c5a5bedf6e086acb9f3bda374ac495670a5fcf25 (rhbz#1278473)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1278473)
  - merge upstream commit 49236f3a16a0980cdb605040f027722b116a8250 (rhbz#1278473)
  - objdb: Fix incorrect using lock (rhbz#1278473)
  - merge upstream commit 42c09a78d9ed2dc393e76308f4fce000535674e6 (rhbz#1278473)
  - totemip: Be more selective when matching bindnetaddr to IP addresses (rhbz#1278490)
  - merge upstream commit 8e90c68fc0a7d5bce035fe7939eb03fa5cf333a2 (rhbz#1278490)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#1200387)
  - merge upstream commit d3c51cd6e4c293a7222172ccec4b80d70b79f5d4 (rhbz#1200387)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-4
changelog:
  - Resolves: rhbz#1286759

  - Revert "ipcc: Fix ERR_LIBRARY error if finalise called inside dispatch" (rhbz#1286759)
  - merge upstream commit 67242e15c298abff4f93a7bfcd72372f7ba60270 (rhbz#1286759)
  - ipcc: Fix ERR_LIBRARY on finalize call in dispatch (rhbz#1286759)
  - merge upstream commit 514dd9784559feb237af498020bf74cb16091a9e (rhbz#1286759)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-5
changelog:
  - Resolves: rhbz#1305119

  - totempg: Fix memory leak (rhbz#1305119)
  - merge upstream commit 349613b2dce8219a5d08dad816cb4da9c12faf83 (rhbz#1305119)


author: Jan Friesse <jfriesse@redhat.com> 1.4.7-6
changelog:
  - Resolves: rhbz#1417907

  - corosync_ring_id_store: Use safer permissions (rhbz#1417907)
  - merge upstream commit 660e2b0854dd3aeb4c13b940063c1cd7216abd84 (rhbz#1417907)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-7
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#571843)
  - comment patches


author: Patrice Dumas <pertusus@free.fr> 1.12.0-3
changelog:
  - add rightly files to -devel (#224106)
  - add necessary requires for -devel (#224106)
  - ship examples


author: Patrice Dumas <pertusus@free.fr> 1.12.0-4
changelog:
  - remove libdir reference to cppunit-config, should fix multiarch conflict
    (#340951)
  - fix encoding and remove windows related files in examples
  - keep timestamps


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 6.0.4-2.el6
changelog:
  - Fix s390x "vm -p" to properly handle swapped-out and unmapped
    user pages.
  - Fix s390x "bt -[tT]" on a live system.
    Resolves: rhbz#817247
    Resolves: rhbz#817248


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-4.el6
changelog:
  - Fixes for the handling of truncated/incomplete flat-format vmcores, which
    may cause the session to hang during initialization.
    Resolves: rhbz#1231976
  - Fix for the "timer" command, which may fail with the error message
    "timer: cannot allocate any more memory!" when run on a kernel with
    an extremely large number of cpus.
    Resolves: rhbz#1238403


author: Dave Anderson <anderson@redhat.com> - 7.1.0-5.el6
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1283000


author: James Antill <james.antill@redhat.com> - 0.9.9-15
changelog:
  - Tempfile ignores umask for files created in cache, use 666 not 777 as well.
  - Resolves: rhbz#833350


author: James Antill <james.antill@redhat.com> - 0.9.9-17
changelog:
  - Use .gz as the default compression for modifyrepo.
  - Document --compress-type in createrepo man page.
  - Resolves: rhbz#874682


author: James Antill <james.antill@redhat.com> - 0.9.9-18
changelog:
  - Option -C does nothing on empty repo.
  - Resolves: rhbz#877301
  - Fix the options documentation.
  - Resolves: rhbz#892657


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-19
changelog:
  - Options --checksum, --unique-md-filenames, --simple-md-filenames for modifyrepo.
  - Resolves: rhbz#952602


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-20
changelog:
  - Catch IOErrors when loading pkglist.
  - Resolves: rhbz#1083185
  - Fix OSError when running createrepo on CIFS shares.
  - Resolves: rhbz#1035588


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1104840
  - Remove nonexistent --no-compress option from the manpage.
  - Resolves: bug#1106454


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-5
changelog:
  - Cronie doesn't work when is executed as stand alone without systemd (for 
    debuging issues)
  - Fix another permission, hopefully all now.
  - Resolves: rhbz#1012420, rhbz#1015567


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-33
changelog:
  - add into example in crontab user-name
  - change name of crontab to crontab1 to be able add patch into cvs
  - Resolves: rhbz#609544


author: Milan Broz <mbroz@redhat.com> - 1.2.0-2
changelog:
  - Require libgcrypt and device-mapper versions supporting FIPS extensions.
  - Request buffer wipe for dm-ioctl when sending key data.
    Resolves: #674825


author: Milan Broz <mbroz@redhat.com> - 1.2.0-3
changelog:
  - Require updated device mapper library (secure flag).
  - Use FIPS RNG for keyslot salt in FIPS mode.
    Resolves: #692512 #693371


author: Milan Broz <mbroz@redhat.com> - 1.2.0-7
changelog:
  - Fix device lookup function.
  - Fix duplicate directories displayed in status output.
    Resolves: #755478 #746648


author: Milan Broz <mbroz@redhat.com> - 1.1.1-0.2
changelog:
  - Update to cryptsetup 1.1.1-rc2.
  - Align device using topology info if available.
    Resolves: #569949


author: Milan Broz <mbroz@redhat.com> - 1.1.2-1
changelog:
  - Fix handling of newline with keyfile on standard input.
  - Fix alignment ioctl use.
  - Fix API activation calls to handle NULL device name.
    Resolves: #598523 #569949 #599617


author: Milan Broz <mbroz@redhat.com> - 1.2.0-1
changelog:
  - Update to cryptsetup 1.2.0
  - Use generic crypto backend interface.
  - Add fipscheck compile option.
  - Use gcrypt RNG in FIPS mode for key generation.
  - Add FAQ to documentation.
    Resolves: #658817 #663870 #663869


author: Ville Skyttä <ville.skytta at iki.fi> - 1.1-2
changelog:
  - Change group to ctapiusers.
  - Don't hardcode a static gid.
  - Don't remove the group at all.
  - Require shadow-utils for group creation.


author: : Version 1.0.105
changelog:
  - Fix a bug where we could SEGV if multiple concurrent "ctdb eventscript ..."
     are used and some of them block.
   - Monitor the daemon from the syslog child process so we shutdown cleanly when
     the main daemon terminates.
   - Add a 500k line ringbuffer in memory where all log messages are stored.
   - Add a "ctdb getlog <level>" command to pull log messages from the in memory
     ringbuffer.
   - From martin : fixes to cifs and nfs autotests
   - from michael a : fix a bashism in 11.natgw


author: : Version 1.0.106
changelog:
  - Buildscript changes from Michael Adam
   - Dont do a full recovery when there is a mismatch detected for ip addresses,
     just do a less disruptive ip-reallocation
   - When starting ctdbd, wait until all initial recoveries have finished
     before we issue the "startup" event.
     So dont start services or monitoring until the cluster has
     stabilized.
   - Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
     bugs found.


author: : Version 1.0.107
changelog:
  - fix for rusty to solve a double-free that can happen when there are
     multiple packets queued and the connection is destroyed before
     all packets are processed.


author: Sumit Bose <sbose@redhat.com> - 1.0.108-1
changelog:
  - Update to ctdb version 1.0.108
   - added fix for bz537223
   - added tdb-tools to Requires, fixes bz526479


author: Sumit Bose <sbose@redhat.com> - 1.0.108-2
changelog:
  - substituted $RPM_BUILD_ROOT by %{buildroot}
   - fix permissions on event scripts
   - Updated to ctdb version 1.0.108 maintenance release 3,
     git commit f24338e68c462e5cdee3194bb8f3ba18c3ca4672


author: Sumit Bose <sbose@redhat.com> - 1.0.112-1
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 14,
     git commit f5ac659e4df9ba6ee4652aeb9b4f5a01b532fd99
   - resolves: #583771


author: Sumit Bose <sbose@redhat.com> - 1.0.112-2
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 17,
     git commit c07cd2cb042d62ee4adcfa1b75dd423424ca681b


author: Sumit Bose <sbose@redhat.com> - 1.0.112-3
changelog:
  - Updated to ctdb version 1.0.112 maintenance release 18,
     git commit de49edcc0dfea7c4396cdbd9e4897358b5474100


author: Sumit Bose <sbose@redhat.com> - 1.0.114.3-2
changelog:
  - Resolves: rhbz#728545 - ctdbd leaks a file descriptor
   - Resolves: rhbz#727913 - Coverity scan revealed defects


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-1
changelog:
  - Updated to ctdb version 1.0.114.5
   - Resolves: rhbz#821715 - ctdbd on a node crashes when another node in the
     cluster is brought down
   - Resolves: rhbz#758367 - ctdb w/ GFS2: A stable node gets banned
   - Resolves: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-2
changelog:
  - Increased release number to be able to update RHS version of ctdb
   - Related: rhbz#838885 - Rebase ctdb to version 1.0.114.5 in RHEL 6.4


author: Sumit Bose <sbose@redhat.com> - 1.0.114.5-3
changelog:
  - Improve output of ctdb status by adding the number of deleted nodes
   - Fix a memory and an unchecked return value found by coverity
   - Resolves: rhbz#866670 - ctdb status reports more nodes then available
   - Resolves: rhbz#874058 - One resource leak && unchecked return value


author: Sumit Bose <sbose@redhat.com> - 2.5.1-1
changelog:
  - Update to ctdb version 2.5.1
   - Resolves: rhbz#1061630
   - Resolves: rhbz#1085447
   - Resolves: rhbz#987099
   - Resolves: rhbz#1085413


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-43
changelog:
  - fix manpage typos found using aspell (#1011101)
  - fix comments about loading CA certs with NSS in man pages (#1011083)
  - fix handling of DNS cache timeout while a transfer is in progress (#835898)
  - eliminate unnecessary inotify events on upload via file protocol (#883002)
  - use correct socket type in the examples (#997185)
  - do not crash if MD5 fingerprint is not provided by libssh2 (#1008178)
  - fix SIGSEGV of curl --retry when network is down (#1009455)
  - allow to use TLS 1.1 and TLS 1.2 (#1012136)
  - docs: update the links to cipher-suites supported by NSS (#1104160)
  - allow to use ECC ciphers if NSS implements them (#1058767)
  - make curl --trace-time print correct time (#1120196)
  - let tool call PR_Cleanup() on exit if NSPR is used (#1146528)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1154747)
  - allow to enable/disable new AES cipher-suites (#1156422)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161163)
  - disable libcurl-level downgrade to SSLv3 (#1154059)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-44
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-46
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-49
changelog:
  - prevent NSS from incorrectly re-using a session (#1269660)
  - prevent test46 from failing due to expired cookie (#1277551)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-37
changelog:
  - fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
  - handle cookies with numerical IPv6 address (#1341503)
  - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
  - curl -E: allow to escape ':' in cert nickname (#1376062)
  - run automake in %prep to avoid patching Makefile.in files from now on


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-43
changelog:
  - curl --socks5-{basic,gssapi}: control socks5 auth (#1409208)
  - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883)
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)
  - nss: fix a possible use-after-free in SelectClientCert() (#1473158)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-52
changelog:
  - prevent curl --rate-limit from hanging on file URLs (#1281969)
  - fix NTLM password overflow via integer overflow (CVE-2018-14618)
  - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
  - backport options to force TLS 1.3 in curl and libcurl (#1672639)
  - prevent curl --rate-limit from crashing on https URLs (#1683292)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 1.11.23.5
changelog:
  - added support for passing arguments thru stdin (patch from arozansk@redhat.com)
  - Resolves: #501942


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-16
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name
    (Resolves: #671460)
  - Set PAM_TTY and PAM_RHOST on PAM authentication (Resolves: #684789)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Gary T. Giesen <giesen@snickers.org> 1.5.4-2
changelog:
  - Spec file cleanup for consistency with Fedora Packaging Guidelines
  - Added install for man pages (it's not installed by 'make install')


author: Gary T. Giesen <giesen@snickers.org> 1.5.4-3
changelog:
  - Further spec file cleanup
  - New Makefile patch to make build respect compiler flags and
    install man pages


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@verbum.org> - 0.84-2
changelog:
  - Add patch to avoid assertions when setting a GError that
    includes a '-' in the enumeration value.  Should fix #528897


author: Jonathan Dieter <jdieter@gmail.com> - 3.5-0.git.20090729.1
changelog:
  - Explain where we get the source from
  - Split *deltaiso commands into deltaiso subpackage (#501953)


author: Bill Nottingham <notting@redhat.com> - 3.5-0.git.20090831.1.3
changelog:
  - fix python bindings to:
    - call _exit(), not exit()
    - properly pythonize errors
    - not leak file descriptors


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.2.20090913git
changelog:
  - Correct prerelease rlease numbering.
  - Build against the system zlib, not the bundled library.  This remedies the
    fact that the included zlib is affected by CAN-2005-1849.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.3.20090913git
changelog:
  - Make building with system zlib selectable at build time.
  - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable
    of making rsync-friendly compressed files.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100.1
changelog:
  - Add 0268-RHBZ-1497059-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: bz #1497059


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.101
changelog:
  - Add 0268-RHBZ-1447328-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: #1447328


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.102
changelog:
  - Add 0269-RHBZ-1442369-fix-check-partitions.patch
    * fix crash when partition minor starts with all the digits of the
      multipath device number
  - Add 0270-RHBZ-1408287-remove-long-def-timeout.patch
    * make all timeouts use checker_timeout if set and default to 60 sec.
  - Add 0271-RHBZ-1444193-fix-hang-on-resume.patch
    * resume again if an invalid table left the device suspended
  - Add 0272-RHBZ-1525217-3PAR-config.patch
  - Resolves: #1408287, #1442369, #1444193, #1525217


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.104
changelog:
  - Add 0273-RHBZ-1550069-fix-messages.patch
    * change error messages to warning messages, if adding or updating a
      multipath device fails because the device is missing from sysfs
  - Resolves: #1550069


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.105
changelog:
  - Add 0274-RHBZ-1573463-uevent-socket.patch
    * retry binding socket and close it immediately when cancelled.
  - Resolves: #1573463


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.106
changelog:
  - Modify 0272-RHBZ-1525217-3PAR-config.patch
    * revert path selector to round-robin
  - Resolves: #1578515


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.106.1
changelog:
  - Add 0275-RHBZ-1589741-fix-crash.patch
    * revert crashing code from 0274-RHBZ-1573463-uevent-socket.patch
  - Resolves: #1589741


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.74
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1024103


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.75
changelog:
  - Add 0196-RHBZ-1012672-fix-sysdev.patch
    * rewrite multipath sysfs device handling to fix various issues from
      bzs #1012672, #1064636, and #1049637
  - Add 0197-RHBZ-1049315-netapp-rw-change.patch
    * allow reload_rewrite to be set by device, and set it by default for
      netapp devices.
  - Add 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Add 0199-RHBZ-1007719-multipath-man.patch
    * documentation update
  - Add 0200-RHBZ-1009061-allow_devt.patch
    * allow specifying paths to multipath by major:minor, instead of devname
  - Add 0201-RHBZ-1018697-cli-use-basename.patch
    * make multipathd interactive commands accept device names that start with
      /dev/
  - Add 0202-RHBZ-1024604-weighted-prio-man.patch
    * documentation update
  - Add 0203-RHBZ-1054046-mpathconf-typo.patch
    * fix command output typo
  - Add 0204-RHBZ-1067102-doc-add-selectors.patch
    * documentation update
  - Add 0205-RHBZ-1072974-alua-typo.patch
    * fix priritizer output typo
  - Add 0206-UPBZ-1020556-e-series-config.patch
    * udpate E-Series config to autodetect prio and hardware handler.
  - Resolves: bz #1049637, #1064636, #1049315, #1080052, #1007719, #1009061
  - Resolves: bz #1018697, #1024604, #1054046, #1067102, #1072974, #1020556


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.76
changelog:
  - Add 0207-UPBZ-1027061-sg-read-use-buffsize.patch
    * make readsector0 checker calculate the number of blocks to read based
      on the buffer size and the block size
  - Add 0208-UPBZ-1028220-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0209-RHBZ-999766-update-annotated.patch
    * update multipath.conf.annotated
  - Add 0210-UPBZ-1099932-fast-io-fail-iscsi.patch
    * and iscsi support for fast_io_fail_tmo
  - Add 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0212-RHBZ-1086417-orphan-path-on_failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0213-RHBZ-1069641-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Resolves: bz #1027061, #1028220, #999766, #1099932, #1088013, #1086417
  - Resolves: bz #1069641


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.77
changelog:
  - Add 0214-RHBZ-1078485-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0215-RHBZ-1054747-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the CPU
  - Add 0216-RHBZ-1095868-multipathd-man-typo.patch
  - Add 0217-RHBZ-1101101-add-w-options.patch
    * multipath now includes the -w and -W options. -w makes multipath remove
      a wwid from the wwids file. -W removes all of the wwids, except for the
      ones belonging to the current multipath devices, from the bindings file.
  - Resolves: bz #1078485, #1054747, #1095868, #1101101


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.78
changelog:
  - Modify 0196-RHBZ-1012672-fix-sysdev.patch
    * remove unused function, and fix NULL ptr dereference
  - Modify 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * Fix some pointer errors
  - Modify 0213-RHBZ-1069641-config-error-checking.patch
    * Stop allocating extra memory in config parser.
  - Related: bz #1049637, #1069641, #1088013


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.79
changelog:
  - Modify 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Related: bz #1080052


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80
changelog:
  - Add 0218-RHBZ-1117714-configure-missing-devs.patch
    * handle externally removed devices during configuration.
  - Resolves: bz #1117714


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.1
changelog:
  - Add 0219-RHBZ-1136966-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1162265


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.2
changelog:
  - Add 0220-RHBZ-1179728-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0221-RHBZ-1179728-cmdline-wwid.patch
    * make multipathd read wwids specified by the kernel commandline mpath.wwid
      option on startup.
  - Resolves: bz #1179728


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80.3
changelog:
  - Add 0222-RHBZ-1187217-thread-safe.patch
    * only multipathd will keep a global cache of sysfs information
      for paths.
  - Resolves: bz #1187217


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.6-1
changelog:
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.
  - Update man pages to make it clearer that most tools shouldn't
    be run on live metadata.
  - Fixed bugs in the metadata reference counting for thin_check.
  - New thin_delta and thin_trim commands.
  - New --clear-needs-check option for cache_check.
  - Space map checking for thin check.
  - All tools switch to using libaio. This gives a large performance
    boost, especially to the write focused tools like thin_restore.
  - Added progress monitor to thin_restore, cache_restore and era_restore.
  - Added --quiet/-q option to *_restore to turn off the progress bar.
  - Removed variable hint size support from cache tools.
  - Tools are now rolled into a single executable to save space.
  - Fixed bugs when walking bitsets (possibly effecting cache_dump
    and cache_check).


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.1-1
changelog:
  - Install pdata_tools and all its symlinks for various tools to
    /sbin and also provide symlinks for all tools in /usr/sbin
    for backward compatibility.
  - Link with libstdc++ statically.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc7
changelog:
  - Fixes for thin_repair.
  - Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-44.P1
changelog:
  - option 97 - pxe-client-id (#1058674)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130804)
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.3
changelog:
  - Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

  <* Wed Feb 28 2018 Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.2
  - Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-55.P1
changelog:
  - Resolves: #1527995 - allow static route with a 0.0.0.0 next-hop address
  - Related: #1527995 -  install link-local static routes with correct scope


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Tim Waugh <twaugh@redhat.com> 2.8.1-20
changelog:
  - Converted spec file to UTF-8 (bug #225696).
  - Fixed summary (bug #225696).
  - Fixed PreReq (bug #225696).
  - Removed Prefix (bug #225696).
  - Fixed build root (bug #225696).
  - Avoid %makeinstall (bug #225696).
  - Fixed license tag (bug #225696).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-25
changelog:
  - Only try to install the info file if it exists so that package
    installation does not fail with --excludedocs (bug #515919).


author: Tomas Mraz <tmraz@redhat.com> - 1.1.0-6
changelog:
  - upstream fix for CVE-2011-2207 (blocking other request processing
    when one CRL request is being processed) (#710529)


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-7
changelog:
  - Fix activation of isw raid sets when the disks have serialnumber longer
    then 16 characters (#490121)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc16-3
changelog:
  - Add Obsoletes for dmraid-libs packages (merged into the main pkg, #524261)
  - Make -devel Require the main package now the dmraid-libs package is gone


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-4
changelog:
  - bz526157: fix manual pages for dmraid.static and dm_dso_reg_tool
  - bz505562: ddf1 metadata format handler LSI persistent name fix
  - bz524168: fix pdc metadata format handler to report the correct number
    of devices in a RAID10 subset
  - bz528097: move libraries to /lib* in order to avoid catch22
    with unmountable /usr


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-5
changelog:
  - Resolves: rhbz#554698
    SGPIO spare led is still in rebuilding state fix
  - Resolves rhbz#554700
    switch to using /var/cache/logwatch/dmeventd/syslogpattern.txt;
    explicitly claim logwatch files in dmraid-events-logwatch
  - Resolves rhbz#554708
    gets size of Silicon Image JBOD set wrong fix
  - Resolves rhbz#554710
    try to register non-existent dmeventd DSO fix


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-7
changelog:
  - Create symlink from full versioned libdmraid dso files
    to libdmraid.so.1 and libdmraid-events-isw.so.1
    (ie. soname we use for linking)
  - Resolves: rhbz#557514


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - Resolves: rhbz#701501
  - Resolves: rhbz#729971
  - Resolves: rhbz#729032
    (not reproducable any more {zkabelac])


author: Ondrej Vasik <ovasik@redhat.com> - 1.0.44
changelog:
  - fix ISO entities for 4.5 SGML, use XML at the end of
    public identificators of XML 4.1.2 ISO entities


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-2
changelog:
  - rpmlint check
  - /etc/ files marked as config, fixed bad requirements
  - cosmetic cleanup of spec file


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-4
changelog:
  - fix loop in post catalog registration(incomplete sed
    coverage) #455680
  - fix broken catalogs for package updates
  - fix removal of files during updates


author: Tim Waugh <twaugh@redhat.com> 3.1-32
changelog:
  - Adjust license tag (bug #225706).
  - Fix missing prototype (bug #225706).
  - Install copy as symbolic links (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-34
changelog:
  - Moved 'make clean' to prep section and added comment about there
    being no upstream (bug #225706).


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-1
changelog:
  - Bump to newer release
  - Removed mkdosfs-ygg from Obsoletes/Provides tag as it looks really deprecated
  - Drop bounds patch - fixed upstream


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.9-4
changelog:
  - Fixed dosfsck and dosfslabel on s390x (s390x-unalign patch)
    Resolves: rhbz#624596
  - Fixed buffer overflow in alloc_rootdir_entry (fix-alloc-rootdir-entry patch)
    Resolves: rhbz#677789
  - Fixed dosfslabel on FAT32 (dosfslabel-fat32 patch)
    Resolves: rhbz#688128
  - Fixed device partitions detection (dev-detect-fix patch)
    Resolves: rhbz#709266


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-15
changelog:
  - Enhance e2fsck detection of invalid extent trees (#922847)
  - Several filefrag fixes (#927541)
  - Clear errors stored in superblock by newer kernels (#895679)
  - Fix journal superblock error handling (#885083)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-18
changelog:
  - Fix e2fsck false positive when blocks exist past EOF (#994615)
  - Fix resize2fs shrink corruption when moving files with many extents (#873201)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-19
changelog:
  - Fix for some resize2fs corruptions (#1036122)
  - Allow tune2fs to remove a dirty journal with -ff (#1040122)
  - Add enable_periodic_fsck to mke2fs.conf (#1052409)
  - Disallow too-high revision during mke2fs (#1093446)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-22
changelog:
  - e2fsck: fix last mount time and last write time in preen mode (#1218262)
  - e2fsck: don't prompt for time fixes with accept_time_fudge (#1218262)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-23
changelog:
  - e2image: check return value from check_if_mounted() (#1139936)
  - e2fsck: do not process impossibly large dir blocks (#1297694)
  - resize2fs: fix off-line resize of file systems (#1285227)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-24
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1474179)
  - resize2fs: create optimized flex_bg block groups (#1474179)


author: Andrew Overholt <overholt@redhat.com> 1:3.4.1-1
changelog:
  - 3.4.1
  - Don't conditionalize building of gcj AOT bits (we're only building
    this for gcj and IcedTea bootstrapping).


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-1
changelog:
  - Update to upstream 4.5.2 release.
  - Add eclipse-gcj-compat-4.2.1.patch and eclipse-gcj-nodummysymbol.patch
    from rhel-7.3 branch.
  - Add ecj-convertto1.5.patch.
  - Remove ClasspathJsr199.java for 1.5 compatibility.
  - Add man page.
  - Resolves: rhbz#1336481


author: Elliott Baron <ebaron@redhat.com> 1:4.5.2-3
changelog:
  - Update to a newer GCCMain.
  - Add a timestamp qualifier to ecj-gcj.tar.bz2.
  - Remove eclipse-gcj-compat-4.2.1.patch, no longer necessary. 
  - Restore versioned jar.
  - Resolves: rhbz#1336481


author: Michal Hlavinka <mhlavink@redhat.com> - 82-6.1
changelog:
  - security fixes:
  - privilege escalation via mountpoint race conditions (CVE-2011-1831, CVE-2011-1832)
  - race condition when checking source during mount (CVE-2011-1833)
  - mtab corruption via improper handling (CVE-2011-1834)
  - key poisoning via insecure temp directory handling (CVE-2011-1835)
  - arbitrary file overwrite via lock counter race (CVE-2011-1837)


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.13.pre3
changelog:
  - use appropriate BuildRequires for nss_compat_ossl (#495532)
  - support for trusted CA certificates loading from file in PEM format


author: Kamil Dudka <kdudka@redhat.com> 0.12-0.15.pre3
changelog:
  - try to load default NSS root certificates if the configuration option
    connection.ssl.trusted_ca_file is set to an empty string (#497788)


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.20.pre5
changelog:
  - remove patch for configure script to find OpenSSL (we use NSS instead)
  - rediffed all patches with non-zero offset
  - add buildrequires for zlib-devel


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 3.5-1.2
changelog:
  - Backport two patches to improve register dumps on ixgbe devices
    Resolves: bz#1038956
  - Backport two patches to fix lro support
    Resolves: bz#1038955


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
  - Fix Tk initialization


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-3
changelog:
  - Use full path to su in passmass
    Resolves: #735962
  - Fix segfault in characters matching
    Resolves: #742911
  - Fix minor man page formatting issue
    Resolves: #674866


author: Till Maas <opensource@till.name> - 2.4.0-25
changelog:
  - Fix crash when too many connections are used
  - Make gcc build dependencies obvious for local builds


author: Jan Kaluza <jkaluza@redhat.com> 5.04-22
changelog:
  - fix #1169509 - add support for Java 1.7 and 1.8
  - fix #1243650 - comment out too-sensitive Pascal magic
  - fix #1080453 - remove .orig files from magic directory
  - fix #1161058 - add support for EPUB
  - fix #1162149 - remove parts of patches patching .orig files
  - fix #1154802 - fix detection of zip files containing file named "mime"
  - fix #1246073 - fix detection UTF8 and UTF16 encoded XML files
  - fix #1263987 - add new "execfn" to coredump output to show the real name of
    executable which generated the coredump
  - fix #809898 - add support for detection of Python 3.2-3.5 byte-compiled files
  - fix #966953 - backport support for MSOOXML


author: Jan Kaluza <jkaluza@redhat.com> 5.04-27
changelog:
  - fix CVE-2014-3587 (incomplete fix for CVE-2012-1571)
  - fix CVE-2014-3710 (out-of-bounds read in elf note headers)
  - fix CVE-2014-8116 (multiple DoS issues (resource consumption))
  - fix CVE-2014-8117 (denial of service issue (resource consumption))
  - fix CVE-2014-9620 (limit the number of ELF notes processed)
  - fix CVE-2014-9653 (malformed elf file causes access to uninitialized memory)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-8
changelog:
  - fix quotation punctuation in find(1) man page (#659730)
  - fix file descriptor leak with --execdir option (#1223557)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-5
changelog:
  - move library to /lib so the binaries needed when /usr might
    not be mounted can link to it (#669077)


author: Petr Machata <pmachata@redhat.com> - 2.5.35-4
changelog:
  - Get rid of warning caused by ignoring return value of fwrite() in
    ECHO macro.  Debian patch.
  - Resolves: #484961


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#736878 Rebase to latest upstream
    resolves: bug#705723 logrotate script does not reload running daemon
    resolves: bug#787116 radtest PPPhint option not parsed correctly
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-1
changelog:
  - Upgrade to the latest upstream release v2.2.6
    Resolves: Bug#921563  raddebug not working correctly
    Resolves: Bug#921567  raddebug -t 0 exists immediately
    Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                          windows user credentials
    Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
    Resolves: Bug#1135439 Default message digest defaults to sha1
    Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                          fault
    Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
  - Remove radutmp rotation
    Resolves: Bug#904578  radutmp should not rotate
  - Check for start_servers not exceeding max_servers
    Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                          than max_servers


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-7
changelog:
  - Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                          rad_coalesce()
  - Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                          due to improper output buffer size check in make_secret()
  - Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
  - Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                          fr_dhcp_decode()
  - Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                          fr_dhcp_decode_options()
  - Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63


author: Marek Kasik <mkasik@redhat.com> 2.3.11-7
changelog:
  - Add freetype-2.3.11-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651762


author: Marek Kasik <mkasik@redhat.com> 2.3.11-8
changelog:
  - Add freetype-2.3.11-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723468


author: Marek Kasik <mkasik@redhat.com> 2.3.11-13
changelog:
  - Fix CVE-2012-{1126, 1127, 1130, 1131, 1132, 1134, 1136,
    1137, 1139, 1140, 1141, 1142, 1143, 1144}
  - Properly initialize array "result" in
    FT_Outline_Get_Orientation()
  - Check bytes per row for overflow in _bdf_parse_glyphs()
  - Resolves: #806269


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-15.el6_6.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197737


author: Marek Kasik <mkasik@redhat.com> - 2.3.11-16
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197738


author: Jan Synáček <jsynacek@redhat.com> - 0.17-52
changelog:
  - Add listening timeout to avoid hanging up when ftp is executed in active mode
    and ftp-data port is blocked (#852636)
  - Plug memleaks in append, put and send commands (#786004)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-4
changelog:
  - remove the versioned binaries even if the version is modified by the
    snapshot patch, modify the file list to check this (#476166)
  - update the snapshot patch, dropping the upstreamed
    gawk-3.1.5-test-lc_num1.patch


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-9
changelog:
  - make sure conversion between aggregates with different
    sizes is never considered useless (#1113878)
  - fix gfortran ICE on old-style initialization of derived type
    components (#1113793)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-10
changelog:
  - backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
  - fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
    (#1127118, PR rtl-optimization/61801)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-12
changelog:
  - only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
  - don't vectorize bitfield and boolean types (#1150606,
    PR tree-optimization/43390)
  - fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
  - fix up stdarg optimization when address of a va_list variable escapes
    in a phi node (#1190640, PR target/64979)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-17
changelog:
  - change libgomp default spincount if OMP_WAIT_POLICY is not specified
    (#1229852, PR libgomp/43706)
  - remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
    trampolines (#1241495)
  - guard __gcov_flush body in libgcov.a with a mutex (#1251488,
    PR gcov/49484, PR gcov-profile/52627)
  - add missing s390.exp hunk from -mhotpatch= support (#1233260)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-18
changelog:
  - fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
  - fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-66.el6
changelog:
  - Fix 'Add $_signo convenience variable'.  It is worth mentioning that the
    variable was finally named $_exitsignal instead of $_signo (RH BZ 971849).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-68.el6
changelog:
  - Fix 'gdb gives highly misleading error when debuginfo pkg is present,
    but not corresponding binary pkg' (Jan Kratochvil, backported from Fedora,
    RH BZ 981154).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-70.el6
changelog:
  - Fix 'gdb deadlock due to gdb calling calloc() in signal handler.'
    (Jan Kratochvil, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-71.el6
changelog:
  - Improve fix for 'gdb deadlock due to gdb calling calloc() in signal
    handler.', because it was failing on i686.  (Pedro Alves, RH BZ 913146).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-72.el6
changelog:
  - Fix '[RHEL6] Can't access TLS variables in statically linked binaries'
    (Jan Kratochvil, RH BZ 1080656).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-73.el6
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-74.el6
changelog:
  - Improve fix for 'gdb crashes while thread apply all bt is run on the core
    file' (RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-75.el6
changelog:
  - Additional fixes needed by 'gdb crashes while thread apply all bt is
    run on the core file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov,
    RH BZ 1104587).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-83.el6
changelog:
  - Fix 'gdb internal error' [Threaded program calls clone, which
    crashes GDB] (Pedro Alves, RH BZ 1099929).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-88.el6
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires by default:
    https://github.com/msimacek/koschei/issues/54 (Jan Kratochvil, RH BZ 1287044)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-91.el6
changelog:
  - Load strictly build-id-checked core files only if no executable is specified
    (Jan Kratochvil, RH BZ 1339862).


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Marek Skalicky <mskalick@redhat.com> - 1.8.0-39
changelog:
  - dbm_* calls should call the underlying gdbm_* calls using then
    GDBM_NOLOCK flag
    Resolves: #668702


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-7
changelog:
  - Remove the gettext-libs docs, as they are talking about autoconf, libtool, 
    which are not directly related to the gettext-libs.
  - Remove unused definition and trailing space.
  - Fix the build failure with mock .


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Patsy Franklin <pfrankli@redhat.com> - 2.12-1.212
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.3.1-10
changelog:
  - Backported assembler routines from recent gmp-6:
    gmp-s390x-optimization.patch, gmp-s390-31bit-optimization.patch
  - Resolves: #1149237


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.1-11
changelog:
  - Explicitly added '-g' option into CFLAGS to correctly build .debug_info for i386
    Resolves: #729039


author: Chris Lumens <clumens@redhat.com> 3.0g-1
changelog:
  - Update to gnu-efi-3.0g, which gets rid of the need for the no-relocations
    patch.
    Related: rhbz#555835


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.25-1
changelog:
  - new upstream release fixing a minor regression introduced by the previous one
  - add --file-is-digest option needed for copr


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 2.12.23-21
changelog:
  - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
    (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
  - Modified gnutls-serv to accept --sni-hostname (#1333521)
  - Modified gnutls-serv to always reply with an alert message (#1327656)
  - Removed support for DSA2 as it causes interoperability issues (#1321112)
  - Allow sending and receiving certificates which were not in the
    signature algorithms extension (#1328205)
  - Removed support for EXPORT ciphersuites (#1337460)
  - Raised the minimum acceptable DH size to 1024 (#1335924)
  - Restricted the number of alert that can be received during handshake (#1388730)
  - Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
  - The exposed (but internal) crypto back-end registration API is deprecated and no
    longer functional. The ABI is kept compatible (#1415682)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Zdenek Prikryl <zprikryl@redhat.com> 1.20.6-6
changelog:
  - Don't complain if installing with --excludedocs (#515927)
  - Drop unnecessary capabilities in gpm (#517659)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.mlos2
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-86
changelog:
  - grub-install: add regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1121321
  - Disable previous patch as it doesn't work properly


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-91
changelog:
  - Suppress failure message on EFI systems when loading splashscreen
    Resolves: rhbz#1129436
  - Return proper disk operation status
    Resolves: rhbz#1130209
  - Stick with default GOP mode unless resolution is absurdly small
    Resolves: rhbz#1130313


author: Jan Grulich <jgrulich@redhat.com> - 1:0.97-94
changelog:
  - Properly expand IPv6 address
    Resolves: bz#1177321
  - Support various types of DHCP IPv6 packet for MAC address extraction
    Resolves: bz#1206542


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-94.el6_7.1
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1311474


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-95
changelog:
  - Fix the ineffectiveness when loading fragmented initramfs from Ext4 filesystem
    Resolves: #1006373


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:0.97-97
changelog:
  - Patch from previous commit c445aac0ee30f has been removed, because it did not
    fix the issues with some SGI hardware. Bumping up the release number, so the
    building of grub package is not affected in the future. For more info see:

    Related: #1325860 (https://bugzilla.redhat.com/show_bug.cgi?id=1325860)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.97-98
changelog:
  - Workaround for SGI UV100/1000 hardware (TFTP transfers in UEFI mode) added
    Resolves: #1124862
  - Allow more than 1 letter in device name when using the grub-install script
    Resolves: #1349389


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-12
changelog:
  - call aclocal directly, because autoreconf didn't see the magic comment in
    the distributed version of aclocal.m4 which made it look like it was safe
    to generate a new one (#449550)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-48
changelog:
  - core: backport NoDecode option of AllowEncodedSlashes (#1002658)
  - mod_authz_host: disallow the '#' character in allow, deny (#1179911)
  - mod_ssl: fix memory leak on httpd reloads (#1236515)
  - mod_proxy: fix regression caused inherited workers to use a different
    scoreboard slot then the original one (#1252574)
  - mod_rewrite: allow running external mapping program as non-root (#1035230)
  - mod_reqtimeout: fix a timed out connection going into the keep-alive state
    after a timeout when discarding a request body (#1213967)
  - core: fix possible crash in SIGINT handling (#1233109)
  - mod_ssl: extend SSLSessionCacheTimeout to sessions resumed by TLS (#1190509)
  - initscript: do not print error when stopping stopped httpd (#1189941)
  - mod_ssl: fail for colons in credentials with FakeBasicAuth (#1027442)
  - mod_proxy: add "proxy-flushall" env variable which reduces the impact
    of caching 16K of the request body. (#952395)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1289096)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-53
changelog:
  - core: fix possible long graceful restart caused by race condition between
    httpd children processes (#1301758)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-55
changelog:
  - Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-56
changelog:
  - Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
    503 status code on subsequent requests


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-58
changelog:
  - Resolves: #1349546 - comments no longer allowed at the end of Allow
    from statements and maybe other statements from mod_authz*


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-60.5
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-68
changelog:
  - Resolves: #1450298 - when ProxyErrorOverride is On, modcluster
    return 503 status code on subsequent requests (2)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.2.15-69
changelog:
  - Resolves: #1471383 - httpd.worker abort()s with misc/apr_reslist.c:159:
    reslist_cleanup: Assertion `rl->ntotal == 0' failed


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: ohering@suse.de
changelog:
  - Start daemons on demand via udev rules because the guest services
    are optional.
  - If systemd is used daemons live in libdir, they are not usercallable apps


author: ohering@suse.de
changelog:
  - Handle the case when the target file exists correctly in hv_fcopy_daemon
  - vssdaemon: Ignore VFAT mounts during the Freeze operation


author: Ed Hein <eduard_hein@mcafee.com> 3.5-1.1
changelog:
  - check for virtualization support before starting hyper-v userland services
  - package LIS 3.5 hyper-v userland tools


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.24-1
changelog:
  - add support for sysctl.d (#680527)
  - log network messages via syslog (#653630, #672202)
  - document NM_CONTROLLED (#692123)
  - don't explictly disallow IPv6 aliases (#692240)
  - make sure the bond exists when we bring up the slaves. (#694501)
  - properly add and remove arp_ip_target's (#675079)
  - load static arp entries from ethers file (#696788)
  - fix logic error in rc.sysinit (#698520, <jlau@redhat.com>)
  - handle IPADDRx correctly for static addresses (#700184)
  - don't match filesystem types in hostnames (#703210, <jmueller@data-tronics.com>)
  - check for VLAN interfaces is being slave first (#703475)
  - override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - allow multiple ETHTOOL_OPTS option types (#692410, #693583)
  - don't mount gfs2 in netfs (#689593)
  - fix pid file usage for IPv6. (#729292, <daveg@dgit.ndo.co.uk>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.50-1
changelog:
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - spec: require plymouth
  - fix mangled sysconfig/init.s390
  - rc.sysinit: don't perform fsck twice with /.autorelabel
  - ifdown-eth: fix comparison
  - ifup-eth: if arping fails, output responding MAC
  - network-functions: fix change_resolv_conf after grep update
  - spec: add sysctl.d dir
  - rc.sysinit: fix typo in fs
  - rename_devices: comments need to have a blank before them
  - rename_device: remove comments and trailing whitespaces
  - bonding: warn if the ifup for slave device failed
  - clarify daemon() usage message
  - ifdown: clean ipv4 localhost addresses
  - ifup-post: check resolve.conf also with DNS2
  - ifup: add missing quotes
  - ifup-eth: some bridge options are applied later
  - init.d/halt: give init some time to reexecute
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - rc.sysinit: apply quotas after system is relabeled


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.54-1
changelog:
  - specfile: require newer lvm
  - ifdown-eth: add timeout for when flushing global scope
  - functions: support boolean values in is_true() & is_false()
  - ifup-aliases: do not return with error when arping fails
  - netconsole: resolve domain name via 'getent' instead of 'hosts'


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.55-1
changelog:
  - ipcalc: detect invalid mask
  - ifup-aliases: send gratuitous ARPs when adding addresses
  - network: treat other tunnel interfaces (fixes ifdown stage)
  - kexec-disable.conf: release kexec memory properly
  - network-functions: do not send hostname via dhclient everytime
  - sysconfig/network: NO_DHCP_HOSTNAME option introduced
  - ipv6_add_addr_on_device: replace the existing address on NIC


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.03.59-1
changelog:
  - init.d/network: start vpninterfaces
  - ARPUPDATE option introduced
  - init.d/functions: sourcing for ksh fixed


author: <john_masinter@mcafee.com> 20180108-5
changelog:
  - rename util from intel-ucode to intel-ucode-chk
  - add util intel-ucode-hdr to display the hdr of a microcode file


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-6
changelog:
  - PRIO field was not shown correctly on powerpc platforms (#826875)
  - iotop failed when locale was incorrect (#849559)
  - move iotop to sbin (#908149)


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-9
changelog:
  - allow printing of unicode characters in batch mode (#906149)
  - fix crash when using pipe (#1330965)


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Updating to latest version 4.1.1 
  - Downloaded from https://www.kernel.org/pub/linux/utils/net/iproute2/iproute2-4.1.1.tar.xz


author: Thomas Woerner <twoerner@redhat.com> - 6.11-1
changelog:
  - new version 6.11 with so library version 2, includes
  - cleaned up spec file for 6.11, dropped patch, no kernel will be built
  - adapted for RHEL-6: added clean tag, BuildRoot


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-3
changelog:
  - fixes according to review:
  - fixed license
  - moved /bin/iptables-xml to iptables main package fixes dangling symlink in
    ipv6 sub-package
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: John Masinter <john_masinter@mcafee.com> 1.4.13-1
changelog:
  - switch from RH src.rpm to using latest upstream source.
  - Adapt RH specfile to build latest upstream source.


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.4-10
changelog:
  - Minor source hardening (bz 878001)
  - Migrating algorithm fix (bz 1031230)
  - Introducing deepestcache option (bz 1052166)
  - Debug option behavior fix (bz 1096392)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - Unused variable removed (bz 1119404)
  - Warning when started as non-root (bz 749651)
  - More robust signal handling (bz 1158932)
  - Fixed manpage hostname (bz 1162247)
  - Fixed memleak (bz 1178247)
  - Fixed help message typo (bz 1178903)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types (PR2800)
  - Remove unneeded dependency on jakarta-commons-logging, as VisualVM is no longer included.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350039


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Require at least the build-time version of NSS at run-time due to static linking.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350040


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350040


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.1
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Add blacklisted.certs to installation file list.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.0
changelog:
  - Bump to 2.6.10 and u141b00.
  - Adjust RH1022017 following application of 8173783
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Bump to u141b01 to include S8043723 fix for s390.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.0
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Apply fix for 8185716 so ppc uses correct ins_encode format
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716 patch, now applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Fix name of SystemTap tarball, following update.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Fix file path in rh1022017.patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.0
changelog:
  - Bump to 2.6.14 and u181b00.
  - Drop 8197981 Zero 32-bit patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.1
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.12
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - ABS_JAVA_HOME_DIR is no longer used in the latest tapsets
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.0
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.0
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.0
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Produce debug symbols for libpulse-java.so
  - Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  - native library are being produced. This is needed to fix
  - rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.0
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.0
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Drop the CORBA typo fix, which appears upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-1.b15
changelog:
  - Remove method reference from java.io.ObjectInputStream to allow compilation on old ECJ.
  - Resolves: rhbz#1393047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-2.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-0.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Re-generate RH1393047 ObjectInputStream patch against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Restrict debug builds to shipped JIT architectures, excluding unshipped ppc64
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Disable -ffp-no-contract option introduced by 8170873 as not available on RHEL 6 GCC.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-0.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-0.b15
changelog:
  - Update to aarch64-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
  - Resolves: rhbz#1468473


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update to aarch64-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) to accomodate 8151841 (GCC 6 support).
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Fix premature shutdown of NSS in SunEC provider.
  - Move -ffp-no-contract fix to local fixes section.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches of:
     patch561 8075484-pr3473-rh1490713.patch
     patch532 8162384-pr3122-rh1358661.patch
     patch547 8173941-pr3326.patch
     patch554 8175887-pr3415.patch
     patch550 8180048-pr3411-rh1449870.patch
  - adapted pr3286-no_fp_contract.patch, CFLAGS_linux_ppc64 no longer have -ffp-contract=off so was dropped from hunk
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-2.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-2.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546)
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-2.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b13
changelog:
  - Fix signedness build failure in shenandoahHeapRegion.cpp (upstream patch from mvala)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Drop Shenandoah signedness fix as it appears in the new upstream tarball.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-0
changelog:
  - Note why PR1834/RH1022017 is not suitable to go upstream in its current form.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-0
changelog:
  - Add missing runtime requirements for dlopened dependencies
  - Add headful runtime requirement on Gtk+2 for Desktop API & look-and-feel
  - Add headless runtime requirements on lksctp-tools, pcsc-ltie-devel & cups-libs
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-0
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - PR3548/RH1540242
    - JDK-6260348/PR3066
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8205104/PR3539/RH1548475
    - JDK-8206406/PR3610/RH1597825
    - JDK-8201495/PR2415
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
    - RH1649731
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1
changelog:
  - Add 8160748 for AArch64 which is missing from upstream 8u version.
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Provide Javadoc debug subpackage for now, but populate it from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-2
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860462


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b09 (EA).
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895064


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.0-1
changelog:
  - New upstream release
  - Updated no_pprof patch to match new release
  - Updated s390 patch to match new relase
  - Added make check
  - Added new script jemalloc.sh
  - Added a patch for atomic operations on epel5/ppc


author: Orion Poplawski <orion@cora.nwra.com> - 0:1.7.5-3.8
changelog:
  - Add Requires: coreutils because we provide scripts that are being executed
    in rpm %post scriptlets that require it.


author: Tomas Heinrich <theinric@redhat.com> - 0.11-9
changelog:
  - initial import
    - disable building of a debuginfo package - works around rhbz 903009
    - add a workaround for disabling rpath
    - disable paralel build
    - disable 'check' section for now
    resolves: #966964


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Ryan O'Hara <rohara@redhat.com> - 1.2.13-1
changelog:
  - Rebase to upstream version 1.2.13
    Resolves: rhbz#1052380, rhbz#1077201, rhbz#1007575, rhbz#967641


author: John Masinter <john.masinter@intel.com> 3.18.45-1
changelog:
  - Update to latest upstream patch. 
  - Add Intel pStates governor to allow use of Turbo CPU frequencies.


author: John Masinter <john.masinter@intel.com> 4.9.23-2
changelog:
  - silence misguided tcp gro warning, see patch file for details.
  - patch iphdr struct to work with older glibc


author: John Masinter <john.masinter@intel.com> 4.9.34-2
changelog:
  - Make improvements and additions to RNG as follows:
  . /dev/random  --> /dev/urandom     ## fast non-blocking data
  . /dev/hrandom --> old /dev/random  ## slow blocking data
  . /dev/jrandom --> kernel jitter driver


author: John Masinter <john.masinter@intel.com> 4.9.54-1
changelog:
  - Update to latest patch
  - build perf tools
  - add kprobes and debug-info, for minimal debug capability.


author: John Masinter <john_masinter@mcafee.com> 4.9.76-1
changelog:
  - Update to latest patch
  - improvement of fix for CVE-2017-5754 a.k.a. Meltdown
  - Enable microcode loading needed to update intel CPUs


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Pingfan Liu <piliu@redhat.com> - 2.0.0-309
changelog:
  - mkdumprd: Fix mkdumprd fail when cluster node uses ipv6
  - mkdumprd: fix the search criteria for detection of RAID devices


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-34
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Adam Jackson <ajax@redhat.com> 1.0.4-4
changelog:
  - xau-1.0.4-local.patch: When looking for an auth cookie on local transport,
    don't bother checking hostname, it can't possibly help.


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-2
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Eric Smith <eric@brouhaha.com> - 0.3.0-1
changelog:
  - Update to latest upstream release.
  - Removed Patch0, fixed upstream.
  - Removed BuildRoot, clean, defattr.


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 1.12-1
changelog:
  - New upstream version
  - New upstream web site (thanks JPO!)
  - Patch for inconsistent shrext variable
  - Minor edits for consistency


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-3
changelog:
  - add back the nistp521r1 EC curve
  - fix a bug in the Whirlpool hash implementation
  - speed up the PBKDF2 computation


author: Tomáš Mráz <tmraz@redhat.com> 1.6.1-1
changelog:
  - new upstream version breaking ABI compatibility
  - this release temporarily includes old compatibility .so


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-3
changelog:
  - Disable rijndael, cast5, camellia ARM assembly, as it's non-PIC as
    presently written, which results in .text relocations in the shared
    library. (rhbz#1069792)


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-4
changelog:
  - Re-enable below algos, apply patch from upstream list to make
    that code -fPIC friendly. (rhbz#1069792)


author: Tomáš Mráz <tmraz@redhat.com> 1.6.3-3
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap) (#1204517)


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Tom Lane <tgl@redhat.com> - 6b-38
changelog:
  - Initial review of package by new (old?) maintainer; marginal specfile cleanup
  - Restore libjpeg.a to distribution, in a separate -static subpackage
  Resolves: #186060, #215537
  - Fix non-security-significant buffer overrun in wrjpgcom, per Lubomir Kundrak
  Resolves: #226965
  - Apply patch4 that was added by previous maintainer, but never applied
  Resolves: #244778
  Related: #238936
  - Fix inter-RPM dependencies to include release
  Resolves: #238780


author: Tom Lane <tgl@redhat.com> - 6b-40
changelog:
  - Rip out the long-obsolete version of libtool that shipped with libjpeg 6b,
    and instead use the build system's libtool.  This obsoletes most of the
    patches we were carrying.
  - Fix configure script to #define the various HAVE_FOO macros as 1, not empty,
    for better compatibility with most other autoconf-using packages.  (This
    requires importing the original IJG configure.in, which was not shipped
    in libjpeg-6b for reasons that no longer seem very good.)
  Resolves: #427616


author: Tom Lane <tgl@redhat.com> - 6b-44
changelog:
  - Fix libtool hacking so it also works with libtool 2.2.  (For the
    moment the specfile still also works with libtool 1.5, but that can
    go away eventually.)


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Simone Caronni <negativo17@gmail.com> - 1.17-27
changelog:
  - Fix FTBFS (#1307740).
  - Update sources, requires libtommath 1.x, drop upstreamed patches.
  - Update URL.
  - Use license macro.
  - Clean up SPEC file.


author: Simone Caronni <negativo17@gmail.com> - 1.17-28
changelog:
  - Fix shared object name:
    https://github.com/libtom/libtomcrypt/commit/14272976d0615b546e9e0215ec4e2f01854a2dc9


author: Simone Caronni <negativo17@gmail.com> - 1.17-31.20170327git7532b89
changelog:
  - Update to latest snapshot.
  - Use correct format for snapshots as per packaging guidelines.
  - Use default compiler flags.


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170419-73.gitb1413458
changelog:
  - Update to the latest upstream snapshot
  - New nvidia, netronome, and marvell firmware
  - Updated intel audio firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170828-76.gitb78acc9
changelog:
  - Update to latest upstream snapshot
  - ath10k, iwlwifi, kabylake, liquidio, amdgpu, and cavium crypot updates


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171009-78.gitbf04291
changelog:
  - Updated cxgb4, QCom gpu, Intel OPA IB, amdgpu, rtlwifi
  - Ship the license in %license for all sub packages
  - Modernise spec


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171123-79.git90436ce
changelog:
  - Updated Intel GPU, amdgpu, iwlwifi, mvebu wifi, liquidio, QCom a530 & Venus, mlxsw, qed
  - Add iwlwifi 9000 series


author: Josh Boyer <jwboyer@fedoraproject.org> 20171126-80.git17e62881
changelog:
  - Updated bcm 4339 4354 4356 4358 firmware, new bcm 43430
  - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417


author: Josh Boyer <jwboyer@fedoraproject.org> 20171215-81.git2451bb22
changelog:
  - Updated skl DMC, cnl audio, netronome SmartNIC, amdgpu vega10 and raven,
    intel bluetooth, brcm CYW4373, and liquidio vswitch firmwares


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.1.2-2
changelog:
  - patch lm_sensors-3.1.2-lm85.patch add into sensors-detect driver lm85
  - Resolved: 578527 - sensors-detect fails to detect


author: Hans de Goede <hdegoede@redhat.com> - 3.3.0-2
changelog:
  - Fix sensors-detect with the udevdb now living under /run (#697565)
  - Provide a native systemd service file (#692159)
  - Drop systemv initscript
  - Drop configuration conversion scripts, the last Fedora with lm_sensors-2.x
    was Fedora 8 !


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-8
changelog:
  - Fixing use of uninitialized 'vendor_id' value on ppc (#996590)
  - Fixing bogus date in the changelog


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-10
changelog:
  - fix #604686 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-19
changelog:
  - fix #1047899 - add support for "maxsize" directive
  - fix #1125769 - add support for "createolddir" directive


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-8
changelog:
  - fix #1201252 - delete unused entries in state file, fix bad performance
    with big state file
  - fix #1272236 - move logrotate.status to /var/lib/logrotate and add it to rwtab.d


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-13
changelog:
  - fix #1393247 - migration of state file from previous versions of logrotate
  - fix #1374331 - preserve SELinux context with 'compress' and 'sharedscripts'
  - fix #1377335 - make 'createolddir' preserve sticky bit
  - fix #1369438 - heap buffer overflow when using long date format
  - fix #1375638 - make olddir respect the missingok flag


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Karel Zak <kzak@redhat.com> 4.80-1
changelog:
  - upgrade to 4.80
    - lsof_4.78C-inode.patch - merged upstream
    - lsof_4.78C-selinux.patch - merged upstream
    - lsof_4.78C-threads.patch - rebased


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - Patch from James M. Leddy, fixes interaction of -c and -o
  - Fix compilation by using -D_LARGEFILE64_SOURCE
  - related: #447404


author: Petr Machata <pmachata@redhat.com> - 0.5-15.45svn.1
changelog:
  - Bring over patches from RHEL 5
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Resolves: #528466


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Do not check for suspended devices if scanning for lvmetad update.
  - Fix part. table filter with external_device_info_source="udev" and blkid<2.20.
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Use uninitilized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad vg lookup code.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Clear cached bootloader areas when PV format changed.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().
  - Improve status parsing for thin-pool and thin devices.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Allow for raid leg replacement if not both data and metadata image are on pvs.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Ville Skyttä <ville.skytta@iki.fi> - 2.1.30-1
changelog:
  - Update to 2.1.30, see NEWS for details.
  - Improve summary and description.
  - Add MIT to License: for mailcap.4 man page.
  - Specfile cleanup.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Petr Machata <pmachata@redhat.com> - 1:3.81-12
changelog:
  - Fix the rlimit patch.  The success flag is kept in memory shared
    with parent process after vfork, and so cannot be reset.
  - Related: #214033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.22-13
changelog:
  - Resolves: #528546
    add preadv and pwritev syscalls description
  - Resolves: #613777
    update get_mempolicy man page
  - Resolves: #634626
    remove the obsolete scsi(4) link from sd(4)
  - Resolves: #634986
    remove the BUGS part to NOTES
  - Resolves: #669768 
    remove obsolete man page


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.22-15
changelog:
  - Resolves: #679894
    add scopev4 to gai.conf man page
  - resolves: #679530
    crypt(3) incorrect key length


author: Peter Schiffer <pschiffe@redhat.com> - 3.22-18
changelog:
  - resolves: #840798
    added warning about 32bit app on 64bit OS to the getdents(2) man page
  - resolves: #822317
    added note that bdflush(2) syscall is obsolete
  - resolves: #752778
    removed db(3) man page with invalid link
  - resolves: #840791
    clarify notfound status on the nsswitch.conf(5) man page
  - resolves: #835679
    mentioned new supported 'services' database on the nscd.conf(5) man page
  - resolves: #745501
    mentioned SSSD on the nsswitch.conf(5) man page
  - resolves: #840796
    updated documentation of the connect(2) call on the ip(7) man page
  - resolves: #714075
    added cciss(4) and hpsa(4) man pages
  - resolves: #804003
    added missing socket options on the ip(7) man page
  - resolves: #714078
    removed documentation for 'order' keyword in the host.conf(5) man page
  - resolves: #714073
    added fattach(2) man page as a link to the unimplemented(2) man page
  - resolves: #840805
    added default values for attributes on the nscd.conf(5) man page
  - resolves: #809564
    added description of EIDRM error to the shmop(2) man page
  - resolves: #745152
    added description of the single-request and single-request-reopen options
    to the resolv.conf(5) man page
  - resolves: #714074
    added recvmmsg(2) man page
  - resolves: #745521
    added description of the UMOUNT_NOFOLLOW flag on the umount(2) man page
  - resolves: #745733
    added sendmmsg(2) man page
  - resolves: #735789
    removed outdated man pages from man-pages_syscalls-01.tar.bz2 archive
    which were replacing newer man pages from upstream man-pages-3.22.tar.bz2
  - resolves: #857163
    fixed description of option n in the tzset(3) man page
  - resolves: #857162
    documented the fact that using shutdown(2) before close(2) is recommended
    when dealing with sockets on the close(2) man page
  - resolves: #858278
    fixed error code on the connect(2) man page
  - resolves: #858240
    updated zdump options in the zdump(8) man page
  - resolves: #857962
    updated description of /proc/sys/fs/file-nr file in the proc(5) man page


author: Peter Schiffer <pschiffe@redhat.com> - 3.22-19
changelog:
  - related: #735789
    renamed modified tarball man-pages_syscalls-01.tar.bz2
    to man-pages_syscalls-02.tar.bz2


author: Akira TAGOH <tagoh@redhat.com> - 20100115-3
changelog:
  - Get rid of manpages related to SysVinit. (#579647)
  - Add deprecated notice for the usage of PORT in sink directives. (#600324)
  - Revise echo(1) (#618934)
  - Add descriptions for the extended and device format fields. (#628891)


author: Akira TAGOH <tagoh@redhat.com> - 20100115-4
changelog:
  - Add manpages related to upstart. (#579641)
  - Fix a typo in getpriority(2) (#682122)
  - Revert a patch to correct wall(1) again (#699301)
  - Revise the outdated tar(1) (#710704)


author: Akira TAGOH <tagoh@redhat.com> - 20100115-9
changelog:
  - Fix a typo in shmat(2) (#1140481)
  - Add missing %n and %N description for date(1) (#1157413)
  - Add deprecation remarks for intr in nfs(5) (#1173391)
  - Fix a typo in xinetd(8) (#1174088)


author: Akira TAGOH <tagoh@redhat.com> - 20091215-1
changelog:
  - updates to 20091215.
  - apply some patches to correct typos:
    - man-pages-ja-486655-mkfs.8.patch
    - man-pages-ja-509048-less.1.patch
    - man-pages-ja-515467-strings.1.patch
    - man-pages-ja-527638-chgrp.1.patch
    - man-pages-ja-537103-ip.7.patch
    - man-pages-ja-fix-mdoc.patch
  - clean up the spec file.


author: Jindrich Novy <jnovy@redhat.com> 4.6.99-0.20090731git
changelog:
  - update to latest GIT mc
  - forwardport prompt fix and exit patch, keep IPv6 patch and drop the others


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3-0.1
changelog:
  - updated to 1.0pre3
  - added initscript for Predictive Failure Analysis (PFA) which does not
    run by default.


author: Joe Nall <joe@nall.com> 0.3.1-1
changelog:
  - Rewrite translations to allow individual word/category mapping
  - Eamon Walsh's color mapping changes


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-3.el6_8.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Florian La Roche <laroche@redhat.com> - 1.08-1
changelog:
  - change Source: tag
  - Bernardo Innocenti bernie at codewiz.org: add LDFLAGS to opt patch
    to enable cross building on 64bit host
  - release 1.08 with loginpause option from Bernardo Innocenti bernie at codewiz.org


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.3-5
changelog:
  - rename getline to avoid conflict with glibc (#511715)
  - remove makefiles from docs
  - drop wchar patch


author: Ed Hein <eduard_hein@mcafee.com> - 6.1-2
changelog:
  - force generation of initrd
  - fix path to kernel and initrd if /boot is not a separate partition
  - mount /dev/shm, /proc and /sys in initrd


author: Ed Hein <eduard_hein@mcafee.com> - 6.1-3
changelog:
  - use /sbin/switch_root from util-linux-ng instead of busybox as
    latter doesn't handle automatic moving of mounted filesystems
    into new root


author: John Masinter <john_masinter@mcafee.com> 6.1-8
changelog:
  - Adjust one critical line that tests for root device on LVM.
  - Merged by John Masinter, but solution provided by Greg Ungerer.


author: John Masinter <john_masinter@mcafee.com> 6.1-14
changelog:
  - Import fixes from MWG team:
  - detect virtualized platform and install required modules in initrd
  - fix location of hyperv modules
  - reenable network device renaming (MWG specific)


author: John Masinter <john.masinter@intel.com> 6.1-16
changelog:
  - mkinitrd will automatically add autofs4 kernel module to initrd
  - Mount root at type ext4 to eliminate ext2/3 "unsupported option"


author: John Masinter <john.masinter@intel.com> 6.1-17
changelog:
  - mkinitrd will add "other" to boot.cfg if /etc,/usr,/lib not on root fs
  - init will read "other" and mount these before switch_root


author: Veerendra C <veerendra.chandrappa@intel.com> 6.1-19
changelog:
  - mkinitrd will automatically add Xfs kernel module to initrd
  - To mount rootfs as type xfs during firstboot


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-3
changelog:
  - Merge review fixes, based on a patch by Parag AN:
    - Use %{_localstatedir}/lib instead of hard-coding /var/lib
    - Use %
    - Preserve file time stamps
    - Only create the group if it doesn't exist, hide errors from rpm


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-2
changelog:
  - Add "lustre" to PRUNEFS
  - Add all nodev filesystems from the Fedora kernel to PRUNEFS, to make
    (updatedb) work as some users expect
    Related: #543948


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-4
changelog:
  - Fix a typo in locate(1)
    Resolves: #690800
  - When encountering an empty file name in updatedb, print the name of the
    offending directory instead of aborting
    Resolves: #699363


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-5
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1023779)
  - use more strict permissions for cron script and mark it as config (#1012534)
  - add gpfs to PRUNEFS (#1168301)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-6
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182304)


author: Petr Pisar <ppisar@redhat.com> - 2.0.4-12
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626272)


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Rich Edelman (rich.edelman@openwave.com)
changelog:
  - Upgraded to version 1.2.0-RC7
  - Changed Makefile to use /lib/modules/`uname -r`/build as the KERNEL_PATH 
    directory, instead of /usr/src/linux. This should make building this package
    across different distributions easier. (Patch mpt-status-fix-kernel-path.diff)


author: Sven Hoexter <sven@timegate.de> - 1.2.0-1
changelog:
  - Add Patch1 and Patch2, taken from Debian and re-diffed for a
    generic path.
  - Add BuildRequires pciutils-devel.
  - Add 'dist' to the release version.
  - Add BuildRoot format from one of the Fedora examples.
  - Change Packager to Sven Hoexter <sven@timegate.de>.
  - Copy the short and long description from the Debian package.


author: Sven Hoexter <sven@timegate.de> - 1.2.0-2
changelog:
  - Start summary with a capital letter (rpmlint).
  - Change License to GPLv2+ (rpmlint).
  - Remove 'Packager' tag (rpmlint).
  - Remove macro from the prior changelog entry (rpmlint).
  - Add -q to the 'setup' macro (rpmlint).
  - Edit 'Source' tag to contain the upstream URL (rpmlint).


author: Sven Hoexter <sven@timegate.de> - 1.2.0-3
changelog:
  - Add mpt-status.init as Source10 and install it into the package.
  - Require redhat-lsb, daemonize and chkconfig/service for post/preun.
  - post and preun snippets to add/remove mpt-status from the
    chkconfig service list.


author: Adam Tkac <atkac redhat com> 4.0.9-1
changelog:
  - updated to 4.0.9
  - merged mtools-3.9.7-bigdisk.patch to config patch
  - mtools400-rh480112.patch merged to upstream


author: Solar Designer <solar-at-owl.openwall.com> 3.7.20050808-owl1
changelog:
  - Updated to version from current OpenBSD (post-3.7).
  - Added VIS_GLOB support into *vis(), originally by phk of FreeBSD.
  - Fixed a number of bugs in mtree spec file creation and parsing, including
  with processing of filenames starting with the hash character ('#') or
  containing glob(3) wildcard characters, of comment lines ending with a
  backslash ('\\'), and of files not ending with a linefeed; the fixes are
  generic and need to be fed back to *BSDs.


author: Ralf Horstmann <ralf_horstmann@securecomputing.com> 3.7.20050808-cg1
changelog:
  - initial import of mtree-3.7.20050808-owl1 from openwall
  - add mtree-3.7.20050808-cg-build.patch, gcc wants to have the libs last


author: Petr Šabata <contyk@redhat.com> - 1.84-23
changelog:
  - Remove offensive language from some of the scripts (#1064755)
  - Accept HTTP/1.1 proxy responses (#1000773)


author: Matthias Saou <http://freshrpms.net/> 2:3.2.1-1
changelog:
  - Update to 3.2.1.
  - Drop Kame IPv6 patch, should fix #153019. Upstream doesn't seem to want to
    support IPv6 just yet, so for people requiring IPv6, switching to lftp or
    some other alternative is probably best.
  - Drop epsv patch, since it applied on top of the IPv6 patch.
  - Clean up included docs (don't include Windows specific ones).


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)
  - fixed HOST-RESOURCES-MIB::hrSystemProcesses (#1134335)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-51
changelog:
  - added faster caching into IP-MIB::ipNetToMediaTable (#789500)
  - fixed compilation with "-Werror=format-security" (#1181994)
  - added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#886468)
  - fixed error check in IP-MIB::ipAddressTable (#1012430)
  - fixed agentx client crash on failed response (#1023570)
  - fixed dashes in net-snmp-config.h (#1034441)
  - fixed crash on monitor trigger (#1050970)
  - fixed 'netsnmp_assert 1 == new_val->high failed' message in system log
    (#1065210)
  - fixed parsing of 64bit counters from SMUX subagents (#1069046)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070075)
  - fixed net-snmp-create-v3-user to have the same content on 32 and 64bit
    installations (#1073544)
  - fixed IPADDRESS value length in Python bindings (#1100099)
  - fixed hrStorageTable to contain 31 bits integers (#1104293)
  - fixed links to developer man pages (#1119567)
  - fixed storageUseNFS functionality in hrStorageTable (#1125793)
  - fixed netsnmp_set Python bindings call truncating at the first '\000'
    character (#1126914)
  - fixed log level of SMUX messages (#1140234)
  - use python/README to net-snmp-python subpackage (#1157373)
  - fixed forwarding of traps with RequestID=0 in snmptrapd (#1146948)
  - fixed typos in NET-SNMP-PASS-MIB and SMUX-MIB (#1162040)
  - fixed close() overhead of extend commands (#1188295)
  - fixed lmSensorsTable not reporting sensors with duplicate names (#967871)
  - fixed hrDeviceTable with interfaces with large ifIndex (#1195547)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-52
changelog:
  - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is
    received (#CVE-2014-3565)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-55.el6
changelog:
  - Fixed 'clientaddr' option for UDPv6 client messages (#1279501)
  - Increased maximum size of AgentX packets (#1271196).
  - Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
    (#1250023).
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1246568)
  - Fixed typos in NET-SNMP-AGENT-MIB.txt (#1241865)
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1227640)
  - Restored message about duplicate IP address (#1227374)
  - Fixed fd leak in sctp statistics (#1291054)


author: Josef Ridky <jridky@redhat.com> - 1:5.5-58.el6
changelog:
  - Resolves: #1315481 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #580054)
  - fixed typo in statistics.c
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Steve Dickson <steved@redhat.com> 1.2.3-29
changelog:
  - V4 mounts hang on exports to netgroups (bz 815673)
  - Strip the '[]' off of ipv6 addresses (bz 811882)
  - Removed a use_ipaddr race in mountd (bz 797209)


author: Steve Dickson <steved@redhat.com> 1.2.3-30
changelog:
  - gssd: Don't link with libgssapi_krb5 (bz 784909)
  - Fix referrals that use IPv6 addresses (bz 820737)
  - Add -l option to gssd to force legacy behaviour (bz 802469)
  - Add support to svcgssd to limit the negotiated enctypes (bz 802469)
  - Changed nfs.init to allow umounts to happen cleanly during 
    system shutdown (bz 856923)


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-14
changelog:
  - consistently use '%global with_foo' style of logic
  - remove PID file before starting nginx (#1268621)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.1-1
changelog:
  - update to upstream release 1.8.1
  - CVE-2016-0747: Insufficient limits of CNAME resolution in resolver
  - CVE-2016-0746: Use-after-free during CNAME response processing in resolver
  - CVE-2016-0742: Invalid pointer dereference in resolver


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.21-1
changelog:
  - new upstream release 0.10.21
    http://blog.nodejs.org/2013/10/18/node-v0-10-21-stable/
  - resolves an undisclosed security vulnerability in the http module


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Kai Engert <kaie@redhat.com> - 3.21.3-2
changelog:
  - Mozilla #1314604 / Red Hat CVE-2016-8635
  - remove disable_hw_gcm.patch which hasn't been used since 3.16.1


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Rebase to NSS 3.36.0 BETA
  - Remove upstreamed nss-is-token-present-race.patch
  - Revert the upstream changes that default to sql database


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Use the correct tarball of NSS 3.36 release
  - Ignore EncryptDeriveTest which only works with newer nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-5
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-9
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-3
changelog:
  - fix problems found by qe:
  - AC13: SSL3 "disabled"
  - AC26: Chacha20 and TLS 1.3 ciphers should be prioritized
  -   SHA-384 PRF => *_256_GCM_SHA384 ciphers should be reenabled for consistency
  - AC28: nss-policy-check is missing from packages and $PATH
  - extra: apostrophes in certutil manpage got mangled


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-10
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-23
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-24
changelog:
  - Apply two patches from upstream
  - Resolves: rhbz#1105382 - nslcd: error reading from client: Success


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-25
changelog:
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-26
changelog:
  - Apply patches in prep
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-27
changelog:
  - Resolves: rhbz#1240388 - nslcd fails to fetch member of group if that
                             members name has 19 or more character in its name


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-30
changelog:
  - Resolves: rhbz#1293564 - Segmentation fault during upstream make check
  - Also fix regressions in the tio.c module revealed by subsequent testing


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-31
changelog:
  - Resolves: rhbz#1293564 - fix doc to describe actual uri format
                             in nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-32
changelog:
  - Don't double-close the socket
  - Resolves: rhbz#1309364 - Use-after-free in case resolving hosts or
                             networks fail


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.1
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.2
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12.el6_9.1
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Jochen Darley <jochen_darley@mcafee.com> 4.2.8p12-3
changelog:
  - Fix package ntp-perl by removing update-leap
  - Fix package sntp by removing systemd-units dependency

  +* Wed Dec 22 2018 John Masinter <john_masinter@mcafee.com> 4.2.8p12-2
  +- update from CentOS


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Veerendra C <veerendra_chandrappa@mcafee.com> 9.2.3-1
changelog:
  - Update to version open-vm-tools-9.2.3-1031360
  - Removes vmsync since 3.0+ kernel support FIFREEZE/FITHAW ioctls.


author: Veerendra C <veerendra_chandrappa@mcafee.com> 9.2.3-3
changelog:
  - vmblock driver is disabled on kernels 3.0+.
  - vmemctl driver is removed from open-vm-tools as it is part of mainline kernel


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.1-1
changelog:
  - New upstream release.
  - spec file updates:
    * Cleanup macro usage
    * Drop Conflict: in favour of correct Requires:
    * Whitespace cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.1.1-2
changelog:
  - Resolves: rhbz#555164
  - Resolves: rhbz#557275
  - Resolves: rhbz#557622
  - Add upstream revision 2104 - Fix saCkptDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2105 - Fix saTmrDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2106 - Fix saLckDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2107 - Fix saClmDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2108 - Fix saMsgDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2109 - Prevents iteration of a checkpoint section during synchronization.
  - Add upstream revision 2111 - Update to openais.spec.in to fix URL and File location.


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2f-1
changelog:
  - minor upstream release 1.0.2f fixing security issues
  - add support for MIPS secondary architecture


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2
changelog:
  - reenable SSL2 in the build to avoid ABI break (it does not
    make the openssl vulnerable to DROWN attack)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-2
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - add support for /etc/pki/tls/legacy-settings also for minimum DH length
    accepted by SSL client
  - compare the encrypt and tweak key in XTS as required by FIPS


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4
changelog:
  - add support for additional STARTTLS protocols to s_client
    original backported patch by Robert Scheck (#1396209)


author: John Masinter <john_masinter@mcafee.com> 1.0.2p-1
changelog:
  - Update to latest openssl 1.0.2p release
  - fixes CVE-2018-0732 DOS via TLS handshake using a DH(E)
  - fixes CVE-2018-0737 recover RSA private key via cache timing side channel attack


author: John Masinter <john_masinter@mcafee.com> 1.0.2p-3
changelog:
  - Add pkg openssl-cavp for running FIPS lab test vectors
  - See /lib/fips/cavp/openssl/cavs/openssl-cavp.COS.README.txt


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.0-1
changelog:
  - Update to parted v3.0
  - Run autoreconf so that patches to .am files will work
  - Add patch to Fix snap radius and don't allow values < 1 (#665496)
  - Add tests for the snap radius fix.
  - Drop patches included in upstream release


author: Brian C. Lane <bcl@redhat.com> - 3.0-3
changelog:
  - Fix handling of zero-length gpt partitions (#728949)
  - Fix bug in nilfs2 probe with short partitions (#728949)
  - Fix bug in hfs probe code (#714758)
  - Make pc98 detection depend on specific signatures (#646053)


author: Brian C. Lane <bcl@redht.com> - 3.0-4
changelog:
  - Fix ped_disk_duplicate on GPT so that it copies the partition flags (#747947)
  - Add new test to check ped_disk_duplicate on msdos, gpt, bsd disk labels
  - Add e2fsprogs and dosfstools so that skipped tests will be run


author: Brian C. Lane <bcl@redhat.com> - 3.0-6
changelog:
  - gpt: add commands to manipulate pMBR boot flag (#754850)
  - parted: when printing, also print the new disk flags
  - tests: update tests for new disk flags output
  - tests: add test for GPT PMBR pmbr_boot flag
  - doc: update parted documentation


author: Brian C. Lane <bcl@redhat.com> 3.1-2
changelog:
  - libparted: check PMBR before GPT partition table (#805272)
  - tests: add a test for the new behavior


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-6
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Radek Brich <rbrich@redhat.com> - 3.4-2
changelog:
  - applied patch for #239000 (pax fails creation of ustar
    if an absolute name is exactly 100 characters long)


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-7
changelog:
  - Merge review #226235: do ship doc files,
    do comment patches, use better buildroot and
    defaults for attributes, allow parallel builds


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 7.8-7
changelog:
  - Check starting offest for pointing into a subject string
    (Resolves: #1193524)
  - Pass back detailed error when UTF-8 check fails at runtime
    (Resolves: #1193524)


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Steven Pritchard <steve@kspei.com> 2.11-1
changelog:
  - Update to 2.11.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to resemble cpanspec output.
  - Drop explicit perl build dependency.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.21-1
changelog:
  - Update to 0.21.
  - Corrected several changelog entries.
  - Removed an explicit perl(Convert::ASN1) provides.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Robin Norwood <rnorwood@redhat.com> - 1.601-1
changelog:
  - Update to latest CPAN version: 1.601
  - Fix some issues from package review:
    - patch to change #! line in script
    - make script executable
    - fix requires and buildrequires


author: Marcela Mašláňová <mmaslano@redhat.com> - 6.3-1
changelog:
  - new upstream version - noarch, because since 6.0 there were bigger
   changes like stripping this module into more of them


author: Ville Skyttä <ville.skytta at iki.fi> - 2.11-2
changelog:
  - Sync with latest rpmdevtools perl spec template.
  - BuildRequire perl(ExtUtils::MakeMaker).
  - Convert docs to UTF-8.


author: Steven Pritchard <steve@kspei.com> 1:0.17011-1
changelog:
  - Update to 0.17011.
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Improve Summary.
  - Reformat to match cpanspec output.
  - Build with Module::Build.


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Steven Pritchard <steve@kspei.com> 0.24-2
changelog:
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Source in /etc/profile.d/krb5-devel.sh to get our path right.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Chris Weyl <cweyl@alumni.drew.edu> 1:2.27-1
changelog:
  - update by Fedora::App::MaintainerTools 0.004
  - PERL_INSTALL_ROOT => DESTDIR
  - added a new br on perl(common::sense) (version 0)
  - added a new req on perl(common::sense) (version 0)


author: Robin Norwood <rnorwood@redhat.com> - 1:0.33-3
changelog:
  - Bugzilla: 207430
  - Incorporate fixes from Jose Oliveira's patch
  - Add perl(IO::Socket::SSL) as a BuildRequires as well
  - Other cleanups from Jose


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Paul Howarth <paul@city-fan.org> 2.02-1
changelog:
  - Update to 2.02
  - Remove buildreqs perl(Net::SMTP) and perl(Net::Domain), bundled with perl
  - Add buildreqs perl(Date::Format), perl(Date::Parse), perl(Test::More), and
    perl(Test::Pod)
  - Remove patch for CPAN RT#20726, now fixed upstream
  - Buildreq perl >= 5.8.1
  - Tweak files list to mark pod files as %doc
  - Fix character encoding for ChangeLog


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.03-7
changelog:
  - Fix bug 226273:
    * Add dist tag.
    * Fix rpmlint errors for %description.
    * Remove MANIFEST from package.
  - General clean up of spec file.


author: Robin Norwood <rnorwood@redhat.com> 1.95.1-3
changelog:
  - apply fixes from package review:
    - remove BR: perl
    - use iconv to convert file to utf-8
    - include BR: perl(Test::Pod)
    - fix old changelog entry
  - resolves: bz#226274


author: Chris Weyl <cweyl@alumni.drew.edu> 1.962.2-1
changelog:
  - updated for latest GA SQL::Translator
  - add default filtering
  - auto-update to 1.962.2 (by cpan-spec-update 0.01)
  - added a new br on perl(Text::Balanced) (version 0)


author: Paul Howarth <paul@city-fan.org> 1.962.2-2
changelog:
  - BR: perl(Carp)
  - spec file clean-up
  - remove redundant filtering
  - fix perl interpreter locations in demo scripts
  - re-code upstream Changes file as UTF-8


author: Paul Howarth <paul@city-fan.org> 1.965-1
changelog:
  - update to 1.965001
    - fixed subtle bug in leftop and rightop caused by removal of $&
    - fixed bug with undefined $1 when parsing literals
    - fixed premature namespace destruction bug with compiled grammars
    - removed all references to /opt's version of perl interpreter
    - added Parse::RecDescent::redirect_reporting_to() to enable ERROR, TRACE
      and TRACECONTEXT filehandles to be easily redirected
  - use a patch rather than scripted iconv to convert files to UTF-8


author: Steven Pritchard <steve@kspei.com> 0.19-1
changelog:
  - Update to 0.19.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20 (test updates)
  - No README in upstream distribution
  - BR: perl(Test::More)
  - More specific files list


author: Ondrej Vasik <ovasik@redhat.com> - 1.03ii-16.3
changelog:
  - added dist tag
  - License to GPL+
  - spec file cleanup (all things from merge review by pnemade #226278)


author: Paul Howarth <paul@city-fan.org> 1.4-3
changelog:
  - fix typo in %summary and tidy up %description
  - remove redundant dependency on perl >= 1:5.6.1
  - fix argument order for find with -depth
  - drop "|| :" from %check (only required for ancient rpmbuild versions)
  - add buildreq perl(ExtUtils::MakeMaker)


author: Steven Pritchard <steve@kspei.com> 0.1901-1
changelog:
  - Update to 0.1901.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.30-10
changelog:
  - remove the last test, which lead to hang-up of test suite in mock
   Test are non standart, it was need a patch.
  - Resolves: rhbz#558919


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - Drop executable bits.


author: Steven Pritchard <steve@kspei.com> 0.082-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit dependency on perl(Test::Tester).  (Seems to be bogus.)


author: Steven Pritchard <steve@kspei.com> 1.032-1
changelog:
  - Update to 1.032.
  - Use fixperms macro instead of our own chmod incantation.
  - Add LICENSE to docs.


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11 (#477298)
  - Buildreq ExtUtils::MakeMaker, File::Spec, Test::Builder,
    Test::Builder::Tester, and Test::More (from upstream Makefile.PL)
  - Add runtime dependencies on Test::Builder and Test::Builder::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> 0.21-1
changelog:
  - add perl default filter (pro forma)
  - use _fixperms incantation
  - auto-update to 0.21 (by cpan-spec-update 0.01)
  - altered br on perl(Test::Builder::Tester) (0 => 1.02)
  - altered req on perl(Test::Builder::Tester) (0 => 1.02)


author: Steven Pritchard <steve@kspei.com> 0.35-3
changelog:
  - Improve Summary, description, and Source0 URL.
  - Fix find option ordering.
  - Don't generate license texts.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.37-1
changelog:
  - add filtering
  - auto-update to 1.37 (by cpan-spec-update 0.01)
  - altered br on perl(Algorithm::Diff) (0 => 1.19)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test) (version 0)


author: Steven Pritchard <steve@kspei.com> 1:1.16-4
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.
  - Remove check macro cruft.


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-7
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.
  - Resolves: rhbz#562173


author: Robin Norwood <rnorwood@redhat.com> - 2.17-1
changelog:
  - Update to latest CPAN version: 2.17
  - Add BuildRequires
  - Fix macro-in-changelog rpmlint warning
  - Fix license tag


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Paul Howarth <paul@city-fan.org> - 3.4-4
changelog:
  - Reinstate compatibility with older distributions like EL-5
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 3.5-1
changelog:
  - Update to 3.5:
    - Localise $^W, as this causes warnings with 5.16 when some lost soul uses
      -w; common::sense doesn't support $^W, but tries to shield module authors
      and programs from its ill effects
  - Don't need to remove empty directories from buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-3
changelog:
  - Used append instead of write for init_logfile (#660329)
  - Fixed and ghosted /var/run/pm-utils (#656668)
  - Added postun script to clean state storage
  - Updated pm-utils-bugreport-info.sh, it requires root privileges for
    correct function, moved to sbin


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-12
changelog:
  - Added support for grub2 in 01grub hook (grub2 patch)
  - Fixed hooks exit code logging (hook-exit-code-log patch)


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-7
changelog:
  - backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
    changing wait timeout to 2 seconds by default


author: Tom Lane <tgl@redhat.com> 9.0.801-3
changelog:
  - Switch to non-GCJ build, since GCJ is now deprecated in Fedora
  Resolves: #722247
  - Use %{_mavendepmapfragdir} to fix FTBFS with maven 3


author: Tom Lane <tgl@redhat.com> 9.0.801-4
changelog:
  - Add BuildRequires: java-1.6.0-openjdk-devel to ensure we have recent JDK
  Related: #730588
  - Remove long-obsolete minimum versions from BuildRequires


author: Tom Lane <tgl@redhat.com> 9.1.901-3
changelog:
  - Change BuildRequires: java-1.6.0-openjdk-devel to just java-devel.
    As of 9.1-901, upstream has support for JDBC4.1, so we don't have to
    restrict to JDK6 anymore, and Fedora is moving to JDK7
  Resolves: #796580


author: Tom Lane <tgl@redhat.com> 08.03.0100-1
changelog:
  - Update to version 08.03.0100
  - Since it looks like upstream has decided to stick with psqlodbcw.so
    permanently, allow the library to have that name.  But continue to
    provide psqlodbc.so as a symlink.


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.2
changelog:
  - fix integer overflows leading to heap overflow in file2strvec()
  - Resolves: CVE-2018-1124 CVE-2018-1126


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.3
changelog:
  - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
  - Resolves: CVE-2018-1124


author: Ivana Varekova <varekova@redhat.com> - 6.3.2-56
changelog:
  - fix the psacct to deal with all acct types and
    if it is possible and wanted then add the possibility
    to display the pid and ppid number


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-66
changelog:
  - Resolves: rhbz#837621
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-5
changelog:
  - Patch pth-config.
    This shall fix the multiarch conflict in pth-devel (#342961).
    It must not return -I/usr/include and -L/usr/{lib,lib64} either,
    since these are default search paths already.
  - Replace the config.status CFLAGS sed expr with a patch.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346354


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346355


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.32.1-1
changelog:
  - Updated to 2.32.1 (RH #1126056, RH #1132348)
  - Added python3-boto (RH #1024363)
  - Added (but did not enable) unit tests (RH #1072946, RH #1072923)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-1
changelog:
  - Updated to 2.34.0 (RH #1072925, RH #1072928, RH #1161229)
  - Made executables point to python2 (RH #1152444)
  - Enabled unit tests on Fedora (RH #1072946)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-2
changelog:
  - Added missing python-requests and python-rsa dependencies
  - Disabled unit tests due to rawhide/F21 python regression (RH #1161166:c4)


author: Charalampos Stratakis <cstratak@redhat.com> - 1:2.34.0-5
changelog:
  - Import to RHEL 6.9
  - Use the epoch tag so the EPEL 6 package can be replaced
  Resolves: rhbz#1423029


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.1-4
changelog:
  - Fix cheetah enough that it will pass its unittests on python-2.6.  This has
    actually been broken since py-2.5 and this fix is only a workaround.


author: David Malcolm <dmalcolm@redhat.com> - 4.6.0-3
changelog:
  - fix source URL
  - use %global rather than %define
  - avoid intermediate "docs" directory in path of documentation


author: Paul Howarth <paul@city-fan.org> - 2.6.1-13
changelog:
  - AES.new with invalid parameter crashes python (CVE-2013-7459)
    (https://github.com/dlitz/pycrypto/issues/176)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-6
changelog:
  - remove embedded copy of timezone data, and redirect the dateutil.zoneinfo
  API accordingly
  Resolves: rhbz#559309
  - add a %check, running the upstream selftest suite


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.4-1
changelog:
  - Release 0.2.4:
  -   Updated to work with Python-2.6 (Python-2.4 and 2.5 are still supported)
  -   Support for files opened in unicode mode
  -   Fixed Python-3.0 compatibility warnings
  -   Minor API cleanup


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.3.0-1
changelog:
  - Release 0.3.0
  -  Fix handling of continuation lines
  -  Fix DEFAULT handling
  -  Fix picking/unpickling


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-3
changelog:
  - Require python-setuptools, otherwise jinja2.__version__ evaluates to "unknown"
  Resolves: rhbz#1121241


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0-4
changelog:
  - Import to RHEL 6.9
  - Increment the release so it will replace the respective EPEL build
  Resolves: rhbz#1422977


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0-1
changelog:
  - Update to 2.0.
  - Adjusted source URL.
  - License changed to BSD only.
  - Upstream now provides a script to run markdown from the cmdline.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0.1-3
changelog:
  - Add requirement on python-elementtree, which was a separate package
    before Python 2.5.
  - Re-add changelog entries accidentally removed earlier.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.4.4-2
changelog:
  - Patch test suite for EL6 and EL7 compatibility (RHBZ #1182808)
  - Add python2 macros for EL6 compatibility (RHBZ #1182808)


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.0-2
changelog:
  - Remove bundled directories altogether, requests are smart enough
    to import system modules, fixes a problem with updating requests
    from 2.3.0
  Resolves: rhbz#1212145


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-4
changelog:
  - Ensure that urllib3.connection module is imported only once so connections
    to HTTPS servers that require SNI support do not fail
  Resolves: rhbz#1382682


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-1
changelog:
  - Switch over to using the "distribute" project; rebase to 0.6.10 (rhbz:570350)
  - Remove svn patch as upstream has chosen to go with an easier change for now.
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-2
changelog:
  - delete stray ".orig" file
  - change %define to %global ; use %{buildroot} rather than env var
  - move %check lower down
  - explicitly list executables


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-3
changelog:
  - cherrypick upstream patch for easy_install (ignore locally installed
  packages: patch0)
  - provide "python-distribute"
  - add README.txt and other .txt documentation files to the payload
  Resolves: rhbz#613138


author: Kyle VanderBeek <kylev@kylev.com> - 2.0.9-1
changelog:
  - Update to 2.0.9
  - Make sure to require gcc to the speedups get compiled
  - Fix description since we're not "pure" python
  - Change to pypi instead of cheesehop


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> 3.9.1-10
changelog:
  - Fix parsing of FTP 213 responses.
  - Resolves: bug#970262
  - Set proper errcode when raising URLGRabError.
  - Resolves: bug#1271242


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Charalampos Stratakis <cstratak@redhat.com> - 1.10.2-2
changelog:
  - Upstream patch for fixing issue of new configs not taken into account
  by the PoolManager instance
  Resolves: rhbz#1329382


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-11
changelog:
  - Add support for 64-bit vfsv1 quota format (bugs #609795, #669598)
  - Use /proc/mounts for mountpoint scanning (#623656)
  - Add quota_nld deamon init script (bug #634137)
  - Comment example quotatab to silent warnquota (bug #663027)
  - Add GFS2 query support via RPC (bug #547748)
  - Document --always-resolve option (bug #662997)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667755)
  - Make RPC block factor dynamic (bug #667755)
  - Check whether set limits fit into the range supported by quota format
    (bug #668709)
  - Check set limits fit into the range supported by RPC transport (bug #668710)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-12
changelog:
  - Do not own common directories under /etc (bug #634137)
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-13
changelog:
  - Correct spec file comment (bug #634137)
  - Add quotasync tool (bug #658586)
  - Implement quotacheck for GFS2 (bug #658586)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-14
changelog:
  - Fix vfsv0 format detection (bug #609795)
  - Initialize vfsold block and inode value boundries for new quota file
    (bug #668709)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-18
changelog:
  - Do not use real domains in warnquota example (bug #680919)
  - Disable grace period/times remote setting (bug #683554)
  - Initialize v2r1 ddquot padding in dump (bug #692390)
  - Make dirname static to work with nss_db (bug #704216)
  - Do not report missing utmp record to syslog (bug #730057)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-19
changelog:
  - Report quotacheck failures by return code (bug #717948)
  - Improve quotacheck error message (bug #717948)
  - Do not fiddle with quota files on XFS and GFS (bug #846120)
  - Allow to set limits using multiplicative units (bug #890051)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-22
changelog:
  - Remove fixed limit on number of autofs mount points (bug #1024097)
  - Print negative quota values properly (bug #1009397)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Florian Festi <ffesti@redhat.com> - 9.0.3-43
changelog:
  - Adjust location of kabi-whitelists
  - Resolves: #842761
  - Be stricter with she bang lines in find-requires
  - Resolves: #1179521


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-45
changelog:
  - Fix latest_kernel macro (#976462)
  - Permit using different python version for brp-python-bytecompile (#1252628)


author: Lubos Kardos <lkardos@redhat.com> - 9.0.3-46
changelog:
  - Remove aarch64 part from regex for the latest kernel. aarch64 is not
    supported in rhel-6 (#976462)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Lubos Kardos <lkardos@redhat.com> - 4.8.0-48
changelog:
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1264052)
  - Fixed problems with perl.req script (#1268021)
  - Document option "--obsoletes" (#1203714)
  - Remove _isa from all BuildRequires (#1287557)
  - Turn removal failure debug messages into warning messages (#1142386)
  - Move bdb warnings from stdin to stdout (#1296212)
  - Improved error message (#1250006)


author: Florian Festi <ffesti@redhat.com> - 4.8.0-57
changelog:
  - Very slow "rpm -q --specfile a.spec" if specfile has thousands of patches (#1383422)
  - Fix refcounting for Python hdr objects (#1438811)
  - Add sources to lua to prevent %autosetup failing in some cases (#1438815)


author: Adam Tkac <atkac redhat com> 0.17-51
changelog:
  - updated ipv6 patch due rpm 4.6 (#465053)
  - make in.rshd working on kernels without audit support (#448904)


author: Adam Tkac <atkac redhat com> - 0.17-60
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Michal Ruprich <mruprich@redhat.com> - 0.17-64.1
changelog:
  - Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-6
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments (#684933)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-7
changelog:
  - Use portreserve to protect rsync/tcp port (#786076)
  - Truncate a copied sparse file at the end of transaction
    (-S, --sparse option) (#737539)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-9
changelog:
  - Revert portreserve, as portrelease functionality needs to be
    implemented first in the rsync binary (#786076)


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-5.1
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #684932


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1109155
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-7
changelog:
  - Addresses segfauls in Marshal.load.
    * ruby-1.8.7-p358-marshal-load-segv-fix.patch
  - Resolves: rhbz#789120


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-8
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-9
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-10
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Related: rhbz#915380


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-11
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-12
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979301


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-13
changelog:
  - Workaround build issues against OpenSSL with enabled ECC curves.
  - Make DRb compatible with OpenSSL 1.0.1.
    * ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch
  - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing
    * ruby-1.9.3-p484-CVE-2013-4164-ignore-too-long-fraction-part-which-does-not-affect-the-result.patch
    - Resolves: rhbz#1033502


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-1
changelog:
  - Update to Ruby 1.8.7-p374.
    * Remove Patch41: ruby-ppc64-segv-fix.patch; subsumed
    * Remove Patch45: ruby-1.8.7-CVE-2011-0188.patch; subsumed
    * Remove Patch46: ruby-1.8.7-FIPS.patch; subsumed
    * Remove Patch47: ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch; subsumed
    * Remove Patch48: ruby-1.8.7-p352-CVE-2011-4815.patch; subsumed
    * Remove Patch49: ruby-1.8.7-p358-marshal-load-segv-fix.patch; subsumed
    * Remove Patch50: ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch; subsumed
    * Remove Patch51: ruby-2.0.0-add-missing-rexml-require.patch; subsumed
    * Remove Patch52: ruby-1.8.7-p371-CVE-2012-4481.patch; subsumed
    * Remove Patch53: ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch; subsumed
    Resolves: rhbz#830098
  - Enable ECC support, provided by OpenSSL, in Ruby
    * ruby-1.9.3-p482-Fix-build-against-OpenSSL-with-enabled-ECC-curves.patch
    Resolves: rhbz#1033864
  - Exclude test that fails when issuing a certificate with RSA signature and
    DSS1 digest for earlier OpenSSL versions when used in conjunction with
    OpenSSL 1.0.1.
    * ruby-1.9.3-p172-Exclude-failing-tests-written-for-earlier-OpenSSL.patch
    Resolves: rhbz#1034351
  - Rename Tracer.fire to SystemTap.fire to avoid conflict with Ruby's tracer.
    Resolves: rhbz#784766


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-2
changelog:
  - Replace hardcoded MD5 by sha256 to prevent SSL server failure in FIPS mode.
    * ruby-1.8.7-p374-Replace-md5-by-sha256-to-fix-SSL-server-FIPS-compatibility.patch
  - Resolves: rhbz#802946


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163993
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163993


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.374-3
changelog:
  - Fix REXML billion laughs attack via parameter entity expansion
    (CVE-2014-8080).
    Resolves: rhbz#1163994
  - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090).
    Resolves: rhbz#1163994


author: Vít Ondruch <vondruch@redhat.com> - 1.3.7-4
changelog:
  - Fix insecure connection to SSL repository (CVE-2012-2125, CVE-2012-2126).
    - Related: rhbz#1002839.


author: SaltStack Packaging Team <packaging@saltstack.com> - 2016.11.5-1
changelog:
  - Update to feature release 2016.11.5
  - Altered to use pycryptodomex if 64 bit and Redhat 6 and greater otherwise pycrypto
  - Addition of salt-proxy@.service


author: tampakrap@opensuse.org
changelog:
  - Rename susemanager plugin to zyppnotify, as it is not SUSE Manager specific
  - Remove the subpackage and put the plugin back to the main package
    according to upstream
    Add:
    * 0007-Add-zypp-notify-plugin.patch
    Remove:
    * 0007-Add-SUSE-Manager-plugin.patch


author: mihai.dinca@suse.com
changelog:
  - Setting up OS grains for SLES-ES (SLES Expanded Support platform)
    Add:
    * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch


author: mihai.dinca@suse.com
changelog:
  - acl.delfacl: fix position of -X option to setfacl (bsc#1004260)
    Add:
    * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch


author: mihai.dinca@suse.com
changelog:
  - Copy .travis.yml from git commit 1829a6086a19a3f887c5216dc8aace9068063cfe
    Add:
    * travis.yml
  - Change travis configuration file to use salt-toaster
    Add:
    * 0078-Change-travis-configuration-file-to-use-salt-toaster.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Adding 'dist-upgrade' support to zypper module
    Add:
    * 0025-Adding-dist-upgrade-support-to-zypper-module.patch


author: mihai.dinca@suse.com
changelog:
  - Fix-pkg.latest_version when latest already installed (bsc#1005329)
    Add:
    * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Including resolution parameters in the Zypper debug-solver
    call during a dry-run dist-upgrade.
    Add:
    * 0027-Including-resolver-params-for-Zypper-debug-solver.patch


author: kkaempf@suse.com
changelog:
  - Update to 2016.3.4
    see https://docs.saltstack.com/en/latest/topics/releases/2016.3.4.html
  - Removed Patches, applied upstream
    * 0008-checksum-validation-when-zypper-pkg.download.patch
    * 0009-unit-tests-for-rpm.checksum-and-zypper.download.patch
    * 0010-snapper-execution-module.patch
    * 0011-fix-salt-summary-to-count-not-responding-minions-cor.patch
    * 0012-Run-salt-api-as-user-salt-bsc-990029.patch
    * 0013-Deprecate-status.uptime-one-version-later.patch
    * 0014-Add-ignore_repo_failure-option-to-suppress-zypper-s-.patch
    * 0015-Remove-zypper-s-raise-exception-if-mod_repo-has-no-a.patch
    * 0016-Improve-Mock-to-be-flexible-and-able-to-mock-methods.patch
    * 0017-Check-for-single-quote-before-splitting-on-single-qu.patch
    * 0018-Unit-tests-fixes-for-2016.3.2.patch
    * 0019-Fix-snapper_test-for-python26.patch
    * 0020-Integration-tests-fixes-for-2016.3.2.patch
    * 0021-Fix-pkg.upgrade-for-zypper.patch
    * 0022-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
    * 0023-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
    * 0024-Change-travis-configuration-file-to-use-salt-toaster.patch
    * 0025-Adding-dist-upgrade-support-to-zypper-module.patch
    * 0026-Fix-pkg.latest_version-when-latest-already-installed.patch
    * 0027-Including-resolver-params-for-Zypper-debug-solver.patch
  - Added patches
    * 0008-snapper-execution-module.patch
    * 0009-fix-salt-summary-to-count-not-responding-minions-cor.patch
    * 0010-Run-salt-api-as-user-salt-bsc-990029.patch
    * 0011-Fix-snapper_test-for-python26.patch
    * 0012-Fix-pkg.upgrade-for-zypper.patch
    * 0013-Setting-up-OS-grains-for-SLES-Expanded-Support-SUSE-.patch
    * 0014-acl.delfacl-fix-position-of-X-option-to-setfacl.patch
    * 0015-Change-travis-configuration-file-to-use-salt-toaster.patch
    * 0016-Fix-pkg.latest_version-when-latest-already-installed.patch
    * 0017-Including-resolver-params-for-Zypper-debug-solver.patch


author: Andreas Schneider <asn@redhat.com> - 3.6.23-21
changelog:
  - resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
  - resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails


author: Andreas Schneider <asn@redhat.com> - 3.6.23-22
changelog:
  - resolves: #1290706 - CVE-2015-5299
  - related: #1290706 - CVE-2015-5296
  - related: #1290706 - CVE-2015-5252
  - related: #1290706 - CVE-2015-5330


author: Andreas Schneider <asn@redhat.com> - 3.6.23-26
changelog:
  - resolves: #1322686 - Fix CVE-2015-5370
  - resolves: #1322686 - Fix CVE-2016-2110
  - resolves: #1322686 - Fix CVE-2016-2111
  - resolves: #1322686 - Fix CVE-2016-2112
  - resolves: #1322686 - Fix CVE-2016-2115
  - resolves: #1322686 - Fix CVE-2016-2118 (Known as Badlock)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-34
changelog:
  - resolves: #1327697 - Fix netlogon credential checks
  - resolves: #1327746 - Fix dcerpc trailer verificaton


author: Andreas Schneider <asn@redhat.com> - 3.6.23-37
changelog:
  - resolves: #1380151 - Fix memory leak in idmap_ad module
  - resolves: #1333561 - Fix smbclient connection issues to DFS shares
  - resolves: #1372611 - Allow ntlmsssp session key setup without signing
                         (Workaround for broken NetApp and EMC NAS)


author: Andreas Schneider <asn@redhat.com> - 3.6.23-38
changelog:
  - resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                         empty list


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1428835 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.23-42
changelog:
  - resolves: #1391256 - Performance issues with vfs_dirsort and extended
                         attributes


author: Andreas Schneider <asn@redhat.com> - 3.6.24-44
changelog:
  - resolves: #1451105 - Fix trusted domain handling in winbind
  - resolves: #1431000 - Fix crash while trying to authenticate with a disabled
                         account
  - resolves: #1467395 - Add 'winbind request timeout' option


author: Zach Carter <z.carter@f5.com> - 1.4.19-1
changelog:
  - rebuild for new boost
  - fix boost 1.46 build issue: leaf() function renamed to filename()
  - update to 1.4.19


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.1-7
changelog:
  - improve man/usage documentation of the -i/--in-place option
    in the case of symlinks/hardlinks(#679921)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.2.1-8
changelog:
  - fix `--copy' option behaviour to unlink sedXXX temp files,
    clean-up the copy-option patch and merge it with the
    `-i/--in-place' docs/manpage patch (#709956)


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-285
changelog:
  -Allow munin apache scripts to manage munin logs and talk with httpd over unix stream socket. 
  Resolves:#1286052
  -Allow httpd to send generic signal to httpd suexec if htpasswd is invoked. Resolves:#1286007
  -Dontaudit httpd running as piranha_web_t accesses to snmp mib indexes. 
  Resolves:#1285674
  -Allow ipsec running as ipsec_t to create pluto.log with correct labeling.
  Resolves:#1267212
  -Allow whack executed by sysadm SELinux user to access /var/run/pluto/pluto.ctl. It fixes "ipsec auto --status" executed by sysadm_t. 
  Resolves:#1257591
  -Dontaudit attemps to write generic tmp_t dirs if gnome-keyring-daemon runs under passwd_t domain. 
  Resovles:#1131531


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-286
changelog:
  - arping running as netutils_t sys_module capability for removing tap devices. Dontaudit this access.
  - Allow hv_vss_daemon to write access on all mount point directories to make VSS live backup if working if there is home partition.
  - Add support for squid to be able to create temoporary files. 
  Resolves:#1291164
  - Allow usbhid-ups to access /proc/bus/usb to have it working on ppc64 machines. 
  Resolves:#1290693
  - Add support for /var/run/chronyd.sock. 
  Resolves:#1290310
  - Update apache_content_template() inteface to allow "shutdown" permissions for apache scripts on unix_stream_socket. 
  Resolves:#1286052
  - Fix label for /var/lib/graphite-web 
  Resolves:#1221934
  - Dontaudit rpm write access for prelink_mask_t Resolves:#1216907
  - Allow apcupsd_t to communicate with sssd Add default label for /var/lock/subsys/apcupsd and /var/lock/LCK.
  Resolves:#1286030
  - Allow shorewall_t to create netlink_socket 
  Resolves:#1290705


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-287
changelog:
  - Allow sssd-ifp to dbus chat with all users. 
  Resolves:#1296693
  - Allow keepalived to connect to 3306/tcp port - mysqld_port_t.
  Resolves:#1296854
  - Add support for stunnel custom log files, allow transition and label /log/stunnel* log files. 
  Resolves:#1296238
  - Provide conman_unconfined_script_exec_t/conman_unconfined_script_t SELinux types used for conman scripts.
  - Resolves:#1290565
  - Allow ctdbd trasition to smbcontrol_t when "ctdb disablescript 50.samba" is executed.
  - Resolves:#1293787
  - Label ctdbd event scripts as ctdbd_exec_t instead of bin_t. 
  Resolves:#1293787
  - Allow watchdog to read localization files. It wants to access localtime. 
  Resolves:#1267974
  - Backport rules allowing sssd_t to be able to request the kernel to load a module.
  Resolves:#1246634


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-288
changelog:
  - Allow netutils_t domain to chown capability.
  Resolves:#1298514
  - Allow all jabber domain to access SSL certs.
  Resolves:#1261145
  - Allow shorewall request kernel load module
  Resolves:#1290705
  - Allow passwd to create temporary files to support ssh logins if gnome-keyring-daemon is called by passwd and runs in passwd_t.
  Resolves:#1131531
  - Allow stunnel to write log outputs on users pty.
  Resolves:#1296238
  - Allow polkit-1/actions to get attributes for all filesytems.
  Resolves:#1301561
  - Allow p11-child to connect to apache ports. Allow p11-child  to manage authentication cache.


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292
changelog:
  - Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
  Related: #1326621


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292.1
changelog:
  - Allow ipc_lock capability for glusterd.
  - GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
  Resolves: #1388582


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-292.2
changelog:
  - Allow glusterd to manage socket files labeled as glusterd_brick_t.
  Resolves: rhbz#1393267
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
  Resolves: rhbz#1393253


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-298
changelog:
  - Allow isnsd_t to accept tcp connections
  Resolves:rhbz#1365501
  - Add label for alsa_var_lib_t dirs and files.
  Resolves: rhbz#1340150


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-300
changelog:
  - Allow sblim_reposd_t domain to read cert_f files
  Resolves:rhbz#1392382
  - Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs.
  Resolves: rhbz#1392406


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-301
changelog:
  - Allow hald_t to read nvme devices.
  Resolves: rhbz#1389982
  - Allow ftpdctl_t domain to manage own sockets
  Resolves: rhbz#1392525


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-302
changelog:
  - Label /var/lock/kdump as kdump_lock_t.
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-303
changelog:
  - Dontaudit freeipmi_bmc_watchdog_t to write to /var/lock/kdump/
  Resolves: rhbz#1288565
  - Allow guest-set-user-passwd to set users password
  Resolves: rhbz#1369699


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-304
changelog:
  - Allow _java_t domain to read systemd state.
  Resolves:rhbz#1393938
  - Allow kdumpgui to read/write to nvme filesystem.
  Resolves:rhbz#1323293


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-305
changelog:
  - Fix typo bug sepgsql_contexts file
  Resolves: rhbz#1397703
  - Allow sssd_t domain to manage samba files and dirs.
  Resolves: rhbz#1395403
  - Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
  Resolves: rhbz#1397117
  - Allow consolekit_t domain to manage consolekit_log_t dirs
  Resolves: rhbz#1397802


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-306
changelog:
  - Allow hostname_t domain to manage cluster_tmp_t files
  Resolves: rhbz#1400234
  - Allow ipsec_mgmt_t domain use nsswitch
  Resolves:rhbz#1401611
  - Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
  Resolves:rhbz#1397117


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307
changelog:
  - Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
  Resolves: rhbz#1404152
  - Label /usr/bin/puppet* binaries as puppet_exec_t
  Resolves: rhbz#1386181


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-307.1
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1462824
  - Disable mysqld_safe_t secure mode environment cleansing.
  Resolves: rhbz#1464145


author: Lukas Vrabec <lvrabec@redhat.com> 3.7.19-308
changelog:
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  Resolves: rhbz#1461064


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-10
changelog:
  - fix verification of SSL certificate with NUL in name (#553390, CVE-2009-4565)
  - don't start service by default (#529686)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - dropped patches (fixed upstream): exitpanic, certcnnul


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-5
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-9
changelog:
  - fixed MAXHOSTNAMELEN for FQDN
    resolves: rhbz#640234
  - fixed assertion if server connection is lost while making LDAP query
    resolves: rhbz#837007
  - fixed milterfdleaks patch to check socket before using fcntl on it
    resolves: rhbz#845821
  - fixed ldap_routing macro
    resolves: rhbz#890227
  - properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    resolves: rhbz#1106852


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-5
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-6
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)
  - reserve uidgid pair 113:113 for usbmuxd


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-9
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi
  - update name of group reserved by cyrus-imapd to saslauth


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-11
changelog:
  - reserve uidgid pair 109:109 for rhevm (#652287)
  - add double quotes arround sourced profile.d scripts -
    allow special characters in script names(#661645)
  - use printf instead of echo in bashrc scripts(#620408)
  - change detection of interactive shell in profile for ksh(#616117)
  - respect profile.d script defined umask even in interactive
    login shells(#661681)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-13
changelog:
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)
  - reserve 175:175 for rhevagent (#709599)
  - reserve 176:176 for apache traffic server - ats(#715266)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703052)
  - do not override already set PROMPT_COMMAND envvar(#691425)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-14
changelog:
  - comment out bad spr-itunes entry from /etc/services(#710185)
  - reserve 177:177 for dhcpd (#738177)
  - reserve 179:179 for sanlock (#738294)
  - reserve 181:181 for wallaby (#772746)
  - reserve 134:134 for cimsrvr (#760178)
  - add ext4 to /etc/filesystems (#771388)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-15
changelog:
  - reserve 180:180 for aeolus (#804203)
  - reserve 182:182 for katello (#804204)
  - reserve 183:183 for elasticsearch (#804205)
  - drop root's supplementary groups (#724007)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-21
changelog:
  - reserve uid 189 for hacluster (#872208)
  - reserve gid 189 for haclient (#872208)
  - reserve 160:160 for swift (openstack-swift) (#991502)
  - reserve 161:161 for glance (openstack-glance) (#991502)
  - reserve 162:162 for nova (openstack-nova) (#991502)
  - reserve 163:163 for keystone (openstack-keystone) (#991502)
  - reserve 164:164 for quantum (openstack-quantum) (#991502)
  - reserve 165:165 uidgid pair for cinder (#991502)
  - reserve 166:166 uidgid pair for ceilometer (#991502)
  - reserve 187:187 for heat (openstack-heat) (#991502)
  - reserve 185:185 for jboss-as (#991502)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.14-22
changelog:
  - reserve 142:142 for activemq (#1086921)
  - reserve 167:167 for ceph (ceph-common) (#1221042)
  - change reservation for 185:185 from jboss-as to jboss (#1192412)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - support ACLs under skel directory
  - refer to PAM in /etc/login.defs
  - userdel option to remove Linux login <-> SELinux login mapping
  - useradd special exit value if SELinux user mapping is invalid
  - usermod special exit value if SELinux user mapping is invalid
  - fix gshadow functions from shadow utils
  - fix find_new_uid/gid for big UID/GID_MAX
  - don't show users who were not logged in lastlog
    Resolves: #586796 #629277 #639900 
    Resolves: #639975 #639976 #667593 #672510
    Resolves: #693377 #706321


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-16
changelog:
  - document that parent of a new user's home directory must exist
  - avoid skipping 2nd consecutive failures in pwconv grpconv (#787742)
  - avoid segfault when merging group entries in useradd
  - properly report that userdel found process with user's uid
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - mention that PAM is not configured with login.defs in the man page
  - create new shadow entry if missing in usermod (#1016516)
  - report error if usermod asked for moving homedir and it does not
    exist (#1089666)
  - fix various typos and mistakes in useradd manpage (#907837)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.4.2-20
changelog:
  - allow removal of expiration or last password change dates
    by using -1 as chage date argument again (#1183638)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-2
changelog:
  - usermod: make password unlocking compatible with passwd (#951743)
  - usermod: disallow ':' in raw password setting


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Kyle McMartin <kyle@redhat.com> - 4.0-3
changelog:
  - Add .mlos2 tag to Release.
  - Use upstream tarball (instead of CVS snapshot.)
    (There's no code difference.)


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Avesh Agrwal <avagarwa@redhat.com> - 4.29-1
changelog:
  - New upstream realease 4.29
  - Updated authpriv and sample patches for the new release
  - Modified spec file to include dist tag


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-5
changelog:
  - Fix first connection failure when configuration pulled from stdin (#927928)
  - Log the negotiated protocol version to the logs (#1275611)


author: Tomáš Mráz <tmraz@redhat.com> - 4.29-6
changelog:
  - Add support for TLSv1.1 and TLSv1.2, change the default for client from
    SSLv3 to all version support
  - Add support for DH and ECDH ciphersuites on server


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-19
changelog:
  - RHEL-6.7 erratum
    - modified the authlogicfix patch to fix #1144448
    - fixed a bug in the ldapusermatchfix patch
    Resolves: rhbz#1144448
    Resolves: rhbz#1142122


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Adam Tkac <atkac redhat com> 1.3.39-1
changelog:
  - update to 1.3.39
  - swig-1.3.38-rh485540.patch was merged
  - add Example/ to -doc again (#489077), filter provides correctly


author: Peter Jones <pjones@redhat.com> - 4.02-2
changelog:
  - Split out extlinux and tftpboot.
  - remove duplicate syslinux/com32/ left in base package after 3.83-2


author: Peter Jones <pjones@redhat.com> - 4.02-9
changelog:
  - Avoid a workaround that causes machines to stall in PXE boots that
    use the local disk.
    ResolveS:rhbz#980671


author: Peter Jones <pjones@redhat.com> - 4.04-2
changelog:
  - Make the subpackages noarch, not i686, so rel-eng doesn't have to fight
    it to get working dependency resolution.
    Related: rhbz#980671


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-25
changelog:
  - related: #921612
    reverted the boundary when the sa data files are stored in directories
    and default history value back to 28. Without the revert, backward
    compatibility could be broken in some cases.


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-26
changelog:
  - resolves: #1110851
    added sysstat(5) man page describing /etc/sysconfig/sysstat file
  - resolves: #1102603
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-27
changelog:
  - resolves: #1124180
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-28
changelog:
  - resolves: #1224878
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #887231
    fixed segfaults on bogus localtime input
  - resolves: #1185057
    added two new columns to iostat: r_await and w_await
  - resolves: #1188612
    fixed description of %util field in sar(1) and iostat(1) man pages


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-31
changelog:
  - related: #1224878
    in some corner cases, pidstat could still output values for % CPU bigger
    than 100; this commit fixes the issue


author: Michal Sekletar <msekleta@redhat.com> - 9.0.4-32
changelog:
  - cifsiostat: report correct number of open/closed files (#1346844)
  - sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)


author: Petr Lautrbach <plautrba@redhat.com> 2.87-3.dsf
changelog:
  - Add -w option to last command for wide output (#585907)
  - Changed IPv4 vs IPv6 heuristic in last command (#585880)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-6
changelog:
  - fix for uninit defect (revealed by Coverity) added with %patch11.
  - recovered traditional behaviour of '--keep-old-files' option and added new
    option '--skip-old-files' (#799252)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-7
changelog:
  - disable tests/remfiles01.at for running as a privileged user (#687972)
  - fix undesired error exit on receiving SIGPIPE during performing --list
    operation (#807728) and related fix for test suite -- skip SIGPIPE-dependent
    tests in environments ignoring SIGPIPE


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-8
changelog:
  - fix for bad file matching during extracting concrete files from an archive
    (backported fix from fedora 14) (#841308)
  - typo - better separate comments in spec file


author: Pavel Raiskup <praiskup@redhat.com> 2:1.23-9
changelog:
  - backport also --listed-incremental crash fix, this patch is in upstream and in
    fedora from f14 (related to #841308)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-10
changelog:
  - backport upstream patch to make sure that file matching is done before file
    file-name transformation (#875727)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.23-11
changelog:
  - avoid crash by backporting upstream patch for internal construction of
    file-name hash table (#877769).


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-12
changelog:
  - better auto-recognize xz compressed archives (#1056672)
  - fix --verify option (#923359)
  - fnmatch fixes (#1034360)


author: Pavel Raiskup <praiskup@redhat.com> - 1.23-14
changelog:
  - fix error while storing UID > 2^21 into posix format archive (rhbz#1247788)
  - don't mistakenly set default ACLs (#1220891)


author: Petr Kubat <pkubat@redhat.com> - 1.23-15
changelog:
  - fix error when compressing/listing large sparse files (#1334559)
  - improve sparse mode in genfile for build-time-testsuite purposes


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-13
changelog:
  - do not fail with POSIX 2008 glibc futimens()
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-15
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#571842)
  - realloc within check_exclusion_tags() caused invalid write
    (#571523)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#571523)
  - support for "lustre.*" extended attributes (#572442)
  - allow build without SELinux support


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-3
changelog:
  - add support for nano second timestamps (#1151406)
  - fix cdp dissector, allow zero-length data frames (#1231246)


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-9
changelog:
  - Don't set $REMOTEHOST on the local machine
    Resolves: #669176
  - Don't print history in verbose mode
    Resolves: #658171


author: Jan Kaluza <jkaluza@redhat.com> - 6.17-13
changelog:
  - Do not dereference null pointer in cwd
    Resolves: #700309
  - Exit when child killed
    Resolves: #690356
  - Do not allow variable names beginning with number
    Resolves: #672592
  - Fix status of pipelined/backquoted/list of commands
    Resolves: #658190
  - Fix unused res variable in sh.glob.c
    Resolves: #684063


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 6.17-14
changelog:
  - Remove obsolete glob-automount patch; the issue should have been
    resolved (and is now resolved) in glibc posix/glob.c (#684063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.17-36
changelog:
  - fix regression with 'jobs' builtin output not going to stdout (#1338986)
  - fix several regressions in tcsh-6.17.00-quote-backslashes-properly.patch (#1334751)


author: Adam Tkac <atkac redhat com> - 1:0.17-38.fc7
changelog:
  - added -c option which disables reverse dns checking (#223448)
  - added smp_mflags to make
  - start using dist macro


author: Adam Tkac <atkac redhat com> 1:0.17-46
changelog:
  - changes related package review (#226484)
  - remove unused patches
    - telnet-0.17-linemode.patch
    - telnet-0.17-env-5x.patch


author: Michal Sekletar <msekleta@redhat.com> 1:0.17-48
changelog:
  - reuse utmp entries correctly
  - break out from infinite loop if we tried to bind to non-existing address (#772912)
  - mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)


author: Jiri Skala <jskala@redhat.com> - 0.49-6
changelog:
  - Resolves: #655830 - transferring small files using -v returns strange values
  - Resolves: #714240 - utimeout option parsing buffer overflow


author: Karsten Hopp <karsten@redhat.com> 1.7-29
changelog:
  - remove trailing dot from summary
  - replace tabs with spaces
  - replace PreReq with Requires(post)/Requires(preun)
  - include license file in %doc
  - add smp flags
  - use make install DESTDIR=


author: <john_masinter@mcafee.com> 0.2-2
changelog:
  - update with more syslog messages
  - add 3 sec delay between reseed, for nice cpu usage
  - reduce entropy threshold to 128 bytes (1024 bits)


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 3:2.0.12-1
changelog:
  - update to 2.0.12 (fixes #461278 and #461626)
  - this release adds support for icmp extensions (including MPLS),
    which was expected for a long time (#176588)
  - drop "tracert" symlink (#461109)


author: Jiri Skala <jskala@redhat.com> - 3:2.0.14-1
changelog:
  - Resolves: #586109 - traceroute don't like -l flowlabel, -t priority and -g nexthop option
  - update to latest upstream


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to tzdata-2016i:
    - Cyprus is now split into two time zones as of 2016-10-30
    - Tonga will reintroduce DST on 2016-11-06


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to tzdata-2016ij
    - Saratov region of Russia is moving from +03 offset to +04 offset
      on 2016-12-04.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a
    - Mongolia no longer observes DST. (BZ #1425222)
    - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
  - Add zone1970.tab file to the install list. (BZ #1427694)


author: Patsy Franklin <pfrankli@redhat.com> - 2017c-1
changelog:
  - Rebase to tzdata-2017c.
    - Northern Cyprus will revert to using EQ rules on October 29, 2017.
    - Sudan will switch from +03 to +02 on November 1, 2017.
    - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
      experiment with DST.
    - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
    - Namibia - starting September 3, 2017 switches from +)1 with DST to
      +02 all year.  This change takes effect April 1, 2018.
    - Turks & Caicos changes from -04 all year to -05 with US DST starting
      on March 11, 2018.  Effective change date is November 4, 2018.
    - tzdata now includes two text versions of the time zone data - tzdata.zi
      and leapseconds.


author: Patsy Franklin <pfrankli@redhat.com> - 2018b-1
changelog:
  - Rebase to tzdata-2018b
    - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
    - Brazil's DST will start on the first Sunday in November
    - Irish standard time is in the summer now, not the winter.
    - Support for the new zic -t option.
    - Add back pacificnew file omitted in tzdata-2018a


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
  - Rebase to tzdata-2020a
    - Morocco will spring forward on 2020-05-31 rather than
      previously predicted 2020-05-24.
    - Canada's Yukon region changed to year round UTC -07
      effective 2020-03-08.
    - America/Godthab was renamed to America/Nuuk.


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020b-2
changelog:
  - Include the upstream patch to support pacificnew for java tzupdater.
  - Set POSIXRULES macro to continue installing posixrules file.


author: Patsy Griffin <patsy@redhat.com> - 2020c-1
changelog:
  - Rebase to tzdata-2020c
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d
   - Palestine will end summer time on 2020-10-24 rather than the
     predicted 2020-10-31.


author: Denys Vlasenko <dvlasenko@redhat.com> - 0.9.32-3
changelog:
  - Enable UCLIBC_HAS_RESOLVER_SUPPORT, UCLIBC_LINUX_MODULE_26,
    UCLIBC_HAS_SHA256/512_CRYPT_IMPL, UCLIBC_HAS_FOPEN_CLOSEEXEC_MODE
    config options.
  - fix __kernel_long_t problem.


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Harald Hoyer <harald@redhat.com> 147-2.65
changelog:
  - 80-drivers.rules: only make an exception for ipmi for
                      modprobe with DRIVER set
  Resolves: rhbz#1268251


author: Tim Waugh <twaugh@redhat.com> 2.2-27
changelog:
  - Preserve timestamps on install (bug #226514).
  - Fixed summary (bug #226514).
  - Fixed build root (bug #226514).
  - Don't explicitly require perl for build (bug #226514).
  - Added dist to release tag (bug #226514).
  - Don't build with '-Wall' since RPM_OPT_FLAGS already includes it
    (bug #226514).
  - Fixed macros in changelog (bug #226514).


author: Tim Waugh <twaugh@redhat.com> 2.2-31
changelog:
  - Removed patch fuzz.
  - Preserve file modes (bug #437469).
  - Fixed grammar in man page (bug #460731).
  - Explicitly apply patch0.


author: Tom Lane <tgl@redhat.com> 2.2.12-8
changelog:
  - Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
    has historically done; the former is considered correct.


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Tom Lane <tgl@redhat.com> 2.2.14-9
changelog:
  - Sync with Fedora head
  - Fix bug preventing drivers from being selected in ODBCConfig
  Resolves: #554501
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196132 #1196120 #1196124 #1196128


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196133 #1196121 #1196125 #1196129


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-3
changelog:
  - Fix problem with symlink errors in archive with many files
  - add support of non-latin and non-unicode encodings for filenames
    Resolves: rhbz#740012 rhbz#885540


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-4
changelog:
  - Added patch for build option "-Werror=format-security"
  - Fix print of non-ascii filenames
    Resolves: rhbz#1284896


author: Lukas Nykryn <lnykryn@redhat.com> 0.6.5-11
changelog:
  - set BUGREPORT value to launchpad (#771736)
  - add support for override files (#663594)
  - add usage stanza (#735427)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 0.6.5-15
changelog:
  - fix issue with multiple nih_error_raise calls in previous patch
  - reset console only for console owners (#1046190)


author: Dennis Gilmore <dennis@ausil.us> - 1.0.3-5
changelog:
  - set broken_fed_dbg_opts to 0 its the recomended option upstream
  - this works around sparc GCC problems
  - add smpflags and cflags to make check


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Ondrej Vasik <ovasik@redhat.com> - 1.07-21
changelog:
  - Merge Review(#226521) - add _smp_mflags to make, remove implicit
    target, fix rpmlint warnings, commented patches, fix build root,
    use buildrequires/requires instead of prereq


author: Nils Philippsen <nils@redhat.com> - 1.07-24
changelog:
  - add /etc/tmpfiles.d/uucp.conf to enable lock directory on tmpfs (#656714)
  - use %global instead of %define


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.6.1-5
changelog:
  - Replace expensive %{_libdir}/pkgconfig dependency in uuid-devel
    with pkgconfig%{_isa} for Fedora >= 11 (#484849).


author: Remi Collet <Fedora@FamilleCollet.com> - 1.6.1-7
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - add PHP ABI check
  - use php_extdir
  - add php configuration file (/etc/php.d/uuid.ini)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-5.2
changelog:
  - 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
  - fix spec warnings about expanding macros


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Lon Hohberger <lhh@redhat.com> - 5.5-8
changelog:
  - Add watchdog.d handling
    (bz657750-1-add-watchdog-d.patch)
    This makes the scripts in /etc/watchdog.d behave slightly differently
    (bz657750-2-script-handling.patch)
    Add test-directory to configuration file
    (bz657750-3-add_test_directory_to_configuration_file.patch)
    Log which binaries fail
    (bz657750-4-Log-binary-names.patch)
    Resolves: rhbz#657750


author: Lon Hohberger <lhh@redhat.com> - 5.5-9
changelog:
  - Add man page information on test-directory
    (bz657750-5-man_page_information_for_test_directory.patch)
    Resolves: rhbz#657750


author: Richard W.M. Jones <rjones@redhat.com> - 5.5-10
changelog:
  - Import watchdog initscript from Rawhide, includes some LSB-compliance
    fixes.
    Resolves: rhbz#584701


author: Ales Ledvinka <aledvink@redhat.com> - 5.6-4
changelog:
  - With no value provided for watchdog-timeout do not attempt
    to set it. Avoid conflict with custom module parameter.
  - Resolves: rhbz#1099604


author: Tomas Hozza <thozza@redhat.com> 1.12-5
changelog:
  - Fix the parsing of weblink when doing recursive retrieving (#960137)
  - Fix errors found by static analysis of source code (#873216)


author: Karel Zak <kzak@redhat.com> - 3.0-13
changelog:
  - fix #428582 - linux.words contains misspelled word "flourescent"
  - fix #440146 - misspelled word in /usr/share/dict/words (architecure)


author: Karel Zak <kzak@redhat.com> - 3.0-14
changelog:
  - fix #457309 - contains both 'unnecessary' and 'unneccesary'
  - fix #470921 -"Barack" and "Obama" are not in /usr/share/dict/words
  - update spec file (#226542 - Merge Review)


author: Kalev Lember <kalev@smartlink.ee> 3.0.1-16
changelog:
  - Reintroduce a patch for CVE-2009-1885
  - Don't build static library
  - Use parallel make
  - Spec file clean up


author: Eric Sandeen <sandeen@redhat.com> 3.0.4-4
changelog:
  - Add /var/lib/xfsdump/inventory to file list (was created runtime) (#1055655)
  - Preserve file capabilities on restore (#905585)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-7
changelog:
  - Fix xfs_metadump hang (#730886)
  - mkfs.xfs: don't increase agblocks past maximum (#738279)
  - Fix double reporting of quota values (#749435)
  - xfs_quota: handle malformed entries in mtab (749434)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-8
changelog:
  - mkfs.xfs: better handle misaligned 4k devices (#836433)
  - mkfs.xfs: default to physical sectorsize (#836433)
  - mkfs.xfs: clarify errors when specified AG size is too large (#730433)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-11
changelog:
  - mkfs.xfs: Use multidisk mode when geometry is on cmdline (#961501)
  - xfs_io: Update  man page to include chproj, lsproj (#962394)
  - xfs_io: Remove broken setfl command (#962394)
  - xfs_logprint: Handle multiply-logged fields (#962397)
  - xfs_repair: Handle fragmented multiblock dir2 directories (#964216)
  - xfs_repair: avoid segfault with ag_stride (#93904)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-15
changelog:
  - libxfs: restrict platform_test_xfs_fd to regular files (#1018751)
  - xfs_repair: avoid segfault if reporting progress early in repair (#1020438)
  - xfs_fsr: fix SWAPEXT failures under selinux (#1024702)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-16
changelog:
  - xfs_copy: do not exit with error code if we succeed (#1100107)
  - xfs_copy: fix corruption when source fs sector size is > 512 bytes (#1104956)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-17
changelog:
  - xfs_quota: Allow user project starting with digits (#1167413)
  - xfs_repair: Don't validate symlink component lengths (#1171267)
  - xfs_repair: Handle log in allocation group zero (#1215616)
  - xfs_io: deprecate -F flag (#1136742)


author: Eric Sandeen <sandeen@redhat.com> 3.1.1-20
changelog:
  - xfs_logprint: Fix some inode logging corner cases (#1027075)
  - xfs_fsr: Fix more selinux-related failures (#1225651)
  - xfs_repair: Detect reserved attribute names (#1304285)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-34
changelog:
  - Avoid possible hang while logging an unexpected signal (#694820)
  - Fix Rpmdiff build warning about "dereferencing type-punned pointer" (#697783)
  - Let RPC services bind to a specific port (#697788)
  - Prevent memory corruption error while using large number of services (#711787)
  - Fix coverity defects in poll patch (#715303)


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-40
changelog:
  - Fix: xinetd attempts to bind to IPv6 sockets even on systems with IPv6 disabled (#1285091)
  - Fix: modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1119317)


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-6
changelog:
  - fix cleaning up of temporary files with libpaper(Debian)
  - fix xmllint postvalid (added noent option), use nonet
    switch


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.22-1
changelog:
  - New version 0.0.22
  - autodetection for tools/program paths, consolidated
    error code handling, build warnings cleanup


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.23-1
changelog:
  - New version 0.0.23
  - added autodetection for more common tools like
    gnu cp or tail
  - added option --noautosize to prevent overriding
    of user-defined or system-default paper size
  - use shell built-in 'type -t' instead of 'which'
    utility for detection of file availability


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Peter Hutterer <peter.hutterer@redhat.com> 7.6-24
changelog:
  - bigregsproto 1.1.2
  - compositeproto 0.4.2
  - damageproto 1.2.1
  - fontsproto 2.1.2
  - inputproto 2.2
  - kbproto 1.0.6
  - recordproto 1.14.2
  - scrnsaverproto 1.2.2
  - xcmiscproto 1.2.2
  - xextproto 7.2.1


author: Bill Nottingham <notting@redhat.com> 4.999.8-0.6.beta
changelog:
  - fix release versioning to match guidelines
  - fix up lzma-compat summary/description
  - tweak licensing


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.3.20091007.beta
changelog:
  - move xz man pages to main package, leave lzma ones where they belong
  - remove URL from Source0, it is a git snapshot


author: Honza Horak <hhorak@redhat.com> - 2.9-11
changelog:
  - Added YP_PASSWD_HASH environment variable to set default 
    algorithm for hashing a new password
    Resolves: #699666


author: Honza Horak <hhorak@redhat.com> - 2.9-12
changelog:
  - Fixed -hash patch to omit an old password check when shadow 
    passwords or passwd.adjunct enabled and use correct password length
    Resolves: #699666


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-20
changelog:
  - Bind to domain even if not using NetworkManager
    The fix uses  only the code from upstream ypbind-mt-1.29.91
    Resolves: #531398


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-21
changelog:
  - Added signalstate patch, which fixes compilation with
    NetworkManaged-devel headers installed. Resolves 537064.
    Related: rhbz#543948


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-22
changelog:
  - Rewrote initscript to become closer to Packaging:SysVInitScript
    Fedora guildeline. The change also fixes bug 523913


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-25
changelog:
  - Moved /sbin/ypbind to /usr/sbin/ypbind, as the package
    depends on several utilities from /usr (selinuxenabled,
    rpcinfo, ypwhich), and /usr/lib/libdbus-glib-1.so
    Resolves: #593271
  - Fixed previous ChangeLog entry header


author: Karel Klic <kklic@redhat.com> - 3:1.20.4-26
changelog:
  - Fix "dereferencing type-punned pointer will break strict-aliasing rules"
    GCC warning
    Resolves #596221


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-30
changelog:
  - Modified the chkconfig priorities from 27/73 to 24/76, to move ypbind
    before netfs. This is useful for hosts that mount NFS file systems
    that reside on a server which is resolvable through NIS.
    Resolves: #647495


author: Honza Horak <hhorak@redhat.com> - 3:1.20.4-31
changelog:
  - ypbind init script should check for ypbind in /etc/rpc
    Resolves: #888778
  - ypbind does not bind to ypserv on localhost (same machine) if NetworkManager
    thinks that the network is off.
    Resolves: #829487
  - ypbind does not take NISTIMEOUT into account during service start if
    rpcinfo doesn't work
    Resolves: #846080
  - add SIGPIPE into signal set
    Resolves: #842228
  - Fix differencies between man page and program --help
    Resolves: #627492
  - Fix nis.sh run by dhclient to not create files with wrong context
    Resolves: #681134
  - Add rebind option to ypbind
    Resolves: #918276


author: Matej Muzila <mmuzila@redhat.com> - 3:1.20.4-32
changelog:
  - Do not resstart ypbind on dhcp renew if nis domain or nis servers
    haven't changed
    Resolves: #1238771


author: Karel Klic <kklic@redhat.com> - 2.19-14
changelog:
  - Removed Prereq use in the spec file
  - Removed usage of RPM_SOURCE_DIR from the spec file
  - Removed --enable-yppasswd from configure, as this option
    is ignored


author: Karel Klic <kklic@redhat.com> - 2.19-15
changelog:
  - Added patch for rpc.ypxfrd to create a pid file
  - Rewrote initscripts to become closer to Packaging:SysVInitScript
    Fedora guildeline
  - Fixed initscript for ypserv (bug 523438)
  - Fixed initscript for yppasswdd (bug 523394)
  - Fixed initscript for ypxfrd (bug 523397)


author: Honza Horak <hhorak@redhat.com> - 2.19-19
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize 
    password format correctly when changing password using yppasswd
    Resolves: #699667
  - Fix strcat on uninitialized memory in yppasswdd
    Resolves: #699675


author: Honza Horak <hhorak@redhat.com> - 2.19-20
changelog:
  - changed shadow patch to allow different number of columns 
    in passwd.adjunct file than in shadow file
    Resolves: #699667


author: Honza Horak <hhorak@redhat.com> - 2.19-22
changelog:
  - hide passwords in syslog when using external script
    to update user's data using yppasswdd
    Resolves: #734494


author: Honza Horak <hhorak@redhat.com> - 2.19-23
changelog:
  - fix memory leak when malformed request is received
    Resolves: #845283
  - Fixed returned value when all entries requested and no such
    map exists
    Resolves: #790812


author: Matej Muzila <mmuzila@redhat.com> - 2.19-29
changelog:
  - Make mknetid to handle properly files with either
    empty lines or unexpected format
    Resolves: #1071962


