# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170724-2.git89f519f.el7
changelog:
  - slof-virtio-net-rework-the-driver-to-support-multiple-ope.patch [bz#1477937]
  - Resolves: bz#1477937
    (VM fails to boot at SLOF prompt with "Out of internal memory." with lots of virtio-net-pci devices)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171214-2.gitfa98132.el7
changelog:
  - slof-Fix-output-word.patch [bz#1495467]
  - slof-resolve-ihandle-and-xt-handle-in-the-input-command-l.patch [bz#1495467]
  - Resolves: bz#1495467
    (SLOF does not honour output-path environment variable)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20171214-4.gitfa98132.el8
changelog:
  - slof-libelf-Add-REL32-to-the-list-of-ignored-relocations.patch [bz#1613619]
  - slof-Fix-bad-assembler-statements-for-compiling-with-gcc-.patch [bz#1613619]
  - slof-make.rules-Compile-SLOF-with-fno-asynchronous-unwind.patch [bz#1613619]
  - slof-romfs-tools-Remove-superfluous-union-around-the-rom-.patch [bz#1613619]
  - slof-romfs-tools-Silence-GCC-8.1-compiler-warning-with-FL.patch [bz#1613619]
  - slof-romfs-tools-Silence-more-compiler-warnings-with-GCC-.patch [bz#1613619]
  - Resolves: bz#1613619
    ([RHEL8.0]Console contains error message (ERROR: Unhandled relocation (A) type 26) after continuing a guest)
  - Resolves: bz#1600154
    (SLOF needs to be build in power hosts)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20171214-5.gitfa98132.el8
changelog:
  - slof-board-qemu-slof-vio-vscsi-Scan-up-to-64-SCSI-IDs.patch [bz#1655649]
  - slof-usb-storage-Invert-the-logic-of-the-IF-statements.patch [bz#1654196]
  - slof-usb-storage-Implement-block-write-support.patch [bz#1654196]
  - Resolves: bz#1654196
    ([RHEL8.0][USB]  guest failed to boot from emulated usb-storage)
  - Resolves: bz#1655649
    (RHEL8.0 - ISST-LTE:KVM:Failed to boot the guest from cdrom drive)


author: Danilo de Paula <ddepaula@redhat.com> - 20171214-6.gitfa98132
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Jon Maloy <jmaloy@redhat.com> - 20210217-2.el8
changelog:
  - slof-virtio-serial-Make-read-and-write-methods-report-fai.patch [RHEL-3709]
  - slof-virtio-serial-Do-not-close-stdout-on-quiesce.patch [RHEL-3709]
  - Resolves: RHEL-3709
    (SLOF regression prevents VM startup)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972102]
  - Resolves: bz#1972102
    ([Azure][RHEL-8]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6 [bz#2083465]
  - Adding restart_if implementation for RHEL [bz#2085578]
  - Resolves: bz#2083465
    ([Azure][RHEL-8][8.7] Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2085578
    ([Azure][WALA][8.6] WALA provisions VM failed because of no "ifdown")


author: Camilla Conte <cconte@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2080826]
  - Resolves: bz#2080826
    ([Azure][WALA][RHEL-8] [8.7] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2092002]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2114824]
  - Resolves: bz#2092002
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2114824
    ([Azure][WALA][RHEL-8.7] The description of "Logs.Collect" is incorrect)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-7.el8_8
changelog:
  - wla-redhat-Fix-frh.py-to-not-skip-valid-patches-to-init-.patch [bz#2170104]
  - wla-Use-platform-python-in-waagent.service.patch [bz#2170104]
  - Resolves: bz#2170104
    ([Azure][WALA][RHEL-8] systemd service should not use python3)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-19
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.10.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
  - Related: Jira:RHEL-2110


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Radovan Sroka <rsroka@redhat.com> - 0.16-6
changelog:
  - ported syslog format from rhel7
    resolves: rhbz#1584136
  - fixed crypto problem with libgcrypt
    resolves: rhbz#1584120


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Vladimír Slávik <vslavik@redhat.com> - 33.16.9.2-1
changelog:
  - Stop infinite wait for CDROM when KS is processed (jkonecny)
    Resolves: rhbz#2209602
  - Apply --noverifyssl option for liveimg kickstart command (jstodola)
    Resolves: rhbz#1886985
  - Change driver_updates exit info messages to debug (jkonecny)
    Related: rhbz#2154904


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.3-1
changelog:
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#1855371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2211857


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.5-1
changelog:
  - [ja_JP] - Need to update string on anaconda screen for installation completed
    Resolves: rhbz#2216746


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.1-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: RHEL-13151
    Resolves: RHEL-4795
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: RHEL-11168


author: Martin Kolman <mkolman@redhat.com> - 33.16.10.2-1
changelog:
  - Propagate a lazy proxy of the storage model (vponcova)
    Resolves: RHEL-16276
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-4784


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.4-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23344
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23344


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2129106
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-528


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-17080
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-19202
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19204
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19203


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.2-1
changelog:
  - Update role to version 2.2.2 to fix HA
    Resolves: RHEL-19202
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-17080
  - ExcludeArch: i686


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125591
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2121362
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2120415
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069174


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125591
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2015288
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127447
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127885
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127894
  - New netgroup management module
    Resolves: RHBZ#2127908
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127912
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2128460
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134530
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132729


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125591
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150332
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144724


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125591
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165951


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170371
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127901
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175762
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127904
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183820
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175766
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#1759785
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175755


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170371
  - Multiple service management
    Resolves: RHBZ#2175769
  - New ipacert module
    Resolves: RHBZ#2127906
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214295


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170371
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050158
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2168022
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215532
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215534
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215539
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215543
  - Update authtypes authind
    Resolves: RHBZ#2215540


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13746
  - New idoverridegroup management module.
    Resolves: RHEL-16935
  - New idoverrideuser management module.
    Resolves: RHEL-16941
  - New idview management module.
    Resolves: RHEL-16933
  - New idp management module.
    Resolves: RHEL-16938
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16682


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13746
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4963
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13759
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17955
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17958
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-4934
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19129
  - Idempotency fixes
    Resolves: RHEL-13755
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19133
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19135
  - ipa-server installation failing
    Resolves: RHEL-23633


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080238)
  - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
  - backup-restore now works correctly (RHBZ #2066535)
  - add with-subid to sssd profile (RHBZ #2063750)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - Update translations (RHBZ #2139696)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2216755)
  - Update translations (RHBZ #2189557)
  - Do not prompt for password twice when changing password of local user (RHBZ #2179607)


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2118928 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2118924 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2118920 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134702 CVE-2022-3140 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.4.7.2-15
changelog:
  - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210195 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208509 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eduard Abdullin <eabdullin@almalinux.org> - 1:6.4.7.2-16.alma.1
changelog:
  - escape url passed to gstreamer
  - add some protocols that don't make sense as floating frame
   targets
  - warn about exotic protocols as well
  - default to ignoring libreoffice special-purpose protocols
   in calc hyperlink
  - reuse AllowedLinkProtocolFromDocument in writer
  - reuse AllowedLinkProtocolFromDocument in impress/draw
  - CVE-2023-6186 backporting


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Pavel Raiskup <praiskup@redhat.com> - 1.16.1-3
changelog:
  - update config.{guess,sub} to gnuconfig git HEAD
  - drop ppc64p7 hack in config.sub, it's not needed - per:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't BR python2-* packages; switching BRs to python3 would make no sense
    since the upstream testsuite is not yet python3 ready


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-14
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Add ability to change runtime limits for max types and records per name


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Andrew Lukoshko <alukoshko@almalinux.org> - 32:9.16.23-0.16.2.alma
changelog:
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
    RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.17
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Yara Ahmad <yahmad@redhat.com> - 2.30-121
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139169
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139187


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-6
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2175166
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2183437
  - Add support for filesystem online resize
    Resolves: rhbz#2168680


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-7
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2083139
  - Add a basic test case for the iscsi module
    Related: rhbz#2083139
  - tests: Use blivet-specific prefix for targetcli backing files
    Related: rhbz#2083139
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2084043
  - tests: Improve iscsi_test.ISCSITestCase
    Related: rhbz#2083139


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Jon Maloy <jmaloy@redhat.com> - 23.4-2
changelog:
  - ci-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-7277]
  - ci-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-7277]
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17610]
  - Resolves: RHEL-7277
    ([RFE] [Azure][RHEL8][Network][cloud-init] Can not acquire IPv6 address)
  - Resolves: RHEL-17610
    ([RHEL-8] NetworkManagerActivator brings up interface failed when using sysconfig renderer)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-3
changelog:
  - ci-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21530]
  - ci-test-jsonschema-Pin-jsonschema-version-4781.patch [RHEL-21530]
  - Resolves: RHEL-21530
    ([RHEL-8.10]subp.py[WARNING]: skipping /etc/cloud/clean.d/README when do cloud-init clean)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-4
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22248]
  - Resolves: RHEL-22248
    ([Azure][RHEL-8] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-ci-Pin-pytest-8.0.0.-4816.patch [RHEL-21323]
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21323]
  - Resolves: RHEL-21323
    ([rhel-8] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-Revert-systemd-Standardize-cloud-init-systemd-enable.patch [RHEL-21290]
  - Resolves: RHEL-21290
    (Unknown lvalue 'ConditionEnvironment' in section 'Unit' for /usr/lib/systemd/system/cloud-init.target,cloud-init.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28817]
  - Resolves: RHEL-28817
    ([RHEL 8.10] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.1
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-4637.patch [RHEL-27134]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-manag.patch [RHEL-27134]
  - ci-fix-Undeprecate-network-in-schema-route-definition-5.patch [RHEL-29710]
  - Resolves: RHEL-27134
    ([rhel-8]cloud-init fails to configure DNS/search domains for network-config v1)
  - Resolves: RHEL-29710
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition [rhel-8.10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.2
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32841]
  - Resolves: RHEL-32841
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.3
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36701]
  - Resolves: RHEL-36701
    (DataSourceNoCloudNet not configurable via config files [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.5
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40418]
  - Resolves: RHEL-40418
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.6
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46013]
  - Resolves: RHEL-46013
    ([RHEL-8] cloud-init fails to configure DNS search domains [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.7
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49742]
  - Resolves: RHEL-49742
    ([Cloud-init] [RHEL-8.10] Password reset feature broken with CloudstackDataSource)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.8
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54155]
  - Resolves: RHEL-54155
    ([RHEL 8.10] cloud-init schema validation fails.)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16572]
  - Resolves: RHEL-16572
    ([cloud-init][rhel-8] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Dominik Rehak <drehak@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Fix showing remediations when leapp is killed
    Resolves: #1873184
  - Add support of dialog related report entries
    Resolves: #1873608


author: Dominik Rehak <drehak@redhat.com> - 0.1.3-1
changelog:
  - Update to 0.1.3
  - Fix running remediation commands
    Resolves: #1877313
  - Fix showing report when not logged in as superuser
    Resolves: #1859779


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-2
changelog:
  - Updated dependencies regarding rename of binary packages
    in leapp-repository
    Resolves: #2017115


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-3
changelog:
  - Updated dependencies to make possible the upgrade of the package
    during IPU 7 -> 8
  - Resolves: #2037743


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 79-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 80-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 81-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 82-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 83-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: Jira:RHEL-25557


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Brian C. Lane <bcl@redhat.com> 28.14.69-1
changelog:
  - runtime-cleanup: Use branding package name instead of product.name (bcl)
    Related: rhbz#2052154
  - treebuilder: Add branding package to template variables (bcl)
    Related: rhbz#2052154
  - api: Read substitution variables from the host (bcl)
    Resolves: rhbz#2095053
  - tests: Switch to using centos:stream8 for Dockerfile.test (bcl)
    Related: rhbz#2095053


author: Brian C. Lane <bcl@redhat.com> 28.14.70-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042101
  - templates: Don't include redhat.exec on s390 (bcl)
    Related: rhbz#2042101
  - templates: Drop non-64bit PPC support from live grub.cfg (bcl)
    Related: rhbz#2042101
  - templates: Update config_files for inst.* usage (bcl)
    Related: rhbz#2042101
  - tests: Run the 'test-in-docker' tests for github PRs (bcl)
    Resolves: rhbz#2095578


author: Brian C. Lane <bcl@redhat.com> 28.14.71-1
changelog:
  - Makefile: skip running pylint for 'make ci' (bcl)
    Related: RHEL-24416
  - templates: Remove libreport bugzilla plugins (bcl)
    Resolves: RHEL-24416


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <lsm5@redhat.com> - 2:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - remove dependency on policycoreutils-python-utils as it pulls in python
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179944
  - Resolves: #2187342
  - Resolves: #2187360
  - Resolves: #2203693
  - Resolves: #2207506


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Jonathan Lebon <jlebon@redhat.com> - 0.9.1-4
changelog:
  - Add xz-devel BR to ensure we're not bundling
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974453


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Marek Polacek <polacek@redhat.com> 8.5.0-20
changelog:
  - fix for TLSLD references (#2213753)
  - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - adjust a pattern in s390.md (PR target/87723, #2214847)


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-5
changelog:
  - Update to the latest upstream commit 47216437e79a
  - ("Fix "net" command on kernel configured with CONFIG_IPV6=m")


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-8
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  - Fix invalid structure size error during crash startup on ppc64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.130-6
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove owneship of %{_fontdir} in -common
  - Remove group tag


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-5.el8
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection
  - Resolves: rhbz#1630611


author: Jeff Moyer <jmoyer@redhat.com> - 1.5-1.el8
changelog:
  - rebase to pmdk-1.5, and rename to nvml (Jeff Moyer)
  - broken libpmemcto was removed
  - c++ bindings were moved to a separate project/package
  - Fix library requires to be =n-v-r instead of >= (Jeff Moyer)
  - resolves: rhbz#1488828


author: Jeff Moyer <jmoyer@redhat.com> - 1.6-2.el8
changelog:
  - Add explicit version dependencies
  - Fix up broken link line in build system
  - Related: rhbz#1598527


author: Jeff Moyer <jmoyer@redhat.com> - 1.9.2-1.el8
changelog:
  - Package pmdk version 1.9.2 for stream 1-fileformat-v6-rhel-8.3.1
  - libvmem is no longer packaged as part of pmdk.
  - ppc64le packages are now built
  - Related: rhbz#1524652, rhbz#1780388, rhbz#1854812, rhbz#1860860


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: David King <amigadave@amigadave.com> - 0.104-1
changelog:
  - Update to 0.104
  - Remove RPATH
  - Remove executable bit from sourced script
  - Move man page to main package and update glob
  - Make the build output more verbose


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-3
changelog:
  - Skip an additional test as it's breaking in the CI system.
  - Modify the name of the patch.
  - Resolves: RHEL-22820


author: David Benoit <dbenoit@redhat.com> - 1.21.2-4
changelog:
  - Skip tests in %check due to incompatible Go version in buildroot (temporary).
  - Resolves: RHEL-59518


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-3
changelog:
  - %if 0%{?fedora} <= 25 is always true on rhel (tkasparek@redhat.com)
  - rhel8 utilizes python3 (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-5
changelog:
  - Related: #1581665 - provide useful symlinks to a manpage
    (tkasparek@redhat.com)
  - Resolves: #1581665 - provide yum-rhn-plugin on new RHEL systems
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.5-6
changelog:
  - spec cleanup (no more builds on Fedora <= 25) (michael.mraka@redhat.com)
  - Resolves: #1637980 - fixed plugin for dnf > 3.6.0 (michael.mraka@redhat.com)


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Coty Sutherland <csutherl@redhat.com> - 1:4.20-10
changelog:
  - Drop unnecessary javax16.api.jar (again)
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-5
changelog:
  - edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
  - Resolves: bz#1861743
    (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-53009]
  - Resolves: RHEL-53009
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2 [rhel-8.10.z])


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-10
changelog:
  - Fix etags local command injection vulnerability (#2175189)
  - Fix htmlfontify.el command injection vulnerability (#2175178)
  - Fix ob-latex.el command injection vulnerability (#2180587)


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-12
changelog:
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Disable xwidgets (RHEL-14549)


author: Mike FABIAN <mfabian@redhat.com> - 1.5.38-2
changelog:
  - Update to 1.5.38
  - Refresh french translation (thanks to Thierry Thomas)
  - Mark comments in the emoji-picker about dialog as translatable


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-7
changelog:
  - Avoid verbatim bidi formatting characters in source comments
    to make rpminspect complain less.
  - Resolves: RHEL-2237


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-14
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Related: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.28.5-25
changelog:
  - Resolves: RHEL-29169 (Composer: Cursor jumps to the starting line when "return" key is pressed at the end of the line)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Resolves: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1764818 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1765005 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-14
changelog:
  - Resolves: RHEL-19376 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Josef Ridky <jridky@redhat.com> - 1.8.18-10
changelog:
  - Spec clean up
  - Add support to set kg key
  - Fix DDR4 memory issues
  - Increase length of sensor id
  - Enable usb interface by default
  - Fix input options


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-114
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183158


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.2
changelog:
  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-8
changelog:
  - Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86 platforms
    as it is known to be troublesome <https://github.com/open-mpi/ompi/issues/4260>.
    This resolves FTBFS issue (BZ#1518038).


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-11
changelog:
  - Regenerate autoconf files using current tools so proper build flags
    from redhat-rpm-config are used. This resolves BZ#1548473.


author: Eric Garver <egarver@redhat.com> - 0.9.3-12
changelog:
  - feat(config): add CleanupModulesOnExit configuration option
  - change default CleanupModulesOnExit=yes


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Fabio Alessandro Locati <fale@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.1
  - Update the brand icons list using a new script
  - Add the script to create brand icons list


author: José Expósito <jexposit@redhat.com> - 3.0.0-9
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25175
    Resolves: https://issues.redhat.com/browse/RHEL-25177


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-16
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Sergio Durigan Junior <sergiodj@redhat.com> - 9.1-3
changelog:
  - Fix 'Recursive call to 'missing_rpm_list_print' when pagination is
    on and missing RPM list is big' (RHBZ 1801974, Sergio Durigan
    Junior).


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747213).
  - Include upstream patches that fix issues reported by covscan (#1747530):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790054):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Eduard Abdullin <eabdullin@almalinux.org> - 2.36.1-4.alma.1
changelog:
  - Apply DWARF-Check-version-for-DW_FORM_ref_addr.patch
  - Apply PowerPC-missing-extended-dcbt-dcbtst-mnemonics.patch


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Eduard Abdullin <eabdullin@almalinux.org> 11.2.1-9.2.alma.1
changelog:
  - Apply libstdc-Check-conversion-from-filesystem-path-to-wide.patch
  - Apply libstdc-Mark-non-exported-function-always_inline.patch


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Florian Weimer <fweimer@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160701)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110582)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-29952)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217812)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon libiberty.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217911)
  - Spec File: Build static libraries with -fno-lto.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22817)
  - [2.40-18: was a failed attempt to fix RHEL-22817]


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153227)


author: Keith Seitz <keiths@redhat.com> - 12.1-4.el8
changelog:
  - Backport "Add a recursion limit to the demangle_const function
    in the Rust demangler."
    (Nick Clifton, RHEL-4237)


author: Nick Clifton <nickc@redhat.com> - 9.07-1
changelog:
  - Rebase to 9.07 release:
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Rebuild againt latest gcc-10.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.
  - Do not skip positive results.
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
  - Allow compiler used to run tests to be specified on the command line.  (#1723401)


author: Nick Clifton <nickc@redhat.com> - 2.32-15.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783958)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-9
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes.
  - Fix testing failure due to Perl changes related to expanding paths.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Use valgrind_arches macro instead of hardcoding valgrind arch list
  - Drop group tags
  - Drop ldconfig scriptlets
  - Move desktop file validation to check section
  - Drop ancient conflicts


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Keith Seitz <keiths@redhat.com> - 8.2-13.el8
changelog:
  - Backport "Fix terminal problems when error() is called."
    (Alan Hayward RH BZ 1852580)
  - Backport "core file memory access problem."
    (Kevin Buettner, RH BZ 1785126)
  - Backport "Stop the BFD library from issuing a warning message..."
    (Nick Clifton, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-14.el8
changelog:
  - Obsolete earlier versions on x86_64 and conflict with 64-bit
    glibc on ix86. (Keith Seitz, RH BZ 1853140)
  - Really fix 1878810 (Keith Seitz, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-15.el8
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903374)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905701)


author: Keith Seitz <keiths@redhat.com> - 8.2-16.el8
changelog:
  - Backport "Fix segfault with nameless fortran modules."
    (Bernhard Heckel, RH BZ 1934673)
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    and related patches.
    (Rogerio Alves et al RH BZ 1854784)


author: Keith Seitz <keiths@redhat.com> - 8.2-19.el8
changelog:
  - Backport "Fix restoring of inferior terminal settings"
  - Backport "Avoid GDB SIGTTOU on catch exec + set follow-exec-mode
    new (PR 23368)"
    (Simon Marchi, RH BZ 2015131)


author: Keith Seitz <keiths@redhat.com> - 8.2-20.el8
changelog:
  - Backport portion of "Fix crash in new DWARF indexer".
    (Tom Tromey, RH BZ 2150363)
  - Backport "Fix assertion failure in copy_type" and
    "Fix PR20630 regression test in gdb.base/printcmds.exp".
    (Tom Tromey and Tom de Vries, RH BZ 2156888)


author: Tomas Popela <tpopela@redhat.com> - 2.36.12-6
changelog:
  - Backport fixes for CVE-2022-48622
  - Apply patches with git to enable binary patching
  - Resolves: RHEL-30478


author: Ray Strode <rstrode@redhat.com> - 40.0-24
changelog:
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2034092


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.2.0-30
changelog:
  - Fixed building with libopenraw-0.1
  - Added rubygems to BuildRequires to fix build error
  - Modernised the .spec file a bit
  - Disabled silent build


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Jens Petersen <petersen@redhat.com> - 1.3-2
changelog:
  - add pkg git as URL (#1093541)
  - downgrade license tag to GPLv2+ in line with rpm (redhat-rpm-config is GPL+)
  - sync with current ghc-rpm-macros: add ghc_arches for backwards compatibility


author: Richard Lescak <rlescak@redhat.com> - 9.27-3
changelog:
  - fixed drifting text to the right when printing
  - added Requirement for jbig2dec
  - added patch for CVE-2020-16301
  - Resolves: rhbz#2097515, rhbz#2097448


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Ryan Lerch <rlerch@redhat.com> - 3.24.0-2
changelog:
  - Split the package into gnome-backgrounds for the default adwaita background,
    and gnome-backgrounds-extras for the other standard GNOME wallpapers.


author: Florian Müllner <fmuellner@redhat.com> - 3.32.1-30
changelog:
  - Fix stuck grab if disabled with open context menu
    Resolves: #2149670
  - Support .desktop files of type Link
    Resolves: #2143825


author: Florian Müllner <fmuellner@redhat.com> - 3.32.1-31
changelog:
  - Adjust classification banner position in fullscreen
    Resolves: #2150107
  - Allow inhibiting workspace switch gesture
    Resolves: #2138109


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-29
changelog:
  - Backport SAE/WPA3/OWE support
    Resolves: #1915411
    Resolves: #2023156
  - Add patch to fix wifi performance issue
    Resolves: #1938323


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-30
changelog:
  - Fix connection list AP selection and SSID display for OWE
    Resolves: #2023156
  - Fix saving passwords for non-wifi connections
    Resolves: #1938944


author: Adam Williamson <awilliam@redhat.com> - 3.28.0-7
changelog:
  - Drop unnecessary pkgconfig(NetworkManager) BuildRequire
  - Run autoreconf to avoid automake version mismatch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Don't set group tags
  - Remove ancient obsoletes
  - Remove gsettings schema scriptlets


author: Milan Crha <mcrha@redhat.com> - 3.28.2-5
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.28.2-6
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.0-3
changelog:
  - Drop the run-time requirement on ImageMagick
  - Enable Python 2 during the build for itstool
  Resolves: #1564997


author: Ray Strode <rstrode@redhat.com> - 3.28.1-17
changelog:
  - Don't force kiosk profile for user in non-kiosk sessions
    after the user has been used for a kiosk session once
    Related: #2070976


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-50
changelog:
  - Fix struts on login screen
    Resolves: #2138941
  - Fix launching network device settings
    Resolves: #1879405


author: Kalev Lember <klember@redhat.com> - 3.36.1-3
changelog:
  - Upload correct 3.36.1 tarball
  - Fix hardcoded desktop and appdata names to match what's in RHEL 8.3
  - Add back shell extensions support
  - Resolves: #1839774


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Milan Crha <mcrha@redhat.com> - 3.28.1-7
changelog:
  - extensions: Incorrectly shows enabled extensions as disabled after enable-all
  - Resolves: #1804123


author: Parag Nemade <pnemade AT redhat DOT com> - 20120503-10
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Alejandro Sáez <asm@redhat.com> - 2-17
changelog:
  - Add and update the go-compiler functionality (gobuild macro)
  - Deprecate ix86
  - Update Source0
  - Resolves: rhbz#1905383


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Update to Go 1.21.7
  - Add aarch64 and ppc64le for Delve
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: Archana Ravindar<aravinda@redhat.com> - 1.21.11-1
changelog:
  - Rebase to Go1.21.11 that includes fixes for CVE-2024-24789 and CVE-2024-24790
  - Resolves: RHEL-40274


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144542


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Archana Ravindar <aravinda@redhat.com> - 1.21.3-2
changelog:
  - Rebase disable_static_tests_part2.patch to Go 1.21.3
  - Add missing strict fips runtime detection patch
  - Temporarily disable FIPS tests on aarch64 due to builder kernel bugs
  - Remove fix-memory-leak patch as it is fixed upstream
  - Resolves: RHEL-12620


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Add release information
  - Set GOTOOLCHAIN to local
  - Skip TestOverlongMessagePKCS1v15
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: David Benoit <dbenoit@redhat.com> - 1.21.13-2
changelog:
  - Rebuild Go with CVE Fixes
  - Remove fix-memleak-setupRSA.patch (exists upstream)
  - Resolves: RHEL-58223
  - Resolves: RHEL-57961
  - Resolves: RHEL-57847
  - Resolves: RHEL-57860


author: Parag Nemade <pnemade AT redhat DOT com> - 20120715-8
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Peter Oliver <rpm@mavit.org.uk> - 20170928-2
changelog:
  - Prefer zopflipng to optipng, since it should yield smaller files.
  - Use the font we built, rather than the one included with the source.


author: Mike FABIAN <mfabian@redhat.com> - 20180508-1
changelog:
  - Update to upstream snapshot tarball (color emoji font version 2.011)
  - Add patch to build all country flags (Resolves: rhbz#1574195)


author: Pravin Satpute <psatpute@redhat.com> - 20150929-1
changelog:
  - Resolves #1269404 - Update to new git release 20150929
  - Upstream divided google-noto-fonts package into noto-cjk-font and noto-emoji
  - Removed packages: google-noto-color-emoji-fonts, google-noto-sans (cjk-fonts,
  - japanese-fonts, simplified-chinese-fonts and traditional-chinese-fonts)
  - Replaced by google-noto-cjk-fonts and google-noto-emoji-fonts
  - New subpackages - google-noto-nastaliq-urdu-fonts and google-noto-sans-tibetan-fonts


author: Pravin Satpute <psatpute@redhat.com> - 20161022-1
changelog:
  - Resolves #1321685 - Added Noto Mono font.
  - License changed from ASL 2.0 to OFL. 
  - New package addition: Mono, Serif Bengali, Serif Devanagari
  - Serif Gujarari, Serif Malayalam, Serif Tamil and Serif Telugu.


author: Jens Petersen <petersen@redhat.com> - 20161022-3
changelog:
  - add a fontconfig priority option to the notopkg macro,
    which allows overriding the default 66 priority


author: Akira TAGOH <tagoh@redhat.com> - 20161022-7.1
changelog:
  - Add CI tests
    Resolves: rhbz#1682152
  - Fix typos in fontconfig config for Kannada
    Resolves: rhbz#1764502


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Jose Noguera <jnoguera@redhat.com> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Add ability to configure maximum number of boot attempts via env var and config file.
  - Add How does it work section to README.
  - Add CI via GitHub Actions and unit testing with BATS.
  - Add update platforms DNS resolutiona and connection checker as health checks out of the box


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1465878)
  - ease future updates by better macro use
  - drop obsolete patch hunks
  - fix missing prototype for fchown warning


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-5
changelog:
  - ensure binaries are linked with Fedora LDFLAGS (#1548532)
  - use ldconfig_scriptlets macro
  - add proper man links for tcat and untoast


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - %build: --disable-fatal-warnings --disable-silent-rules
  - fix rpath harder
  - use %ldconfig_scriptlets, %make_build, %make_install
  - -devel: tighten deps with %{_isa}


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - Patch CVE-2023-40474: Integer overflow
  - Patch CVE-2023-40475: Integer overflow
  - Patch CVE-2023-40476: Integer overflow in H.265 video parser
  - Resolves: RHEL-19500, RHEL-19504, RHEL-19507


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-2
changelog:
  - tigten subpkg deps
  - fix rpaths
  - update %files
  - use %ldconfig_scriptlets %make_build %make_install
  - %build: --disable-fatal-warnings --disable-silent-rules
  - Conflicts: gstreamer1-plugins-bad-free < 1.13


author: Tomas Popela <tpopela@redhat.com> - 1.14.0-2
changelog:
  - Enable Wayland support (previously disabled due to missing wayland-devel
    as a BR - before it was probably brought in by something else).


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: David King <dking@redhat.com> - 3.22.30-9
changelog:
  - Fix treeview a11y refcounting (#2032438)
  - Be quiet on exit under X11 (#1887266)
  - Avoid cellarea resize crash (#2032437)


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9.0 release
  - Use gcrypt for DES impl instead of local DES impl (rhbz #1618426)
  - Fix crash if connection fails early (rhbz #1622189)


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-2
changelog:
  - Fix crash when TLS handshake fails (rhbz #1665837)
  - Ensure auth failure signal is emitted when SASL fails (rhbz #1688275)


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.8-1
changelog:
  - 0.12.8 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-av/0.12/gupnp-av-0.12.8.news
  - Use %license


author: Kalev Lember <klember@redhat.com> - 0.12.9-1
changelog:
  - Update to 0.12.9
  - Don't set group tags
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Debarshi Ray <rishi@fedoraproject.org> 2.14.1-2
changelog:
  - Always use lua over luajit, just more common
  - Remove no longer needed snippets
  - Add enchant/enchant2 to requires


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Sergey Fokin <sfokin@cloudlinux.com> - 3.18.4-9.alma
changelog:
  - add AlmaLinux support
  - fix permission for custom created gpg dir
  - change gpg server to pgp.mit.edu


author: Jakub Hrozek <jhrozek@redhat.com> - 2.8.0-2
changelog:
  - Resolves: #rhbz1654223: CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-4
changelog:
  - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
                            Service with large HTTP headers [rhel-8]


author: Sergio Corrreia <scorreia@redhat.com> - 2.8.0-7
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Mat Booth <mat.booth@redhat.com> - 4.5.6-2
changelog:
  - Add a patch to allow building with mockito 2
  - Don't package tests jars, the tests jars have the same OSGi metadata as the
    main jars, which can cause tycho to resolve the wrong one when building
    eclipse plugins


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.5.10-4
changelog:
  - Fix incorrect handling of malformed authority component in request URIs
  - Resolves: CVE-2020-13956


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi 
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.1
changelog:
  - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue
    in mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding problem in
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45777 - httpd:2.4/httpd: Improper escaping of output
    in mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45758 - httpd:2.4/httpd: null pointer dereference
    in mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45743 - httpd:2.4/httpd: Potential SSRF
    in mod_rewrite (CVE-2024-39573)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.2
changelog:
  - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend
    applications whose response headers are malicious or exploitable (CVE-2024-38476)
  - Resolves: RHEL-53022 - Regression introduced by CVE-2024-38474 fix


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20080825-12
changelog:
  - Add Supplements: tag for langpacks naming guidelines
  - Clean the specfile to follow current packaging guidelines


author: Michael Stahl <mstahl@redhat.com> - 0.20151222-1
changelog:
  - upgrade to latest version
  - upstream removed "OASIS distribution license agreement 0.1", only GPLv2/v3 now
  - remove needless use of percent-defattr


author: Michael Stahl <mstahl@redhat.com> - 0.20160407-1
changelog:
  - Resolves: rhbz#1344662 upgrade to latest release
  - switch source URL to https
  - revert the GNU grep 2.23 LANG=C bug workaround
  - added explicit build dependency on perl, now required on rawhide


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-5
changelog:
  - Resolves: #1713606 - Fix hangul preedit commit with mouse click
  - Resolves: #1682157 - Integrate ibus-desktop-testing and test cases


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-17
changelog:
  - Add ibus-m17n-content-type.patch
  - Fix bug 1024071 - ibus-m17n is enabled in the password entry field
    of the lock screen


author: Mike FABIAN <mfabian@redhat.com> - 1.9.17-1
changelog:
  - update to 1.9.17
  - Load .desktop file for ibus-setup-table correctly under Gnome Wayland
  - Set WM_CLASS of ibus-setup-table correctly


author: Mike FABIAN <mfabian@redhat.com> - 1.9.18-1
changelog:
  - update to 1.9.18
  - validate ibus-table.appdata.xml in %check
  - Update translations from zanata (pt_BR updated, es new)
  - Don't query user database if user define phrase and
    dynamic adjust are disabled (thanks to heiher)
  - Enable hash map based cache for user database enabled
    (thanks to heiher)
  - Import hash map based cache for table database (thanks to
    heiher)
  - Install appstream metadata to /usr/share/metainfo/ (thanks
    to jbicha)
  - Fix some appdata validation issues (thanks to jbicha)
  - Fix bug in Unihan_Variants.txt, 著 U+8457 is both
    simplified *and* traditional Chinese (thanks to heiher)


author: Jiri Vanek <jvanek@redhat.com> 1.7.1-16
changelog:
  - added patch1, patch4 and patch11 to fix CVE-2019-10182
  - added patch2 to fix CVE-2019-10181
  - added patch3 and patch33 to fix CVE-2019-10185
  - Resolves: rhbz#1724958 
  - Resolves: rhbz#1725928 
  - Resolves: rhbz#1724989


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-2
changelog:
  - added native launchers, via separate subpackage, but efectively changed main package to arched one
  - removed policyeditor man page, it was link to itself
  - Resolves: rhbz#1900043


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-4
changelog:
  - added patch2, fed2f5b-22402bb.patch containing important fixes from future 1.8.5
  - Resolves: rhbz#1900043


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.2-3
changelog:
  - Add a series of upstream patches to enable compiler warnings and
    fix multiple issues.
  - Revert one of the checks which breaks processing of PE binaries.
  - Removed the 'Group' line, not needed with modern Fedora/RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.3-1
changelog:
  - Rebase to JSS 4.9.3
  - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.4-1
changelog:
  - Rebase to JSS 4.9.4
  - Bug 2013674 - JSS cannot be properly initialized after using another NSS-backed security provider


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-0.1
changelog:
  - Rebase to PKI 10.12.0
  - Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
  - Bug 1984455 - [RFE] Date Format on the TPS Agent Page
  - Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
  - Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
  - Bug 2006070 - Upgrades incorrectly add secret attribute to connectors


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-4
changelog:
  - Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE
  - Rename packages to idm-pki


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.14.3-1
changelog:
  - Rebase to PKI 10.14.3
  - Bug 1959057 - An error has ocorred (IPA Error 4301:CertificateOperationError)
  - Bug 2016164 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug 2022561 - ipa-healthcheck CADogtagCertsConfigCheck fail to process the scenario of renewed IPA CA certificates ( ipa get_cert_from_db() )


author: Martin Kolman <mkolman@redhat.com> - 0.3.80-1
changelog:
  - Do not call a task which has been moved into install keyboard task (rvykydal)
  - Adapt to changes in localization module (rvykydal)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.81-1
changelog:
  - Use macro for Python 3 requirement in spec file (mkolman)
  - Remove outdated dependency on python3-libreport (vslavik)
  - Fix a typo in Zanata CLI invocation (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.81.5-1
changelog:
  - Disable multi TTY handler when running in SSH session (mkolman)
  - Add CLI option to disable multi TTY handler (mkolman)
  - Add PEP8 Speaks configuration (mkolman)
  - Add missing branch config to manifest file (jkonecny)
  - Add translation badge to the README file (jkonecny)
  - Remove unused PREFIX variable from Makefile (jkonecny)
  - Use new po-push instead of Zanata (jkonecny)
  - Add po-push using localization repository (jkonecny)
  - Use translation repository to pull the translations (jkonecny)


author: Jan Horak <jhorak@redhat.com> - 0.92.3-3
changelog:
  - Use python2 for the extensions explicitly
  - Exluding s390x, build problems, making no sense to build Inkscape for
    mainframe hardware


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-1
changelog:
  - Bring Inkscape 1.0.1 into RHEL 8.8 and obsolete the previous 0.92.3 modular
    package. See https://issues.redhat.com/browse/RHELPLAN-121672
  - Resolves: rhbz#1891732


author: Colin Walters <walters@redhat.com> - 0.51.0-4
changelog:
  - Add patch to hopefully close race condition in systemd builds
  - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1249051
  - And the test suite is failing but the logs are hidden under
    test-suite.log, so copy some code I had in dbus.spec to cat them.


author: Tomas Orsava <torsava@redhat.com> - 1.2.0-9
changelog:
  - Switch hardcoded python3 shebangs into the %{__python3} macro
  - Add missing BuildRequires on python3-devel so that %{__python3} macro is
    defined


author: Julien Rische <jrische@redhat.com> - 4.9.13-3
changelog:
  - ipa-kdb: Detect and block Bronze-Bit attacks
    Resolves: RHEL-9984
  - Fix for CVE-2023-5455
    Resolves: RHEL-12578


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-4
changelog:
  - Improve server affinity for CA-less deployments
    Resolves: RHEL-22283
  - host: update system: Manage Host Keytab permission
    Resolves: RHEL-22286
  - adtrustinstance: make sure NetBIOS name defaults are set properly
    Resolves: RHEL-21938
  - ipatests: Fix healthcheck report when nsslapd accesslog logbuffering is set to off
    Resolves: RHEL-19672


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-5
changelog:
  - kdb: PAC generator: do not fail if canonical principal is missing
    Resolves: RHEL-23630
  - ipa-kdb: Fix memory leak during PAC verification
    Resolves: RHEL-22644
  - Fix session cookie access
    Resolves: RHEL-23622
  - Do not ignore staged users in sidgen plugin
    Resovlves: RHEL-23626
  - ipa-kdb: Disable Bronze-Bit check if PAC not available
    Resolves: RHEL-22313
  - krb5kdc: Fix start when pkinit and otp auth type are enabled
    Resolves: RHEL-4874
  - hbactest was not collecting or returning messages
    Resolves: RHEL-12780


author: Julien Rische <jrische@redhat.com> - 4.9.13-6
changelog:
  - ipa-kdb: Rework ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - ipatests: wait for replica update in test_dns_locations
    Resolves: RHEL-22373
  - ipatests: fix tasks.wait_for_replication() method
    Resolves: RHEL-25708


author: Julien Rische <jrische@redhat.com> - 4.9.13-7
changelog:
  - ipa-kdb: Fix double free in ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled
    Resolves: RHEL-12153
  - Vault: improve vault server archival/retrieval calls error handling
    Resolves: RHEL-12153
  - Vault: add support for RSA-OAEP wrapping algo
    Resolves: RHEL-12153


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-8
changelog:
  - rpcserver: validate Kerberos principal name before running kinit
    Resolves: RHEL-26153
  - Vault: add additional fallback to RSA-OAEP wrapping algo
    Resolves: RHEL-28259


author: Rafael Jeffman <rjeffman@redhat.com> - 9.4.13-9
changelog:
  - dcerpc: invalidate forest trust intfo cache when filtering out realm domains
    Resolves: RHEL-28559
  - Backport latests test fixes in python3-tests
    ipatests: add xfail for autoprivate group test with override
    ipatests: remove xfail thanks to sssd 2.9.4
    ipatests: adapt for new automembership fixup behavior
    ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases
    test_xmlrpc: adopt to automember plugin message changes in 389-ds
    Resolves: RHEL-29908


author: Julien Rische <jrische@redhat.com> - 4.9.13-10
changelog:
  - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183)
    Resolves: RHEL-29927
  - kdb: fix vulnerability in GCD rules handling (CVE-2024-2698)
    Resolves: RHEL-29692


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-9
changelog:
  - Allow the admin user to be disabled
    Resolves: RHEL-34756
  - ipa-otptoken-import: open the key file in binary mode
    Resolves: RHEL-39616
  - ipa-crlgen-manage: manage the cert status task execution time
    Resolves: RHEL-30280
  - idrange-add: add a warning because 389ds restart is required
    Resolves: RHEL-28996
  - PKINIT certificate: fix renewal on hidden replica
    Resolves: RHEL-4913, RHEL-45908


author: Rob Crittenden <rcritten@redhat.com> - 0.7-8
changelog:
  - Suppress the CRLManager check false positive when a CA is not
    configured (#1983060)
  - Fix the backport of the pki.server.healthcheck suppression (#1983060)


author: Rob Crittenden <rcritten@redhat.com> - 0.12-1
changelog:
  - Update to upstream 0.12 (#2139529)
  - Verify that the number of krb5kdc worker processes is aligned to the
    number of configured CPUs (#2052930)
  - IPADNSSystemRecordsCheck displays warning message for 2 expected
    ipa-ca AAAA records (#2099484)


author: Michal Ruprich <mruprich@redhat.com> - 3.5-2
changelog:
  - Resolves: #1647413 - iperf3 with option --sctp in client mode fails with error 'iperf3: unrecognized option --sctp'


author: Michal Ruprich <mruprich@redhat.com> - 3.5-4
changelog:
  - Resolves: #1665142 - [RFE] enable SCTP support in iperf3
  - Resolves: #1656429 - option --udp-counters-64bit shown in --help output but not in man page
  - Resolves: #1700497 - [RFE] enable SSL support in iperf3


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-1
changelog:
  - New version
    Resolves: rhbz#1468785
    Resolves: CVE-2017-10965
    Resolves: CVE-2017-10966
  - Dropped allow-negative-values-in-settings patch (not needed)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.2.1-4
changelog:
  - Python 2 binary package renamed to python2-isomd5sum
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.2-1
changelog:
  - Don't put DESTDIR in the isomd5sum.pc file
  - New Version 1.2.2 (bcl)
  - Fix aligned alloc parameters and overflow on 32bit size_t (#1497458) (squimrel)
  - Fix memory leak (squimrel)
  - Add pkgconfig file (squimrel)
  - Remove line-breaks from error messages (squimrel)
  - Make library C++ compatible (squimrel)
  - Constify function signatures (squimrel)
  - Revert checkCallback function signature (squimrel)


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.3-1
changelog:
  - New Version 1.2.3 (bcl)
  - Fix 32bit bug on large files (squimrel)
  - Don't put DESTDIR in the isomd5sum.pc file (bcl)


author: Petr Viktorin <pviktori@redhat.com> - 2.0.2-8
changelog:
  - Be more explicit about Python build dependencies
    (Require python2-devel, tell autotools that PYTHON is python2)


author: Mat Booth <mat.booth@redhat.com> - 2.9.8-1
changelog:
  - Update to latest upstream release, fixes CVE-2018-14718 CVE-2018-147189
    CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 CVE-2018-12022 CVE-2018-12023
    CVE-2018-14720 CVE-2018-14721


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fixes: CVE-2019-14540
  - Fixes: CVE-2019-16335
  - Resolves: rhbz#1760274
  - Resolves: rhbz#1760278


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12309
  - Resolves: RHEL-13600
  - Resolves: RHEL-13628
  - Resolves: RHEL-13635
  - Resolves: RHEL-13641
  - Resolves: RHEL-13612
  - Resolves: RHEL-13621


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-5
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.2.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-21477
  - Resolves: RHEL-20975


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - Remove obsolete file generate_singlerepo_source_tarball.sh
  - Remove obsolete file get_sources.sh
  - Remove obsolete file update_main_sources.sh
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Sync patch set with portable build
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-2
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u422-b01 (EA)
  - Update release notes for shenandoah-8u422-b01.
  - Switch to EA mode.
  - Sync the copy of the portable specfile with the latest update
  - Restore NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
  - Document policy repacking script and rename to correct spelling and style
  - Limit Java only tests to one architecture using jdk_test_arch
  - Related: RHEL-46866
  - Resolves: RHEL-47067
  - Resolves: RHEL-47087


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b05-1.1
changelog:
  - Update to shenandoah-jdk8u422-b05 (GA)
  - Update release notes for shenandoah-8u422-b05.
  - Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Actually require tzdata 2024a now it is available in the buildroot
  - Add missing build dependencies on zlib-devel and tar
  - Update LCMS version to match JDK-8245400
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-46866
  - Resolves: RHEL-47001


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217713
  - Resolves: rhbz#2196318
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224411


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236589


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12222
  - Resolves: RHEL-13546
  - Resolves: RHEL-13553
  - Resolves: RHEL-13559
  - Resolves: RHEL-13566
  - Resolves: RHEL-13572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20981


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30917


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Switch to GA mode for release
  - Fix Provides to reflect up to date component versions
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Resolves: RHEL-45209
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236591


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12204
  - Resolves: RHEL-13670
  - Resolves: RHEL-13680
  - Resolves: RHEL-13689
  - Resolves: RHEL-13708
  - Resolves: RHEL-13658


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20969


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20969


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.6-0.2.ea
changelog:
  - Update to jdk-17.0.11+6 (EA)
  - Sync java-17-openjdk-portable.specfile
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Skip -ga tags
  - generate_source_tarball.sh: Get -ea suffix from version-numbers.conf
  - generate_source_tarball.sh: Use git archive to generate tarball
  - generate_source_tarball.sh: Update version in comment
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Require tzdata 2023d (JDK-8322725)
  - generate_source_tarball.sh: Add license
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-27137


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Sync java-17-openjdk-portable.specfile
  - Sync java-17-openjdk-portable.specfile again to mention OPENJDK-2730
  - Related: RHEL-27137


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires fro 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-27137
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.12+6 (EA)
  - Add openjdk-17.0.12+6-ea.tar.xz to .gitignore
  - Set updatever to 12
  - Set buildver to 6
  - Set rpmrelease to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.12+6-ea.tar.xz
  - Require tzdata-java 2024a at runtime and for build (JDK-8325150)
  - Update lcms2 bundled provides to 2.16.0
  - Add zlib 1.3.1 bundled provides and zlib-devel build requirement (OPENJDK-3065)
  - Use component in EPEL and Fedora bug URLs
  - Label as error a designator mismatch
  - Change a fix-me comment to a note instead
  - Sync generate_source_tarball.sh from Fedora rawhide


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck


author: Anton Bobrov <abobrov@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Use tar exclude options for VCS files
  - generate_source_tarball.sh: Improve VCS exclusion


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Delete fips-17u-d63771ea660.patch
  - Add fips-17u-e893be00150.patch
  - Update fipsver to e893be00150


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Add upstream patch that removes illegal RLO Unicode characters (JDK-8332174)
  - Sync the copy of the portable specfile with the latest update


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Set portablerelease to 2
  - Related: RHEL-46638
  - Add debuginfo section to rpminspect.yaml (OPENJDK-2904)
  - Add unicode section to rpminspect.yaml (OPENJDK-2904)
  - Add contents of fips-17u-e893be00150.patch


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-2
changelog:
  - Update to jdk-17.0.12+7 (GA)
  - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz
  - Sync java-17-openjdk-portable.specfile
  - Set buildver to 7
  - Set portablerelease 1
  - Set is_ga to 1
  - Update sources to openjdk-17.0.12+7.tar.xz
  - Resolves: RHEL-46638
  - Resolves: RHEL-46996
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20984


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30944


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32405


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30943


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45358
  - Resolves: RHEL-46027


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45358
  - Resolves: RHEL-47398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47009


author: - Jiri Vanek <jvanek@redhat.com> - 0.32.92-1
changelog:
  - first update ever
  - to newest wrapper 32.92 with faith to fix some issues
  - added build requirments of gtk3-devel, at-spi2-atk-devel and at-spi2-core-devel
  - introduced libver macro to avoid duplicated entry


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: gil cattaneo <puntogil@libero.it> 1.0.0-1
changelog:
  - update to 1.0.0.Final
  - fix BR list and use BR mvn()-like
  - introduce license macro
  - remove some rpmlint problems
  - remove duplicate files


author: gil cattaneo <puntogil@libero.it> 3.1.4-6
changelog:
  - fix FTBFS rhbz#1307647
  - fix BR list and use BR mvn()-like
  - introduce license macro
  - fix some rpmlint problem


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - Remove maven-surefire-provider-junit5 dependency as it doesn't exist in RHEL 8.
  - Correct some typos.
  - Unable to build until criu-devel is available in RHEL 8.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972024


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.2-2
changelog:
  - Properly name-space bundled json_simple.
    See upstream: https://github.com/rhuss/jolokia/issues/398


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Akira TAGOH <tagoh@redhat.com> - 1:7.200-2.1
changelog:
  - Backport fontconfig files from Fedora
  - Sub-packaging per family names as usually do in Fdora.
    Resolves: rhbz#1777843


author: Ryan O'Hara <rohara@redhat.com> - 2.0.10-6
changelog:
  - Fix segfault when smtp alerts configured (#1693706)
  - Fix double free when smtp_helo_name copied from local_name (#1693706)


author: Florian Festi <ffesti@redhat.com> - 123-1
changelog:
  - Update kmod.prov for better performance (#1794491)
  - Backport performance improvements for brp-mangle-shebangs (#1794779)


author: John Kacur <jkacur@redhat.com> - 2.7-8
changelog:
  - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd
  Resolves: rhbz#1678252


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - Upgrade to upstream 0,8, includes:
  - CVE-2017-15112 unsafe use of -p/--admin-password on command line
  - CVE-2017-15111 unsafe /tmp log file in --log-file option in keycloak_cli.py


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-2
changelog:
  - Backport upstream patches to adds the --oidc-logout-uri option
    and fix OIDC-related man page issues
  - Related: rhbz#1553890 - [RFE] Add mod_auth_openidc support


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-3
changelog:
  - fix bogus changelog date (nils@redhat.com)
  - remove subpackages we don't ship (nils@redhat.com)
  - deactivate main package BRs if we don't build it (nils@redhat.com)
  - concentrate main package BRs in one place (nils@redhat.com)
  - add tito.props for cobbler (tkasparek@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 2.0.7-5
changelog:
  - 1640635 - don't quote kernel args (michael.mraka@redhat.com)
  - use python3 dependencies (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-6
changelog:
  - 1633713 - Require the Python interpreter directly instead of using the
    package name (tkasparek@redhat.com)


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Richard Hughes <richard@hughsie.com> - 1.0-6
changelog:
  - Explode the metainfo files into the subpackages so they get added to the
    distro-specific AppStream metadata.
  - This allows us to add and remove languages in GNOME Software.


author: Mike FABIAN <mfabian@redhat.com> - 0.0.38-1
changelog:
  - Add some new translations from CLDR
  - Add agr, bi, hif, kab, mfe, miq, mjw, shn, sm, to, tpi_PG, yuw, AS, MU, SC, TO, VU, WS


author: Pete Walter <pwalter@fedoraproject.org> - 0.0.38-5
changelog:
  - Conditionally add back Python 2 subpackage on Fedora
  - Rename Python 3 subpackage to python3-langtable to follow guidelines
  - Resolves: rhbz#1559099


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Michal Bocek <mbocek@redhat.com> - 0.11.0-1
changelog:
  - Rebase to v0.11.0
  - Bump leapp-framework capability to 1.3
  - Preserve verbose/debug options during the whole upgrade workflow
  - Print the informative error block to the STDOUT instead of STDERR
  - Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
  - Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
  - Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
  - Store dialog answers in the leapp.db
  - Update and improve man pages
  - Raising a missing exception with tests failing under py3
  - Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
  - The `call` function has been improved to be working on MacOS
  - Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases


author: Dominik Rehak <drehak@redhat.com> - 0.11.1-1
changelog:
  - Rebase to v0.11.1
  - Fix conversion of deprecation messages to reports
  - Fix various issues regarding suppressing of deprecation
  - Remove pytest residuals in spec file
  - Update documentation and manpages
  - Resolves: #1887913


author: Dominik Rehak <drehak@redhat.com> - 0.12.0-1
changelog:
  - Rebase to v0.12.0
  - Bump leapp-framework capability to 1.4
  - Add JSON schema of leapp reports for validation
  - Add a stable report identifier for each generated report
  - Resolves: #1915508


author: Petr Stodulka <pstodulk@redhat.com> - 0.12.1-1
changelog:
  - Rebase to v0.12.1
  - Added rerun command for experimental purposes to be able to re-run manually
    the last phase when needed (experimental)
  - Resolves: #1952885


author: Petr Stodulka <pstodulk@redhat.com> - 0.13.0-10
changelog:
  - Rebase to v0.13.0
  - Bump the provided leapp-framework capability to 2.0
  - The commands for the leapp tool (e.g. preupgrade, upgrade) are now
    defined in the leapp-repository component
  - The leapp tool scans the available CLI commands dynamically
  - First build for the IPU 8 -> 9
  - Resolves: #1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.14.0-1
changelog:
  - Rebase to v0.14.0
  - Bump leapp-framework to 2.2
  - Bump leapp-framework-dependencies to 5
  - Add depency on python3 (distribution python)
  - Added possibility to specify the report format version
  - Check the answerfile upon loading and prevent creation of invalid answerfile
  - Dialogs: print the reason field for question in the answerfile
  - Fix the JSON serialization in Dialogs on Python3
  - Introduced new functions in the leapp standard library
  - Updated man page
  - Resolves: rhbz#1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.0-1
changelog:
  - Rebase to v0.15.0
  - Bump leapp-framework to 3.1
  - Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
  - Fix crashes when processing invalid FQDNs
  - Fix the error msg when a leapp CLI command does not exist
  - Introduce new report JSON schema v1.2.0 (default: 1.1.0)
  - Resolves: rhbz#2090992, rhbz#2106065


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.1-1
changelog:
  - Rebase to v0.15.1
  - Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
  - Propagate error messages from leapp actors to the main leapp process
  - Prevent unicode errors when printing error messages
  - Resolves: rhbz#2162710


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-1
changelog:
  - Rebase to v0.16.0
  - Improve the performance of the leapp execution for "pre first reboot" phases
  - Introduce upgrades for RHEL 8 to RHEL 9
  - Enabled upgrade paths:
    - RHEL 8.6 -> 9.0
    - RHEL with SAP 8.6 -> 9.0
  - Requires leapp-framework >= 2.2
  - Bump leapp-framework-dependencies to 5
  - Add actors for MariaDB and PostgreSQL
  - Add detection of enabled DNF plugins
  - Add scan & checks for VDO devices
  - Bind the /run/lock dir into the container in the upgrade initramfs env
  - Check Firewalld configuration
  - Check SSSD configuration for changes in RHEL 9
  - Check deprecated network settings
  - Check ifcfg files for change in RHEL 9
  - Check the existence of the custom network-scripts
  - Filter out PES data unrelated for the particular IPU path
  - Fix generating of instructions/data for the leapp DNF plugin during
  - Fix generating the target initramfs when additional files and dracut modules are requested to be added
  - Fix getting device attribute through udev on Python 3
  - Fix parsing of sysctl output during the scan of the system
  - Fix scanning "/etc/default/grub" with empty lines
  - Fix scanning information about mounted devices
  - Fix the execution order for the dnf dry run actor
  - Handle SELinux during the in-place upgrade
  - Handle live kernel patching during
  - Improve and generalize checking of device drivers
  - Inhibit the upgrade when ipa-server is detected
  - Introduce DNFWorkarounds to register scripts to be executed before DNF run
  - Introduce handling of DNF modularity during the upgrade
  - Introduce the --report-schema option to control the version of the generated report format
  - Introduce the --target option to specify the version of the target system
  - Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
  - Resolves: #1997076


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-4
changelog:
  - Extend the check of deprecated or removed PCI drivers
  - Do not instruct DNF to install rubygem-irb during the in-place upgrade
    to prevent conflict between files
  - Resolves: #1997076


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-1
changelog:
  - Rebase to v0.17.0
  - Support upgrade path RHEL 8.7 -> 9.0 and RHEL SAP 8.6 -> 9.0
  - Provide and require leapp-repository-dependencies 7
  - Provide `leapp-command(<CMD>)` for each CLI command provided by leapp-repository
  - Require dracut, kmod, procps-ng on RHEL 8+
  - Require leapp-framework >= 3.1
  - Add actors covering removal of NIS components on RHEL 9
  - Add checks for obsolete .NET versions
  - Allow specifying the report schema v1.2.0
  - Check and handle upgrades with custom crypto policies
  - Check and migrate OpenSSH configuration
  - Check and migrate multipath configuration
  - Check minimum memory requirements
  - Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
  - Enable Base and SAP in-place upgrades on Azure
  - Enable in-place upgrade in case LUKS volumes are Ceph OSDs
  - Enable in-place upgrades in Azure RHEL 8 base images using RHUI
  - Enable in-place upgrades on  IBM z16 machines
  - Enable the CRB repository for the upgrade only if enabled on the source system
  - Fix cloud provider detection on AWS
  - Fix detection of the latest kernel
  - Fix issues caused by leapp artifacts from previous in-place upgrades
  - Fix issues with false positive switch to emergency console during the upgrade
  - Fix swap page size on aarch64
  - Fix the VDO scanner to skip partitions unrelated to VDO and adjust error messages
  - Fix the false positive NFS storage detection on NFS servers and improve the report msg
  - Fix the issues on systems with the LANGUAGE environment variable
  - Fix the root directory scan to deal with non-utf8 filenames
  - Handle upgrades of SAP systems on AWS
  - Inform about necessary migrations related to bacula-director when installed on the system
  - Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
  - Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
  - Inhibit upgrade when NVIDIA driver is detected
  - Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
  - Migrate the OpenSSL configuration
  - PESEventScanner actor has been fully refactored
  - Report changes around SCP and SFTP
  - Skip comment lines when parsing the GRUB configuration file
  - Stop propagating the “debug” and ”enforcing=0” kernel cmdline options into the target kernel cmdline options
  - Mass refactoring to be compatible with leapp v0.15.0
  - Resolves: rhbz#2090995, rhbz#2040470, rhbz#2092005, rhbz#2093220, rhbz#2095704, rhbz#2096159, rhbz#2100108, rhbz#2100110, rhbz#2103282, rhbz#2106904, rhbz#2110627


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-2
changelog:
  - Update VDO checks to enable user to decide the system state on check failures
    and undetermined block devices
  - The VDO dialog and related VDO reports have been properly updated
  - Resolves: rhbz#2096159


author: Petr Stodulka <pstodulk@redhat.com> - 0.17.0-3
changelog:
  - Adding back instruction to not install rubygem-irb during the in-place upgrade
    to prevent conflict between files
  - Resolves: rhbz#2090995


author: Petr Stodulka <pstodulk@redhat.com> - 0.18.0-1
changelog:
  - Rebase to v0.18.0
  - Introduce new upgrade path RHEL 8.8 -> 9.2
  - Requires cpio
  - Requires python3-gobject-base, NetworkManager-libnm
  - Bump leapp-repository-dependencies to 9
  - Add breadcrumbs results to RHSM facts
  - Add leapp RHUI packages to an allowlist to drop confusing reports
  - Added checks for RHEL SAP IPU 8.6 -> 9.0
  - Check RPM signatures during the upgrade
  - Check only mounted XFS partitions
  - Check the validity and compatitibility of used leapp data
  - Detect CIFS also when upgrading from RHEL8 to RHEL9 (PR1035)
  - Detect RoCE on IBM Z machines and check the configuration is safe for the upgrade
  - Detect a proxy configuration in YUM/DNF and adjust an error msg on issues caused by the configuration
  - Detect and report systemd symlinks that are broken before the upgrade
  - Detect the kernel-core RPM instead of kernel to prevent an error during post-upgrade phases
  - Disable the amazon-id DNF plugin on AWS during the upgrade stage to omit confusing error messages
  - Do not create new *pyc files when running leapp after the DNF upgrade transaction
  - Drop obsoleted upgrade paths
  - Enable upgrades of RHEL 8 for SAP HANA to RHEL 9 on ppc64le
  - Enable upgrades on s390x when /boot is part of rootfs
  - Extend the allow list of RHUI clients by azure-sap-apps to omit confusing report
  - Filter out PES events unrelated for the used upgrade path and handle overlapping event
   (fixes upgrades with quagga installed)
  - Fix scan of ceph volumes on systems without ceph-osd or when ceph-osd container is not found
  - Fix systemd symlinks that become incorrect during the IPU
  - Fix the check of memory (RAM) limits and use human readable values in the report
  - Fix the kernel detection during initramfs creation for new kernel on RHEL 9.2+
  - Fix the upgrade of IBM Z machines configured with ZFCP
  - Fix the upgrade on Azure using RHUI for SAP Apps images
  - Ignore external accounts in /etc/passwd
  - Improve remediation instructions for packages in unknown repositories
  - Improve the error message to guide users when discovered more space is needed
  - Improve the handling of blocklisted certificates
  - Inhibit the upgrade when entries in /etc/fstab cause overshadowing during the upgrade
  - Introduced an option to use an ISO file as a target RHEL version content source
  - Introduced possibility to specify what systemd services should be enabled/disabled on the upgraded system
  - Introduced the --nogpgcheck option to skip checking of RPM signatures
  - Map the target repositories also based on the installed content
  - Prevent re-run of leapp in the upgrade initramfs in case of previous failure
  - Prevent the upgrade with RHSM when Baseos and Appstream target repositories are not discovered
  - Provide common information about systemd services
  - RHUI(Azure) Handle correctly various SAP images
  - Register subscribed systems automatically to Red Hat Insights unless --no-insights-register is used
  - Remove obsoleted GPG keys provided by RH after the upgrade to prevent errors
  - Rework the network configuration handling and parse the configuration data properly
  - Set the system release lock after the upgrade also for premium channels
  - Small improvements in various reports
  - Resolves: rhbz#2088492, rhbz#2111691, rhbz#2127920, rhbz#2129716,rhbz#2139907, rhbz#2139907, rhbz#2141393, rhbz#2143372, rhbz#2155661


author: Eduard Abdullin <eabdullin@almalinux.org> - 0.18.0-1.2.alma
changelog:
  - Apply 0001-Introduce-leapp-data-in-the-RPM-repository.patch
  - Apply 0002-Add-el8toel9-actor-to-handle-directory-symlink.patch
  - Apply 0003-Enable-8-9-upgrades-with-FIPS-enabled-1053.patch
  - Apply 0004-Change-the-upgrade-paths-for-SAP-HANA.patch
  - Apply 0005-Update-the-repomap.json-file-for-RHUI-Azure.patch


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: José Expósito <jexposit@redhat.com> - 1.6.8-7
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-9
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160229)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160231)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160239)


author: José Expósito <jexposit@redhat.com> - 3.5.12-10
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Nicolas Chauvet <kwizart@gmail.com> - 0.7.4-24
changelog:
  - Multilibs support - rhbz#1433758
  - Simplify description
  - Convert AUTHORS to UTF-8
  - Drop Groups
  - Add Obsoletes/Provides for a52dec-devel


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-10
changelog:
  - Fix bogus date in %changelog
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Simone Caronni <negativo17@gmail.com> - 0.9.3-2
changelog:
  - Use autotools to get rid of RPATH.
  - Fix Java build requirements for RHEL/CentOS 7.
  - Clean up SPEC file, rpmlint fixes.
  - Add license macro.


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Attila Lakatos <alakatos@redhat.com> - 0.1.10-3
changelog:
  - Rebuild due to the following message: libestr-0.1.10-2.el8 has already been built
    resolves: rhbz#2056293


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-13
changelog:
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Benjamin Berg <bberg@redhat.com> - 1.90.0-2
changelog:
  - Add patch to remove debug spew from udev rules
  - Add patch to fix compilation error
  - Related: rhbz1740752


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Caolán McNamara <caolanm@redhat.com> 1.14.29-6
changelog:
  - Resolves: rhbz#1202683 thumbnails not created in absence of ImageMagick
    because gdk-pixbuf2-devel not present at build time


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Richard W.M. Jones <rjones@redhat.com> - 8.6-1
changelog:
  - Rebase to ntfs-3g 2021.8.22
  - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
    CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
    CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
    resolves: rhbz#2004490


author: Richard W.M. Jones <rjones@redhat.com> - 8.8-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127240 rhbz#2127248
    (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Parag Nemade <pnemade AT redhat DOT com> - 1:0.2.7-11
changelog:
  - Resolves:rh#1615534: libkkc-data FTBFS for missing BuildRequires
  - moved this package to use python3


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-8
changelog:
  - Suppress documentation in Flatpak builds
    Resolves: rhbz#1896257
  - build gir with non-parallel to avoid strange behavior.


author: David King <dking@redhat.com> - 2.6.2-17
changelog:
  - Fix CVE-2018-11577 (#1585906)
  - Fix CVE-2018-11684 (#1588632)
  - Fix CVE-2018-11685 (#1588637)
  - Fix CVE-2018-12085 (#1589942)


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
changelog:
  - New upstream version 0.7alpha.
  - No tarball was uploaded so temporarily use tarball from github.
  - Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
    chunk number validity checks


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
changelog:
  - Fix for CVE-2019-1010305
  - Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
    resolves: rhbz#1736745, rhbz#1736743


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.13-2
changelog:
  - Use https source URL
  - Drop obsolete spec elements
  - Use license macro
  - Update libusbx-devel build dependency
  - Drop ancient (F15) Obsoletes:
  - Tighten file list


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: David Tardon <dtardon@redhat.com> - 0.3.11-3
changelog:
  - Resolves: rhbz#1461763 CVE-2017-9433 Out-of-bounds write in the
    MsWrd1Parser::readFootnoteCorrespondence function


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Kalev Lember <klember@redhat.com> - 1.12-9
changelog:
  - Remove lib64 rpaths
  - Disable strict aliasing as it's not strict-aliasing clean on ppc64el
  - Don't redefine licensedir


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.0.0-1
changelog:
  - Update to upstream 2.0.0
  - Fixes the following CVEs plus others
  - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436
  - CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545
  - CVE-2017-5209


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Attila Lakatos <alakatos@redhat.com> - 1.6.1-1
changelog:
  - Rebase to 1.6.1
    resolves: RHEL-12892
  - Fix warnings reported by rpmlint
  - Enable support for zlib/zstd compression and GSSAPI


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: Andrei Lukoshko <alukoshko@cloudlinux.com> - 2.9.5-15.alma
changelog:
  - Add support for AlmaLinux Bug Tracker
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Tomas Popela <tpopela@redhat.com> - 2.42.7-5
changelog:
  - Resolves: RHEL-635 Upgrade to procedural-masquerade 0.1.7 to fix FTBFS with newer Rust
  - Resolves: RHEL-636 librsvg2 is missing Provides: bundled()
  - Resolves: RHEL-637 Add git-core as a BR for autosetup


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing
    GHSL-2023-032 / CVE-2023-1667
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2182251, rhbz#2189742


author: Sahana Prasad <sahana@redhat.com> - 0.9.6-14
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Note: version is bumped from 12 to 14 directly, as the z-stream
    version in 8.9 also has 13. So bumping it to 14, will prevent
    upgrade conflicts.
  - Resolves:RHEL-19690, RHEL-17244, RHEL-19312


author: David Tardon <dtardon@redhat.com> - 0.0.3-3
changelog:
  - Resolves: rhbz#1458800 CVE-2017-9432 Stack-buffer overflow in the
    StarWriterStruct::DatabaseName::read


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-23
changelog:
  - Fix various CVEs
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: Ondrej Sloup <osloup@redhat.com> - 4.0.9-30
changelog:
  - Bump specfile to retrigger gating
  - Add tests folder for standard beakerlib
  - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-32
changelog:
  - Fix CVE-2023-6228 CVE-2023-52356 CVE-2023-25433 CVE-2018-15209
  - Resolves: RHEL-30682 RHEL-30520 RHEL-30474 RHEL-5406


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173964
    Resolves: rhbz#2173970


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-15
changelog:
  - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011)
  - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011)
  - util: make reuse of ccw device address format constant (rhbz#2165011)
  - util: refactor ccw address constants into virccw (rhbz#2165011)
  - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011)
  - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011)
  - util: add ccw device address parsing into virccw (rhbz#2165011)
  - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011)
  - nodedev: refactor css format from ccw format method (rhbz#2165011)
  - nodedev: refactor ccw device address parsing from XML (rhbz#2165011)
  - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011)
  - schemas: refactor out nodedev ccw address schema (rhbz#2165011)
  - nodedev: add optional device address of channel device to css device (rhbz#2165011)
  - nodedev: add tests for optional device address to css device (rhbz#2165011)
  - nodedev: prevent internal error on dev_busid parse (rhbz#2165011)
  - rpc: Fix memory leak of fds (rhbz#2165428)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-19
changelog:
  - qemu: domain: Fix logic when tainting domain (rhbz#2174447)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-20
changelog:
  - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage' (rhbz#2170472)
  - qemu: Make 'struct _qemuMonitorMessage' private (rhbz#2170472)
  - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h (rhbz#2170472)
  - qemu: qemuBlockGetNamedNodeData: Remove pointless error path (rhbz#2170472)
  - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter (rhbz#2170472)
  - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes (rhbz#2170472)
  - qemu: relax shared memory check for vhostuser daemons (rhbz#2177701)
  - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)
  - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() (CVE-2023-2700)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-23.2.el8
changelog:
  - util: Fix error return for virProcessKillPainfullyDelay() (RHEL-36064)
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: Fabiano Fidêncio <fidencio@redhat.com> 3.0.0-1
changelog:
  - Update to 3.0.0 release
  - Resolves: rhbz#1754396 - Provide support for getting "firmwares" info from Domain Capabilities
  - Resolves: rhbz#1753670 - Enable bochs-display for UEFI guests (libvirt-glib)


author: David Tardon <dtardon@redhat.com> - 0.1.5-5
changelog:
  - fix char background color in some cases
  - fix handling of bitmaps in Windows Bitmap format that contain a color
    palette


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-11
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-8
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "8" to accommodate the 8.7.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-9
changelog:
  - Bump the release to "9" to accommodate the 9.1.0.z release bumps as
    libwebp-1.0.0-8.el9 < libwebp-1.0.0-8.el8_7


author: Caolán McNamara <caolanm@redhat.com> - 0.2.9-1
changelog:
  - Resolves: rhbz#1602602 new version with covscan warnings fixed
  - all cve fixes merged to that new upstream


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: David King <dking@redhat.com> - 2.9.7-10
changelog:
  - Fix CVE-2021-3516 (#1956976)
  - Fix CVE-2021-3517 (#1957001)
  - Fix CVE-2021-3518 (#1957028)
  - Fix CVE-2021-3537 (#1957284)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-21326 RHEL-21328 RHEL-21329)
  - fix ts2phc to handle large NMEA delay (RHEL-23278)
  - fix loading and reloading of leapfile


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-2
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-21.20180522git70f7e08
changelog:
  - Fix printing CPU info on non-x86 architectures in sensors-detect
  - Resolves: rhbz#1752854
  - Fix printing lm_sensors version in sensors-detect and pwmconfig
  - Resolves: rhbz#1677414


author: Artem Egorenkov <aegorenk@redhat.com> - 3.4.0-23
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Pravin Satpute <psatpute@redhat.com> - 2.91.5-1
changelog:
  - Upstream new release 2.91.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Upstream new release with critical bugfixes.
  - Resolves #1170135 Conjuncts rendering issue for some glyphs


author: Pravin Satpute <psatpute@redhat.com> - 2.91.4-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423901 - FTBFS in rawhide.
  - Migrated upstream from fedorahosted to pagure.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.1-1
changelog:
  - Upstream release 2.95.1
  - Update U+0960 shape as per patch from Shriramana Sharma. #1113968
  - Changed hex id of i-matra (65514...65528,65531 65533) to 65537 onwards


author: Pravin Satpute <psatpute@redhat.com> - 2.95.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423902 - FTBFS in rawhide.
  - Migrated from fedorahosted to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.4-1
changelog:
  - Upstream new release 2.95.4
  - Update metainfo file and fixing minor fixes
  - Removed patch, installing 59-lohit-devanagari.conf.
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.92.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423903 - FTBFS in rawhide
  - Migrated from Fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423904 - FTBFS in rawhide.
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Upstream new release 2.91.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream new release 2.5.4
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo
  - Removed patch already included in upstream


author: Pravin Satpute <psatpute@redhat.com> - 2.92.0-1
changelog:
  - Upstream release 2.92.0
  - Further removal 12 not required glyphs from fonts.
  - Added reference of glyph instead of full glyphs points wherever possible.
  - Resolved 10 issues reported on github: #35,#36,#37,#38,.#39,#40.#41,#42,#43,#44.
  - More test cases in test file
  - Renamed Anchor to MLAnchor


author: Pravin Satpute <psatpute@redhat.com> - 2.92.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423905 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.92.2-1
changelog:
  - Upstream new release 2.92.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Parag Nemade <pnemade AT redhat DOT com> - 2.94.0-7
changelog:
  - Fix the apply_featurefile.py to use fontforge python3 module
  - use %license
  - Drop obsolete Group tag


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Upstream new release 2.94.1 with python3 support.
  - Resolves: #1423906 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.94.2-1
changelog:
  - Upstream new release 2.94.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.94.0-1
changelog:
  - Upstream release 2.94.0
  - Positioning lookup clean-up.
  - Improved grid fitting(GASP) table.
  - Renamed anchors to DVAnchor.
  - Using glyph reference (copy reference) instead of whole glyph points.
  - Auto test integrated with Makefile ($make test).
  - Resolved #32: "सर्व्हिस does not render correctly"
  - Resolved #33: "improper rendering for word : "मञ्यांच्या""


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423907 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Updated with upstream release 2.91.0
  - First release of Lohit Odia after re-writing GSUB rules.
  - Open type rules are available in .fea file for easy reusability.
  - Feature file compiled with AFDKO.
  - Supports orya and ory2 both.
  - Developer friendly glyphs names with AGL syntax format.
  - Corrected glyph class for all glyphs. 
  - Improved shape of ka-viramasignodia-taodia.
  - Added Glyph positioning rules for below based matra.
  - Test file available with release tarball.
  - Auto testing support with harfbuzz hb-shape.
  - Tested with Harfbuzz and Uniscribe (W8 and XP)
  - Corrected feature rules for conjucts ଖ୍ର ଗ୍ର କ୍ଷ୍ଯ


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423908 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Resolves 1152203 :- Upstream release 2.91.0
  - Rewritten all Open type tables with supporting taml and tml2 tags.
  - Renamed all the glyphs by following AGL syntax.
  - Open type tables are available in .fea file and this time it is compiled with AFDKO.
  - Reusing glyphs by "COPY REFERENCE"
  - Added GRID FITTING table and auto-hinting by fontforge.
  - Tested with Harfbuzz NG and Uniscribe (W8).
  - Auto test module available with test files.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream release 2.5.4
  - Added support for Unicode 8.0 characters U0C00, U0C34 and U0C5A
  - Added support for Latin characters
  - Using TTFAUTOHINT now while building ttf file.
  - Resolves #985343, #1229213 and #1258123.


author: Pravin Satpute <psatpute@redhat.com> - 2.5.5-1
changelog:
  - Upstream new release 2.5.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Brian C. Lane <bcl@redhat.com> - 8.6-3
changelog:
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035050
  - Revert "Drop ia32 uefi package installation" (bcl)
    Related: rhbz#2035050


author: Brian C. Lane <bcl@redhat.com> - 8.10-1
changelog:
  - Makefile: Bump the release version to 8.10 (bcl)
    Related: RHEL-24418
  - Restore missing ppc files (bcl)
    Resolves: RHEL-24619


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Nikola Forró <nforro@redhat.com> - 8.3.0.0-1
changelog:
  - Upload new tarball
  - Use unversioned docdir
    resolves: #1824824
  - xattr.7: add attr(1) as a relevant page to SEE ALSO
    resolves: #1828296
  - execve.2: clarify signal sent to the process on late failure
    resolves: #1829031


author: Nikola Forró <nforro@redhat.com> - 8.5.0.0-1
changelog:
  - Upload new tarball
  - statx.2: add STATX_ATTR_DAX
    resolves: #1899552
  - resolv.conf.5: update information about search list and
    attempt to clarify domain/search interaction
    resolves: #1928160


author: Michal Schorm <mschorm@redhat.com> - 3.0.8-2
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Resolves: #1710471


author: Michal Schorm <mschorm@redhat.com> - 3.0.10-1
changelog:
  - Rebase to 3.0.10
  - Use macro for tarball name
  - Use macro to set build flags
  - Use macros for make commands
  - Remove the scriptlets non relevant for RHEL-8
  - Add info for the testsuite execution
  - Remove glob from library version
  - Remove info about the upstream issues


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1.2
  - Introducing ED25519 plugin
  - Plugindir issues (from 3.0.9 release) fixed by upstream
    Resolves: #1691176


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.9-1
changelog:
  - Rebase to 3.1.9
  - Overlinking issues fixed by upstream in 3.1.3 release
  - Add explicit confict between mariadb-connector-c-devel and mysql-devel packages


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.11-1
changelog:
  - Rebase to 3.1.11
  - Add updates for paths in libraries_include_path.patch
  - Patch add_docs_license_dir_option upstreamed


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Retain compatibility with jna4
  - Adjust pom.xml, so that the rpm Requires jna and jna-platform
    Resolves: #2043212


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-2
changelog:
  - autogenerate the Requires only for jna, not jna-platform
  - change required version of jna-platform to 'any' in pom.xml
    Resolves: #2089627


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-38
changelog:
  - Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository
    also fix missing gating test execution


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.2-9
changelog:
  - Turn hard dependency on java-devel into a weak dependencny
  - Add missing Requires on which
  - Resolves: rhbz#2129825, rhbz#2008121


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-1
changelog:
  - updated to 4.8.19
  - drop use slang and use ncurses. There are only few packages which are using
    slang. As ncurses support is fully working now it makes more sense to
    use it instead slang (Solaris 11.3 mc uses now ncurses)
  - instead passing -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE to CFLAGS use
    --enable-largefile autoconf param
  - removed Group, BuildRoot and %clear (new packaging policy)
  - added pkgconfig to BuildRequires
  - replaced groff by groff-base in BuildRequires (only nfroff is used)
  - use %autosetup in %prep
  - added using %{make_build} and %{make_build} macros
  - "rm -rf $RPM_BUILD_ROOT" on beginning %install is no longer needed
  - mcfs is no longer supported (removed --enable-vfs-mcfs autoconf option)
  - added explicit enabled other VFSesess to force necessary checks


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-2
changelog:
  - go back to slang as it is serious issue with shift-f6 when ncurses is used
    displaying "Delete" instead "Move As" dialog (#1436394)
  - added slang %bcond to simplify experiments with switching to ncurses
  - reformat %description to 80 cols
  - really remove Group
  - %defattr() is no longer needed
  - simplifications in %files
  - use %{buildroot} macro
  - build --with-x (it does not add X11 libraries dependencies)
  - cons.saver no longer need to be 711 (changed to 755)


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Sebastian Kisela <skisela@redhat.com> - 4.6.2-1
changelog:
  - New release 4.6.2.
  - Convert deprecated specfile python macros to use python2 macros.
  - Explicitly depend on gcc, as it was removed from buildroot default packages.


author: Koichiro Iwao <meta@almalinux.org> - 23.1.4-2.alma.1
changelog:
  - Enable v3d for Raspberry Pi graphic in AlmaLinux
    Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32


author: José Expósito <jexposit@redhat.com> - 23.1.4-3
changelog:
  - Fix off-by-one error for newblock allocation in dlist_alloc
    Resolves: https://issues.redhat.com/browse/RHEL-40566


author: Francisco Trivino <ftrivino@redhat.com> 1.6.1-9
changelog:
  - Add missing repos to the osci tests
  - Fix gss localname test to work with older gssapi version
  - Resolves: #2083122
  - Add ability to expose the used mechanism
  - Resolves: #2046231


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1702695 - fresh install of mod_auth_mellon shows rpm
                             verification warnings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in
        oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference
        when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-6
changelog:
  - Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache
  - Resolves: RHEL-25421 mod_auth_openidc: DoS when using
      `OIDCSessionType client-cookie` and manipulating cookies
      (CVE-2024-24814)


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.1.0-1
changelog:
  - Logging improvements; success logging moved from notice to info level.
  - Fix redirect for AuthPAMExpiredRedirect with Basic Auth.
  - Fix AuthPAMExpiredRedirect %s escaping on Apache 2.2.


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-5
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-8.3
changelog:
  - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-9.3
changelog:
  - Resolves: RHEL-13367 - httpd:2.4/mod_http2: reset requests exhaust memory
    (incomplete fix of CVE-2023-44487)(CVE-2023-45802)


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.11-1
changelog:
  - modulemd_tools: compatibility for upgrade_ext on EPEL8 (frostyx@email.cz)
  - modulemd_tools: compatibility for read_packager_string on EPEL8
    (frostyx@email.cz)
  - dir2module: generate also profiles and modulemd-defaults file
    (frostyx@email.cz)
  - modulemd_tools: use upgrade_ext instead of upgrade (frostyx@email.cz)
  - modulemd_tools: use read_packager_string instead of read_string
    (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - bld2repo: do not create empty repos when --result-dir is used
    (kdudka@redhat.com)
  - bld2repo: print status in a more intuitive format (kdudka@redhat.com)
  - tito: stop releasing for Fedora 32 (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-6
changelog:
  - Do not install bld2repo as RHEL8 doesn't have python3-koji
    (jkadlcik@redhat.com)
  - Drop the Patch1 and make the change directly in this repository
    (jkadlcik@redhat.com)
  - Use UpstreamBuilder instead of DistributionBuilder (jkadlcik@redhat.com)
  - Skip some tests because they require binary files (jkadlcik@redhat.com)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-8
changelog:
  - modulemd_tools: fix tests for new libmodulemd version 2.15.0
    (frostyx@email.cz)
  - createrepo: replace deprecated LooseVersion (mkulik@redhat.com)


author: José Expósito <jexposit@redhat.com> - 2.3.4-20
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Jan Grulich <jgrulich@redhat.com> - 3.32.2-72
changelog:
  - Do not use DMA buffers for screencast when the client doesn't support it
  - Use DMA buffers only for i195 drivers
    Resolves: RHEL-4405


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: Caolán McNamara <caolanm@redhat.com> - 0.20150304-1
changelog:
  - Resolves: rhbz#1197184 berlios has disappeared, but rla-es seems
    active, and using e.g. "a priori" as an example LibreOffice suggests
    a non-corrupted set of suggestions


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1.1
changelog:
  - Resolves: RHEL-12730 - nginx:1.20/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1.1
changelog:
  - Resolves: RHEL-12726 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-2
changelog:
  - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)


author: Martin Osvald <mosvald@redhat.com> - 2:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2166178 - Nmap much slower after libpcap fix
  - Resolves: #2169766 - Rebase nmap for TLS v1.3 support


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1934566, RHBZ#1934598
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-2
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Fix typo, BR systemtap-sdt-level always, remove y18n patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1945512, RHBZ#1945286
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - Resolves CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988596, RHBZ#1993814, RHBZ#1993808, RHBZ#1993094
  - Resolves: RHBZ#1986742, RHBZ#1993946, RHBZ#1993939, RHBZ#1989426


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.12-1
changelog:
  - Resolves: RHBZ#2084651
  - Resolves: #2086773, #2086777, #2086781, #2086786, #2086790
  - Resolves: #2086795, #2086799, #2086804, #2086809, #2086813
  - Rebase to last v12.x release
  - Remove patch for CVE-2021-23343


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1945513, RHBZ#1945287
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2026325
  - Resolves: RHBZ#2014130, RHBZ#2014124, RHBZ#2013826, RHBZ#2024921
  - Rebase to new version to fix CVEs


author: Jan Staněk <jstanek@redhat.com> - 1:14.18.2-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest release
  - Resolves: #2106281, #2108056, #2108061, #2108066, #2108071, #2108139
  - Remove libs patch
  - Build without corepack


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.1-2
changelog:
  - Apply upstream fix for CVE-2022-24999
    Resolves: CVE-2022-24999
  - Record CVEs fixed by current or previous upstream releases
    Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153712
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.18.1-2
changelog:
  - Record CVE references already addressed in this or previous upstream versions
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
    Resolves: rhbz#2153713
    Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
    Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188289
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222288


author: Dominik Rehák <drehak@redhat.com> - 1:16.20.2-1
changelog:
  - Rebase to 16.20.2
    Resolves: rhbz#2231866
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178086
  - Resolves: CVE-2022-25881, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.14.2-3
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2022-4904
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188290 rhbz#2166926
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222287


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228939
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.18.2-1
changelog:
  - Rebase to 18.18.2 (Security release)
  - Switch icu from zip to tgz
  - Fixes #2228925, CVE-2023-45143, CVE-2023-44487, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fix FIPS handling of the cmd-line options (RHBZ#2226726)
  - Resolves: RHEL-26691 RHEL-26016 RHEL-26648


author: Filip Janus <fjanus@redhat.com> - 1:18.20.2-1
changelog:
  - Removes .ps1 files
  - Rebase to 18.20.2
  - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186718
  - Resolves RHELPLAN-155624


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186718
  - Resolves RHELPLAN-155624


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Resolves: RHEL-26017 RHEL-26266 RHEL-26685 RHEL-26686 RHEL-26004 RHEL-26596 RHEL-26688


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes: CVE-2024-25629 (c-ares)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Addresses CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Addresses CVE-2024-25629 (c-ares)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#1991322, RHBZ#1948030
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2108140


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
changelog:
  - Switched from autosetup
  - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
  - Resolves: RHBZ#2108141


author: Tom Hughes <tom@compton.nu> - 16-1
changelog:
  - Rewrite nodejs.req to better match npm versioning rules
  - Add tests for nodejs.req and nodejs.prov


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Masahiro Matsuya <mmatsuya@redhat.com> - 26-1
changelog:
  - nodejs.prov: find namespaced bundled dependencies
  - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-10
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.14-12
changelog:
  - Get rid of all conditions that are always true for both EPEL-7 and Fedora
    as it's quite unlikely we'd use this specfile on EPEL-6
  - Remove the sysvinit script and all the scriptlets around it
  - Unconditionally use systemd scriptlet macros and systemd_requires
  - Unconditionally build the PAM module as the PADL module is long dead
  - Remove the auto-migration of settings from nss_ldap as it's been
    long gone from Fedora
  - Don't check /etc/sysconfig/authconfig as authconfig is on its way
    out from Fedora
  - Use only spaces, not tabs, to stop my editor from looking like a
    Christmas tree
  - Remove the obsolete Group stanza
  - Make nscd Recommended, not Required


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-1
changelog:
  - Upgrade to the latest upstream
    - Disable the python utilities
    - Don't bother with failing pylint test as we don't ship the python
      utilities
  - Drop unused validname and exitcode patches, port strtoid overflow
    patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-2
changelog:
  - Apply a patch by Lukas Slebodnik to allow root to write to the
    /var/run/nslcd directory
  - Resolves: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                             with SELinux enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-3
changelog:
  - Also change the pemissions on tmpfiles
  - Related: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                            with SELinux enabled


author: Tomas Halman <thalman@redhat.com> - 0.9.9-4
changelog:
  - moving temp files from /var/run to /run
  - Resolves: rhbz#1969826 - tmpfiles snippet needs updated path for
                             nss-pam-ldapd


author: Andreas Schneider <asn@redhat.com> - 1.1.12-1
changelog:
  - resolves: rhbz#2139665 - Rebase to version 1.1.12
  - resolves: rhbz#2124635 - Reduce dependencies of the package


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.7-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-2
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.8.2-3
changelog:
  - Fix CVE-2019-13224
    Resolves: RHEL-6970
  - Fix CVE-2019-16163
    Resolves: RHEL-9506
  - Fix CVE-2019-19012
    Resolves: RHEL-9511
  - Fix CVE-2019-19203
    Resolves: RHEL-9510
  - Fix CVE-2019-19204
    Resolves: RHEL-9509


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Paul Wouters <pwouters@redhat.com> - 1.4.14-1
changelog:
  - Update to 1.4.14 as first steop to migrating to 2.x
  - Resolves: rhbz#1413254 Move tmpfiles.d config to %{_tmpfilesdir}, install LICENSE as %license


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Jan Černý <jcerny@redhat.com> - 1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041781)
  - Select and exclude groups of rules on the command line
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
  - Remove oscap-remediate service (rhbz#2111360)


author: Jan Černý <jcerny@redhat.com> - 1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159290)
  - Fix error when processing OVAL filters (rhbz#2126882)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217441)
  - Add offline support for sysctl probe (rhbz#2185791)
  - Fix systemd* probes unit enumeration (rhbz#2219533)


author: Jan Černý <jcerny@redhat.com> - 1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-31221)
  - Add ability to define a limit of collected items (RHEL-11925)
  - Add option --references that can select rules based on their reference (RHEL-1479)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-20
changelog:
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-1684
  - Add comment to OpenSSH server config about FIPS-incompatible key
    Resolves: RHEL-5221
  - Avoid killing all processes on system in case of race condition
    Resolves: RHEL-11548
  - Avoid sshd_config 256K limit
    Resolves: RHEL-5279
  - Using DigestSign/DigestVerify functions for better FIPS compatibility
    Resolves: RHEL-5217
  - Fix GSS KEX causing ssh failures when connecting to WinSSHD
    Resolves: RHEL-5321


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-22
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19308
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19788


author: Michael Mraka <michael.mraka@redhat.com> 5.11.99-1
changelog:
  - removed %%defattr from specfile
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-4
changelog:
  - remove osad files when packaging only for python3 (tkasparek@redhat.com)
  - osa-dispatcher is dependent on spacewalk-backend which is in python2
    (tkasparek@redhat.com)
  - run osa-dispatcher on python3 when possible (tkasparek@redhat.com)
  - don't build python2 subpackages on F28 + update python requires
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-6
changelog:
  - prefer to build for python3... (nils@redhat.com)
  - use %python2_* instead of unversioned macros (nils@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-7
changelog:
  - Resolves: #1607909 - remove TLSv1 hardcode and let client/server negotiate
    (tkasparek@redhat.com)


author: Eduard Abdullin <eabdullin@almalinux.org> - 100-1.alma
changelog:
  - Install AlmaLinux repositories
  - Add AlmaLinux support patch (Thanks @pastalian)
  - Remove libreport-rhel-bugzilla from package set


author: Matej Tyc <matyc@redhat.com> - 1.2.1-6
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1834716
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2007981


author: Matej Tyc <matyc@redhat.com> - 1.2.1-7
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2063179


author: Matej Tyc <matyc@redhat.com> - 1.2.1-9
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129008
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2000998


author: Fabiano Fidêncio <fidencio@redhat.com> - 20200813-1
changelog:
  - Update to v20200813 release
  - Related: rhbz#1837756 - osinfo-db is out of date
  - Resolves: rhbz#1868030 - 'osinfo-query os' is missing latest version of Ubuntu and Oracle Linux


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-2
changelog:
  - Resolves: rhbz#1681879 - osinfo-db-tools changes blocked until gating
                             tests are added


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1712426 - New defects found in
                             osinfo-db-tools-1.5.0-2.el8


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-4
changelog:
  - Related: rhbz#1712426 - New defects found in
                            osinfo-db-tools-1.5.0-2.el8


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2027788


author: Luca BRUNO <lucab@redhat.com> - 2022.2-5
changelog:
  - Backport enablement patches for Secure Execution on s390x
    https://github.com/ostreedev/ostree/pull/2694
    Resolves: rhbz#2120522
  - Backport security fix to verify signatures are minimum length (advisory GHSA-gqf4-p3gv-g8vw)
    https://github.com/ostreedev/ostree/pull/2696
    Resolves: rhbz#2119444


author: Colin Walters <walters@verbum.org> - 2022.2-6
changelog:
  - Backport https://github.com/ostreedev/ostree/commit/0085494e350c72599fc5c0e00422885d80b3c660
  - Resolves: rhbz#2134629


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.2-8
changelog:
  - Backport for https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
  - Resolves: rhbz#2229895


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Pacemaker Remote nodes can validate against later schema versions
  - Resolves: RHEL-7597
  - Related: RHEL-17224


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7597
  - Related: RHEL-14045


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-14045
  - Resolves: RHEL-17224
  - Resolves: RHEL-23065


author: Kalev Lember <klember@redhat.com> - 2.38.1-1
changelog:
  - Update to 2.38.1
  - Use make_install macro
  - Set minimum versions for required libraries
  - Tighten -devel deps with the _isa macro


author: Andreas Gerstmayr <agerstmayr@redhat.com> - 0.5.4-4
changelog:
  - Obsolete (remove) vulnerable versions of log4j12 (NVR < 1.2.17-23)
    when upgrading to parfait 0.5.4-4 (CVE-2021-4104)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign warning message from pmie systemd unit file.


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-9
changelog:
  - Additional selinux policy rules for pmdabcc (BZ 2050094)
  - Describe working sudoers requiretty configuration (BZ 2093751)
  - Separate pmlogger_farm configuration mechanism (BZ 2101574)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-15
changelog:
  - Backport independent selinux policy rework (BZ 2111742)
  - Fix invalid memory access in pmfind utility (BZ 2135314)
  - Allow pcp-dstat(1) missed ticks suppression (BZ 2083897)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-17
changelog:
  - Harden pmdaopenmetrics metric name validator (BZ 2139325)
  - Fix issues in pmdanfsclient srcport handling (BZ 2150889)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-18
changelog:
  - Improve pmproxy handling large HTTP requests (BZ 2159207)
  - Fix hacluster metrics with current Pacemaker (BZ 2219731)
  - Ensure pmcd.conf not needlessly over written (BZ 2211263)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-19
changelog:
  - Fix OpenMetrics PMDA mishandling systemd metrics (RHEL-7507)
  - Additional pmlogger_farm service SELinux policy (RHEL-7501)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-21
changelog:
  - Fix python API day-of-year out of range bug (RHEL-29708)
  - Added spec deps on ps and diffutils for diff (RHEL-17081)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-22
changelog:
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
  - Guard against symlink attacks in pmpost program (RHEL-57799)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
  - Update pmdahacluster for newer crm_mon versions (RHEL-57788)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.3-396
changelog:
  - Fix handling attribute specification on our variables (RT#131597)
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed filehandle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)
  - Link XS modules to pthread library to fix linking with -z defs
  - Correct shell bangs in tests
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.4-397
changelog:
  - 5.24.4 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.4-401
changelog:
  - Resolves: #1656293
    - Fix CVE-2018-18311 Integer overflow leading to buffer overflow
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-413
changelog:
  - Adjust tests to gdbm-1.15 (RT#133295)
  - Fix an integer wrap when allocating memory for an environment variable
    (RT#133204)
  - Fix printing a warning about a wide character when matching a regular
    expression while ISO-8859-1 locale is in effect
  - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-416
changelog:
  - 5.26.3 bump (bug #1655526)
  - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920)
  - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922)
  - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924)
  - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-417
changelog:
  - Fix Time-Local tests to pass after year 2019 (bug #1807120)
  - Run-require perl(Encode) by perl-libs (bug #1903503)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.3-419
changelog:
  - Fix CVE-2020-10543 (bug #1839273)
  - Fix CVE-2020-10878 (bug #1839276)
  - Fix a file mode of a perl-example.stp example (bug #1913693)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-451
changelog:
  - Fix CVE-2020-10543 (an integer overflow from nested regex quantifiers)
    (bug #1837975)
  - Fix CVE-2020-10878 (a corruption of a state of a compiled regular expression
    due to an integer overflow) (bug #1837988)
  - Fix CVE-2020-12723 (a corruption of a state of a compiled regular expression
    due to recursive calls) (bug #1838000)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-464
changelog:
  - Fix an undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.1-466
changelog:
  - 5.32.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.32.1/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-467
changelog:
  - Fix a crash in optimizing split() (GH#18232)
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-468
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-469
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Petr Pisar <ppisar@redhat.com> - 2.14-1
changelog:
  - 2.14 bump
  - Fix installation from a working directory (CPAN RT#115734)
  - Fix "cpan -O" invocation (CPAN RT#115786)
  - Do not use Net::FTP if ftp_proxy variable points to an HTTP server
    (CPAN RT#110833)
  - Recognize URL schemata disregarding the case
  - Fix CVE-2016-1238 (loading optional modules from current working directory)
  - Recognize exact version dependency operator (CPAN RT#47934)
  - Cope with non-digit version strings


author: Petr Pisar <ppisar@redhat.com> - 2.14-3
changelog:
  - Apply remains of CVE-2016-1238 fix from perl (CPAN RT#116507)
  - Do not search cpan -j file in @INC (CPAN RT#116507)


author: Petr Pisar <ppisar@redhat.com> - 2.14-4
changelog:
  - Use Perl porter's fix for searching cpan -j file (CPAN RT#116507)
  - Fix logging fatal errors (https://github.com/andk/cpanpm/pull/104)


author: Petr Pisar <ppisar@redhat.com> - 0.12-13
changelog:
  - Remove perl-CPAN-DistnameInfo RPM package from perl-App-cpanminus module with
    perl:5.30 (bug #1713592)


author: Paul Howarth <paul@city-fan.org> - 2.150005-1
changelog:
  - Update to 2.150005
    - Metadata merging now does deep hash merging as long as keys don't conflict
    - Serialized CPAN::Meta objects now include a x_serialization_backend entry
    - Declared extra developer prereq
    - Added test for 'x_deprecated' field in "provides"
    - Noted explicitly that historical META spec files are licensed under the
      same terms as Perl
    - Changed some test data from UTF-8 to ASCII


author: Paul Howarth <paul@city-fan.org> - 2.150010-1
changelog:
  - Update to 2.150010
    Added:
    - Merged Parse::CPAN::Meta 1.4420 into this distribution
    Fixed:
    - CPAN::Meta::Prereqs now fully accepts phases and types starting with 'x_';
      new 'phases' and 'types_in' interfaces have been added
    - No longer relies on JSON backend for data structure cloning; this is much
      faster than using JSON::PP
    - The cloning routine would raise an error on expected types when it
      previously would stringify; the old behavior is restored
    - Fixed used of Encode in Parse::CPAN::Meta::load_json_string (cherry picked
      from Parse::CPAN::Meta 1.4422)
    - Added "use warnings" to Parse::CPAN::Meta
    - The YAML and JSON backend variables are ignored when building/testing the
      perl core itself, where non-core backends are not yet installed
    Tests:
    - The 'extra_mappings' feature for meta merging is now tested and documented
    - During tests, delete new environment variables added by Parse::CPAN::Meta
      1.4418
    Spec:
    - Clarifies acceptable values for booleans
    - Cleaned up text and links of historical specs
  - Obsolete old perl-Parse-CPAN-Meta package
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.013-1
changelog:
  - Update to 0.013
    - Make tests more resilient against dev versions of dependencies
  - BR: perl-generators
  - Drop legacy Group: tag
  - Take advantage of features in recent EU::MM to simplify flow


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014
    - Undef versions are now passed through to CPAN::Meta::Requirements for the
      check, rather than failing with "Missing version" errors


author: Paul Howarth <paul@city-fan.org> - 2.140-7
changelog:
  - Introduce build-condition for optional tests
  - Simplify find command using -delete
  - Switch to hunspell for spell check


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix compilation warning from inflate.c (CPAN RT#107642)
    - Fix wrong FLAG_APPEND logic, analog to Bzip2 (CPAN RT#119007)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.071-1
changelog:
  - Update to 2.071
    - One (last?) compilation warning in bundled inflate.c (CPAN RT#119580,
      https://github.com/madler/zlib/issues/111)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Major optimization to mkopt
  - Use %license
  - Simplify find expression using -delete


author: Paul Howarth <paul@city-fan.org> - 0.200005-1
changelog:
  - Update to 0.200005
    - Open DATA handles both :raw and :bytes to avoid content munging on Win32
    - This is not yet a perfect solution for Win32


author: Paul Howarth <paul@city-fan.org> - 0.200006-1
changelog:
  - Update to 0.200006
    - Skip tests on Win32 pre-5.14 related to line endings; perl munges the data
      before we're able to get at it


author: Paul Howarth <paul@city-fan.org> - 0.200007-1
changelog:
  - Update to 0.200007
    - Rename the test library "Parent.pm" to "Mother.pm" to avoid conflict with
      core "parent.pm" on case-insensitive systems
  - Drop legacy Group: tag
  - Simplify find command using -delete
  - Classify buildreqs by usage


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


