# changelog

author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.0.12-2
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Nick Clifton <nickc@redhat.com> 2.27-19.base
changelog:
  - Suppress the generation of R_X86_64_GOTPCRELX, R_X86_64_REX_GETPCRELX and R_386_GOT32X relocations.
    (#1506004)


author: Nick Clifton <nickc@redhat.com> 2.27-20.base
changelog:
  - Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs.
    (#1508954)


author: Nick Clifton <nickc@redhat.com> 2.27-21.base
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1513014)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Nathaniel McCallum <npmccallum@redhat.com> - 5-1
changelog:
  - New upstream release
  - Run clevis decryption from udisks2 under an unprivileged user
  - Reenable udisks2 subpackage


author: Nathaniel McCallum <npmccallum@redhat.com> - 6-1
changelog:
  - New upstream release
  - Specify unprivileged user/group during configuration
  - Move clevis user/group creation to base clevis package


author: Nathaniel McCallum <npmccallum@redhat.com> - 7-1
changelog:
  - Update to v7
  - Resolves: rhbz#1467907
  - Resolves: rhbz#1467908
  - Resolves: rhbz#1475406
  - Resolves: rhbz#1500975
  - Resolves: rhbz#1478888


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.70.0-2
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - also add virtual provides for python-clufter as python2-clufter
  - bump upstream package (version rolling the above changes out)
  - build for ppc64le
    [rhbz#1402565]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.75.0-1
changelog:
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.76.0-1
changelog:
  - factor "borrow validation schemas from pacemaker" out to a separate script
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.0-2
changelog:
  - fix nodelist.node.name configuration option (originaly devised by pacemaker)
    not supported in corosync.conf with the built-in validation schema
    [rhbz#1517834]


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-10
changelog:
  - Remove psm2 package variant. Instead use MCA exclusion using config file.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.3-1
changelog:
  - Update to upstream release 1.10.3.
  - Stop excluding psm2 MTL by default. The psm/psm2 conflict has been resolved.
  - Resolves: #1273175
  - Resolves: #1285292


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-30
changelog:
  - 1386751 - cups-lpd program did not catch all legacy usage of ISO-8859-1
  - 1441860 - CUPS may fail to start if NIS groups are used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.38-1
changelog:
  - ifdown-eth: we need to flush global scope as well
  - killproc/status: add missing '-b <binary>' option
  - specfile: mark 'rwtab' and 'statetab' as config files
  - spec: we need newer lvm
  - rwtab: add /var/lib/systemd/timers
  - ifup-eth: remove quote marks
  - 9.70-sync: Move everything to github
  - 9.70-sync: rwtab updated
  - 9.70-sync: service file updated
  - 9.70-sync: syconfig.txt updated
  - 9.70-sync: systemd/rhel-import-state updated
  - 9.70-sync: sysconfig/network-scripts/* updated - part 2
  - 9.70-sync: sysconfig/network-scripts/* updated - part 1
  - 9.70-sync: rc.d/init.d/network updated
  - 9.70-sync: rc.d/init.d/netconsole updated
  - 9.70-sync: rc.d/init.d/functions updated
  - 9.70-sync: ipv6-6to4.howto example updated
  - 9.70-sync: examples/networking/ifcfg-bridge updated
  - network: load NetworkManager connection via dbus
  - network: check for running NetworkManager via dbus


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.39-1
changelog:
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - rhel-autorelabel: synchronize cached writes before reboot


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.40-1
changelog:
  - require 'redhat-release' instead of /etc/system-release & conflict with older versions
  - ifup-post: always update 'nameserver' & 'search' entries in /etc/resolv.conf
  - systemd/system: symlinks for initscripts' services removed
  - *.old extension added to list of ignored files
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: convert2sec() function added
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - usleep(1) calls replaced with sleep(1) calls
  - network-scripts: DBus calls forwarded to /dev/null
  - network-scripts: firewall-cmd replaced with DBus calls
  - ARPUDATE option introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.41-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network-functions: use POSIX forwarding instead of bash-ism


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-110
changelog:
  - Add 0215-RHBZ-1444194-fix-check-partitions.patch
    * make sure kpartx partions match the correct device
  - Add 0216-RHBZ-1448562-fix-reserve.patch
    * don't join threads that haven't been created
  - Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * blacklist db2.* devices
  - Add 0218-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1444194, #1448562, #1437329, #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111
changelog:
  - Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * Incorrect change, and the bug is already fixed.
  - Move 0218-RHBZ-1448576-3PAR-config.patch to
    0217-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Lukas Czerner <lczerner@redhat.com> - 1.42.9-4
changelog:
  - Fix posisble use after free in some error paths (#997982)
  - Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
  - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
  - Allow to resize ext4 file system past 16TB (#982871)
  - Disable altivec instructions for libext2fs on ppc (#1074604)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-5
changelog:
  - Various manpage updates for chattr and mount (#1053885)
  - Fix resize2fs -P hang on corrupted filesystems (#1104612)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Jack Magne <jmagne@redhat.com> - 1.1.0-33
changelog:
  - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Jack Magne <jmagne@redhat.com> - 1.1.0-40
changelog:
  - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure.


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Milan Crha <mcrha@redhat.com> - 3.22.7-4
changelog:
  - Add patch for RH bug #1441608 (Use-after-free when setting summary for component with alarms)
  - Add patch for RH bug #1439590 ([IMAPx] Unsubscribed folders shown after refresh)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-4
changelog:
  - fence-virt: Enable the TCP listener plugin
    Resolves: rhbz#1334170
  - Allow fence_virtd to run as non-root
    Fix use of undefined define
    Resolves: rhbz#1334170


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-13
changelog:
  - fence_virtd: Make the libvirt backend survive libvirtd restarts
    Resolves: rhbz#1384181
  - fence_xvm/fence_virt: Add support for the validate-all status
    Resolves: rhbz#1447700


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-25
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - improve filesystem content file to include symlinks and rootdir


author: Adam Williamson <awilliam@redhat.com> - 3.0-3
changelog:
  - Re-enable ceph deps on ppc64 (it's building again)
  - Disable RDMA support on 32-bit ARM (#1484155)


author: Eric Garver <egarver@redhat.com> - 0.4.4.4-7
changelog:
  - firewall.functions: New function get_nf_nat_helpers (RHBZ#1452681)
  - firewall.core.fw: Get NAT helpers and store them internally. (RHBZ#1452681)
  - firewall.core.fw_zone: Load NAT helpers with conntrack helpers (RHBZ#1452681)
  - firewalld.dbus: Add missing properties nf_conntrach_helper_setting and
    nf_conntrack_helpers (RHBZ#1452681)
  - D-Bus interfaces: Fix GetAll for interfaces without properties (RHBZ#1452017)
  - firewall.server.firewalld: New property for NAT helpers supported by the
    kernel (RHBZ#1452681)


author: Phil Sutter - 0.4.4.4-11
changelog:
  - core: Log unsupported ICMP types as informational only (RHBZ#1479951)
  - doc: firewall-cmd: Document --query-* options return codes (RHBZ#1372716)
  - doc: firewall-cmd: Document quirk in --reload option (RHBZ#1452137)
  - firewall-cmd: Use colors only if output is a TTY (RHBZ#1368544)
  - firewall-offline-cmd: Don't require root for help output (RHBZ#1445214)


author: David King <dking@redhat.com> - 0.8.4-2
changelog:
  - Sync bzip2 dependency with Fedora package
  - Make the libs subpackage depend on the base package for libostree
  - Fix multilib issues with XML-based documentation


author: Colin Walters <walters@verbum.org> - 0.8.7-3
changelog:
  - Fix libostree bundling:
    Ensure we do not Provide or Require libostree.
    Move the shared library into flatpak-libs so flatpak always
    depends on it.
    Keep the shared library filename as libostree, but put it
    under a private directory.  Renaming the file on disk did not
    really do much since the dynamic linker and RPM work from the
    soname.
    Resolves: #1476905


author: Ray Strode <rstrode@redhat.com> - 0.8.8-2
changelog:
  - Fix crasher in xdg-desktop-portal
    Resolves: #1503579
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Josef Ridky <jridky@redhat.com> - 1.5.7-1
changelog:
  - Rebase to the latest upstream release 1.5.7 (#1435848)
  - Fix manpage command examples (#1353981) in separate commit


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Andrew Price <anprice@redhat.com> - 3.1.9-1
changelog:
  - Rebase to new upstream release 3.1.9
    Resolves: rhbz#1271674
    Resolves: rhbz#1162819
    Resolves: rhbz#1196321
    Resolves: rhbz#1202814
    Resolves: rhbz#1251036
    Resolves: rhbz#1257625
    Resolves: rhbz#1268045
    Resolves: rhbz#1283866
    Resolves: rhbz#1332728


author: Andrew Price <anprice@redhat.com> - 3.1.9-2
changelog:
  - fsck.gfs2: "undo" functions can stop too early on duplicates
    Resolves: rhbz#1348703
  - fsck.gfs2: link count checking wrong inode's formal inode number
    Resolves: rhbz#1350597
  - fsck.gfs2: check formal inode number when links go from 1 to 2
    Resolves: rhbz#1350600


author: Andrew Price <anprice@redhat.com> - 3.1.10-1
changelog:
  - Rebase to new upstream version 3.1.10
    Resolves: rhbz#1348601
    Resolves: rhbz#1356685
    Resolves: rhbz#1382087
    Resolves: rhbz#1405163
    Resolves: rhbz#1430399
  - Make dependency on libuuid explicit


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Kalev Lember <kalevlember@gmail.com> - 2:3.8.2-1
changelog:
  - Revert back to gtk2-based 3.8.2 -- following upstream, the gtk3
    version is now in 'glade' package (#731227)


author: Colin Walters <walters@verbum.org> - 2.54.1-3
changelog:
  - Backport patch to fix invocations of /bin/gdbus-codegen
  - Related: #1481386
    See also bug 1507661


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-3
changelog:
  - Don't remove Telepathy accounts or expire Kerberos credentials when stopping
    goa-daemon
  Resolves: #1267534


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-5
changelog:
  - Ensure that temporary accounts are really removed from the keyring and
    avoid a WARNING
  Resolves: #1261940


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - gp-Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch [bz#1339710]
  - Resolves: bz#1339710
    (initalization of 'recursive' tls variable in libunwind stack capturer occasionally triggers deadlock in ceph)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - Rebase to 2.6.1 [bz#1431240]
  - Removed libunwind usage [bz#1467203]
  - Resolves: bz#1431240 
    (gperftools fails to build on s390x, lacks s390x support)
  - Resolves: bz#1467203
    (Please, remove libunwind from the gperftools-libs (and 389-ds-base) requirements)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Bastien Nocera <bnocera@redhat.com> 0.2.14-6
changelog:
  - Enable a number of missing plugins
  Related: #1184200
  - Disable blip.tv plugin as service has now closed
  - Add patch to downgrade the gom requirements
  - Port back local-metadata plugin to libmediaart-1.0


author: Bastien Nocera <bnocera@redhat.com> - 0.3.4-3
changelog:
  - Fix size reporting in Apple Trailers source
  - Add compatibility layer to allow building with lua 5.1
  Resolves: #1477129


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-4
changelog:
  - Rebase to 1.11.8.
  - Deal with rpaths using the method from Packaging Guidelines.
  - BuildRequire rdma-core-devel on s390(x).
  - Fix scriptlets related to hwloc-dump-hwdata.service.
  - Configure with /run as runstatedir.
  - Spec file cleanup.
  - Related: rhbz1482585


author: Matej Muzila <mmuzila@redhat.com> - 0-0.25.20141008git
changelog:
  - Daemons updated to the last git snapshot
  - Use kernel-headers instead of kernel-devel to build
  - Added Hyper-V fcopy daemon as hypervfcopyd subpackage


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.26.20150402git
changelog:
  - 2015-04-02 git snapshot
  - VSS: skip all readonly-mounted filesystems (#1160584)
  - VSS: support partitions mounted several times (#1169724)


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.30.20161211git
changelog:
  - Use '-gt' instead of '>' to do the right comparison (#1414822)
  - hyperv-tools subpackage added (#1378710)
  - Update to upstream v4.9 (#1406397)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Mike FABIAN <mfabian@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3 upstream version
  - Don’t output page_size in “/usr/libexec/ibus-engine-typing-booster --xml” (Resolves: rhbz#975449 - ibus-daemon prints warnings because “/usr/libexec/ibus-engine-typing-booster --xml” prints the invalid element “page_size”)
  - Use ~/.local/share/ibus-typing-booster/ to store user data and log files (Resolves: rhbz#949035 - don't use a hidden directory under .local/share)


author: Mike FABIAN <mfabian@redhat.com> - 1.1.0-1
changelog:
  - Update to 1.1.0 upstream version
  - Add a commit=True parameter to check_phrase_and_update_frequency()
  - Fix that the page_size is shown as 0 in the setup tool if it has not been set before
  - Do not use AUTOINCREMENT
  - Make it possible to exit the setup tool by typing Control-C in the terminal
  - Add feature to read a text file for training the user database
  - Update German translations and .pot file
  - Fix error when the hunspell dictionary for an engine is missing


author: Mike FABIAN <mfabian@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 upstream version
  - Make TAB when used to enable/disable the lookup table work as a toogle
  - Create a VIEW for “LIKE input_phrase%” in select_words() and use that
    in the following SELECT statements (Makes candidate calculation more
    than 10 times faster)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.1-1
changelog:
  - Update to 1.2.1 upstream version
  - Pop up a message box when a file has been read to train the database, indicating success or failure (Resolves: rhbz#979933)
  - Update German translation
  - Ignore most punctuation characters and mathematical symbols when tokenizing (Resolves: rhbz#979939)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.2-1
changelog:
  - Update to 1.2.2 upstream version
  - Commit immediately when certain punctuation characters are typed and transliteration is not used (Resolves: rhbz#981179)
  - Add an option to try completion only when a minimum number of characters has been typed


author: Mike FABIAN <mfabian@redhat.com> - 1.2.3-1
changelog:
  - Update to 1.2.3 upstream version
  - Fix exception handling when trying to install a rpm package (Resolves: rhbz#986178)


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.i386::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.7-1
changelog:
  - updated to itw 1.7 and sync from fedora
  - added forgotten slaves of itweb-settings policyeditor
  - Own %{_datadir}/%{name} dir
  - Mark non-English man pages with %lang
  - Install COPYING as %license
  - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
  - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
  - removed maven macros in favour of manual handling (bug)
  - Resolves: rhbz#1475411


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.x86_64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Jay Fenlason <fenlason@redhat.com> -3.2-2_ga8c3e3e_open.2
changelog:
  - Update the -build patch and this spec file so the library is built
    with the standard optimization and security flags.
    Resolves: rhbz1070814


author: Honggang Li <honli@redhat.com> - 3.3-22_g4abbc60_open.1
changelog:
  - Rebase to latest upstream release.
  - Link against system libuuid library.
  - Spec file cleanup.
  - Related: bz1272022


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-22.20160119
changelog:
  - xorg-x11-drv-intel hardly has any accel on skylake and newer, so make
    Xorg fallback to modesetting + glamor by returning FALSE from probe
  - Using glamor also gives us proper Xvideo support on skylake (rhbz#1305369)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-23.20160512
changelog:
  - Update to 20160512 snapshot
  - This fixes laptops with switchable graphics hanging after a dpms off of
    the lcd screen (rhbz#1334581)
  - Fix fd-leak when falling back to mode-setting on skylake, this fixes
    Xorg exiting with a "drmSetMaster failed" error when not using server
    managed fds (e.g. using a different login manager then gdm)
  - Fix duplicate binaries in -devel / intel-gpu-tools subpackages (rhbz#1323641)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-24.20160712
changelog:
  - Git snapshot du jour, bringing in a bunch of bugfixes
  - Fix dpi issues on Surface 3 (also needs some kernel fixes)
  - Hopefully fix rhbz#1354124


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13
changelog:
  - Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13.
  - Drop upstreamed patch for 8075484.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16.
  - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC)
  - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
  - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226,
  -    8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and
  -    8164293/PR3412/RH1459641
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7)
  - Resolves: rhbz#1512647


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - drop more of usptreamed patches 565,566,567,568
    ( 8184673-pr3475-rh1487266.patch  8191840-pr3503-rh1512647.patch  8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-10
changelog:
  - Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
    (edewata)
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-11
changelog:
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)
  - Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
    types (cfu,dstutzman)
  - Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
    resulting structure (cfu,dstutzman)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-854.el7]
changelog:
  - [tools] perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
  - [alsa] hda/realtek: Enable Thinkpad Dock device for ALC298 platform (Jaroslav Kysela) [1469623]
  - [crypto] rng: prevent entry into drbg test path from algif_rng (Bruno Eduardo de Oliveira Meneguele) [1485815]
  - [net] macvtap: add namespace support to the sysfs device class (Davide Caratti) [1544499]
  - [net] sched: cls_u32: fix cls_u32 on filter replace (Ivan Vecera) [1542013]
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543088] {CVE-2017-18017}


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-855.el7]
changelog:
  - [crypto] algif_skcipher: Remove custom release parent function (Bruno Eduardo de Oliveira Meneguele) [1529441]
  - [crypto] algif_hash: Remove custom release parent function (Bruno Eduardo de Oliveira Meneguele) [1537376]
  - [mailbox] pcc: Drop uninformative output during boot (Kazuhito Hagio) [1515571]
  - [edac] skx_edac: Fix detection of single-rank DIMMs (Aristeu Rozanski) [1482248]
  - [md] free unused memory after bitmap resize (Nigel Croxon) [1532767]
  - [fs] sunrpc: ensure correct error is reported by xs_tcp_setup_socket() (Steve Dickson) [1536582]
  - [fs] Revert "fixing infinite OPEN loop in 4.0 stateid recovery" (Steve Dickson) [1542191]
  - [scsi] use 'scsi_device_from_queue()' for scsi_dh (Mike Snitzer) [1546212]
  - [scsi] dh: add a common helper to get a scsi_device from a request_queue (Mike Snitzer) [1546212]
  - [scsi] qedi: Drop cqe response during connection recovery (Chad Dupuis) [1543503]
  - [scsi] qedi: Fix a possible sleep-in-atomic bug in qedi_process_tmf_resp (Chad Dupuis) [1543503]
  - [scsi] qla4xxx: skip error recovery in case of register disconnect (Himanshu Madhani) [1541766]
  - [x86] spectre: fix the kernel build without CONFIG_RETPOLINE (Josh Poimboeuf) [1543939]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-856.el7]
changelog:
  - [infiniband] ipoib: Add ipoib_enhanced module parameter (Slava Shwartsman) [1533013]
  - [netdrv] ibmvnic: Remove skb->protocol checks in ibmvnic_xmit (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: Reset long term map ID counter (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: Ensure that buffers are NULL after free (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: Fix rx queue cleanup for non-fatal resets (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] ibmvnic: fix firmware version when no firmware level has been provided by the VIOS server (Desnes Augusto Nunes do Rosario) [1544356]
  - [netdrv] mlx5e: Fix offloading of E-Switch TC pedit actions (Slava Shwartsman) [1545640]
  - [netdrv] qed: Correct setting the number of completion queues for FCoE functions (Chad Dupuis) [1542188]
  - [netdrv] ixgbe: fix crash in build_skb Rx code path (Ken Cox) [1520428]
  - [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1546217]
  - [powerpc] pseries/vio: Dispose of virq mapping on vdevice unregister (Gustavo Duarte) [1544009]
  - [s390] qeth: fix underestimated count of buffer elements (Hendrik Brueckner) [1544698]
  - [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464481] {CVE-2017-7518}
  - [x86] paravirt: fix kabi breakage in pv_mmu_ops (Jeff Moyer) [1546027]
  - [x86] uaccess: introduce copy_from_iter_flushcache for pmem / cache-bypass operations (Jeff Moyer) [1471678]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-857.el7]
changelog:
  - [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548430] {CVE-2017-13166}
  - [sound] alsa: seq: Fix use-after-free at creating a port (CVE-2017-15265) (Jaroslav Kysela) [1503381] {CVE-2017-15265}
  - [gpu] drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE (Rob Clark) [1546022]
  - [edac] disable only ghes_edac by default (Aristeu Rozanski) [1543078]
  - [edac] ghes: Model a single, logical memory controller (Aristeu Rozanski) [1543078]
  - [fs] cifs: release cifs root_cred after exit_cifs (Leif Sahlberg) [1525874]
  - [fs] gfs2: Fix fallocate chunk size (Andreas Grunbacher) [1545329]
  - [fs] gfs2: Fixes to "Implement iomap for block_map" (Andreas Grunbacher) [1542594]
  - [fs] gfs2: Clean up (lookup,fillup)_metapath (Andreas Grunbacher) [1542594]
  - [fs] iomap: warn on zero-length mappings (Andreas Grunbacher) [1542594]
  - [md] raid0: remove blank line printk from dump_zones() (John Pittman) [1534272]
  - [md] dm: use blkdev_get rather than bdgrab when issuing pass-through ioctl (Mike Snitzer) [1513037]
  - [mm] kvmalloc: stress the vmalloc path in the debugging kernel (Mikulas Patocka) [1523567]
  - [mm] fs: rework do_invalidatepage (Eric Sandeen) [1546079]
  - [net] netfilter: fix NULL ptr dereference in nf_send_reset() (Paolo Abeni) [1546148]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-858.el7]
changelog:
  - [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
  - [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
  - [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
  - [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
  - [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
  - [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
  - [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
  - [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
  - [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
  - [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-859.el7]
changelog:
  - [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
  - [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
  - [fs] Revert dcache_readdir back to ->readdir() ("Eric W. Biederman") [1525541]
  - [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
  - [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
  - [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
  - [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
  - [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
  - [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
  - [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
  - [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
  - [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
  - [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
  - [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
  - [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-860.el7]
changelog:
  - [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
  - [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
  - [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-861.el7]
changelog:
  - [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
  - [nvme] validate admin queue before unquiesce (David Milburn) [1549733]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-862.el7]
changelog:
  - [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
  - [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
  - [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
  - [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Stanislav Kozina <skozina@redhat.com> - 0.9.15-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - use python-bugzilla instead of private bz_xmlrpc package
  - Resolves: #1328384
  - Resolves: #906664
  - Resolves: #906659
  - Resolves: #1272348


author: Stanislav Kozina <skozina@redhat.com> - 0.9.17-1
changelog:
  - Add -y option to provide path to the Module.symvers file
  - Resolves: #1366929
  - Resolves: #1366952


author: Stanislav Kozina <skozina@redhat.com> - 0.9.19-1
changelog:
  - Resolves: #1432864
  - Resolves: #1500383
  - Resolves: #1502930
  - Resolves: #1503526
  - Resolves: #1503603
  - Resolves: #1503964
  - Resolves: #1499249
  - Resolves: #1441455
  - Resolves: #1481310
  - Resolves: #1456140


author: Matthew Harmsen <mharmsen@redhat.com> 0:4.19-5
changelog:
  - Fix build for CentOS 7 (mharmsen)
  - Resolves rhbz#1465103 - Missing getter methods in JDAPFilter classes
    (edewata)


author: Karel Zak <kzak@redhat.com> 2.23.2-44
changelog:
  - fix #1478002 - systemd read-only container produces errors
  - fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
  - fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
  - fix #1490984 - Please update fdisk's manual page
  - fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
  - fix #1468646 - lscpu output missing Hypervisor
  - fix #1455398 - flock --timeout=0 doesn't work on RHEL7
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1427500 - util-linux: script does not retry on EINTR when logging command output
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h <ipv4-mapping-to-ipv6>" hostname


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.2-11
changelog:
  - Decided to defer Liberation 2.0 feature in Fedora 18.
  - Reverting to Liberation 1.07.2. 
  - Using 11 release to match with Liberation Sans Narrow


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Jarod Wilson <jarod@redhat.com>
changelog:
  - Drop libusnic_verbs from package, obsoleted by rdma-core
  - Update to usnic-tools v1.1.2.0 upstream release
  - Fix upgrade paths with rdma-core
  - Resolves: rhbz#1507612


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-10
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157671)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157671)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157671)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157671)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-11
changelog:
  - Fix a crash in the VNC server library on connecting an IPv4 client if the
    server could not start listening on an IPv6 socket (bug #1314814)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-14
changelog:
  - Backport option for disabling various SSL protocols
    Resolves: #1190689
  - Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
    Resolves: #1319949


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-1.git4391e5c
changelog:
  - Update to openwsman-2.6.3 from upstream VCS
    Resolves: #1208364 #1296198
  - Backport support for configuring used cipher suite
    Resolves: #1454607


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140718gitbdb6a3
changelog:
  - update to 20140718gitbdb6a3 (#1108795, #1059039)
  - fix PIE linking (#1092537)
  - replace hardening build flags with _hardened_build
  - include simulation test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-2.20140718gitbdb6a3
changelog:
  - add timemaster (#1085580)
  - send peer messages to correct address
  - make NTP SHM segment number configurable
  - update UDS handling to allow running multiple ptp4l/phc2sys instances
  - fix warnings from static analysis


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-3.20140718gitbdb6a3
changelog:
  - fix resetting of linreg servo (#1165045)
  - fix phc2sys automatic mode with multiple interfaces (#1108795)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.8-5
changelog:
  - add support for active-backup bonding (#1002657)
  - add support for IP over InfiniBand (#1472880)
  - fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-8
changelog:
  - fix #1201252 - delete unused entries in state file, fix bad performance
    with big state file
  - fix #1272236 - move logrotate.status to /var/lib/logrotate and add it to rwtab.d


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-13
changelog:
  - fix #1393247 - migration of state file from previous versions of logrotate
  - fix #1374331 - preserve SELinux context with 'compress' and 'sharedscripts'
  - fix #1377335 - make 'createolddir' preserve sticky bit
  - fix #1369438 - heap buffer overflow when using long date format
  - fix #1375638 - make olddir respect the missingok flag


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-29.20130522svn140
changelog:
  - Fix disrupted sentence in default logwatch.conf file (#1126848)
  - Fix smartd copyright message needs to be suppressed again (#1162741)
  - Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
  - Fix When filesystem name is long, the disk full check fails to work (#1293360)
  - Fix Should not change the case of $logdir (#1293624)
  - Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
  - Fix logwatch puppet-agent unknown entries (#1299181)
  - Fix logwatch fails with argument list too long (#1300170)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-32.20130522svn140
changelog:
  - Refix logwatch fails with argument list too long (#1300170)
  - Fix Typos in sshd service script output (#1335493)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-33.20130522svn140
changelog:
  - SSHD log format is going to change (#1422797)
  - logwatch encode=base64 generates invalid mime block (#1123093)


author: Brian C. Lane <bcl@redhat.com> 19.6.95-1
changelog:
  - IsoMountpoint: Add ppc64le kernel to search (bcl)
    Resolves: rhbz#1373358
  - livemedia-creator: Report correct results dir (bcl)
    Resolves: rhbz#1374609
  - Add creation of a bootable s390 iso (bcl)
    Resolves: rhbz#1478448
  - Add mk-s360-cdboot utility (bcl)
    Related: rhbz#1478448
  - Fix systemctl command (bcl)
    Resolves: rhbz#1478247
  - Add the version to the log (bcl)
    Resolves: rhbz#1335456
  - Include the dracut fips module in the initrd (bcl)
    Resolves: rhbz#1341280
  - Fix loop_wait (bcl)
    Resolves: rhbz#1462150
  - Document kickstart restrictions on %include (bcl)
    Resolves: rhbz#1418500
  - Add support for --repo to read yum .repo files directly (bcl)
    Resolves: rhbz#1430479
  - Package grub2-efi-ia32 need to be added explicitly to example kickstarts.
    (mhruscak)
    Resolves: rhbz#1458937


author: Brian C. Lane <bcl@redhat.com> 19.6.98-1
changelog:
  - Write a list of installed packages to /root/lorax-packages.log (bcl)
    Resolves: rhbz#1416155
  - Set the releasever and install gpg keys when using --repo (bcl)
    Related: rhbz#1430479


author: Brian C. Lane <bcl@redhat.com> 19.6.103-1
changelog:
  - Keep hid-multitouch and i2c-hid modules. (rhbz#1526323) (sbueno+anaconda)
    Resolves: rhbz#1526323


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.6.2-3
changelog:
  - Resolves:rh#650802-[si] stick characters with cursor, while input with si-wijesekera.mim
  - Resolves:rh#651289-zh-cangjie.mim: excessive space after committing Chinese word
  - Drop obsoletes/provides added in f14


author: Nikola Forró <nforro@redhat.com> - 7.4.0-1
changelog:
  - Upload new tarball
    resolves: #1435590
  - remove bug fixed in original component: #1147568 (mailx)
  - remove bug fixed in original component: #1147570 (mailx)
  - remove bug fixed in original component: #1147565 (ecj)
  - remove bug fixed in original component: #1349833 (paflib)
  - ipvsadm.8: add missing option
    resolves: #1085531
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263636
  - mcstransd.8: fix typos
    resolves: #1316009
  - memparse.1: remove incorrect description
    resolves: #1411979
  - nsswitch.conf.5: add information about sss service
    resolves: #1390935
  - packet.7: add missing socket options
    resolves: #1404478
  - namespaces.7, pid_namespaces.7, user_namespaces.7: add new manpages
    resolves: #1377583


author: Nikola Forró <nforro@redhat.com> - 7.4.1-1
changelog:
  - Upload new tarball
    related: #1435590
  - remove bug fixed in original component: #1167833 (net-tools)


author: Nikola Forró <nforro@redhat.com> - 7.4.2-1
changelog:
  - Upload new tarball
    related: #1435590
  - stat.2: update to cover latest things used in RHEL7
    resolves: #1452424
  - clone.2: document features related to namespaces
    resolves: #1452368


author: Nikola Forró <nforro@redhat.com> - 7.5.0-1
changelog:
  - Upload new tarball
    resolves: #1505892
  - remove bug fixed in original component: #1349841 (acl)
  - cups-browsed.8: fix paths to AUTHORS and README
    resolves: #1430271
  - vsftpd.conf.5: mention conflict between chroot_local_user
    and text_userdb_names options
    resolves: #1439724
  - imtest.1, lmtptest.1, mupdatetest.1, nntptest.1, pop3test.1, sivtest.1,
    smtptest.1: document -w option
    resolves: #1488506
  - vsftpd.conf.5: document allow_writeable_chroot option
    resolves: #1507143


author: Nikola Forró <nforro@redhat.com> - 7.5.0-2
changelog:
  - vsftpd.conf.5: extend description of ascii_download_enable
    and ascii_upload_enable
    resolves: #1517216


author: Nikola Forró <nforro@redhat.com> - 7.5.2-1
changelog:
  - Upload new tarball
  - remove obsolete patch
    related: #1505892
  - recvmmsg.2, sendmmsg.2: point out that error handling is unreliable
    resolves: #1422950


author: Prarit Bhargava <prarit@redhat.com> - 3:136-1.e4aca63
changelog:
  - update NVR to 136 to match upstream [1336431]
  - additional general fixes [1336431]
  - Skylake Client support (6,94) (6,78) [1255571]
  - Broadwell SoC/DE, EP & EX support (6,79) [1255572]


author: Prarit Bhargava <prarit@redhat.com> - 3:144.1.94d853b2ea81
changelog:
  - update NVR to 144 to match upstream
  - add Denverton SoC support [1273768]
  - add Kabylake U/Y support, 0x8E [1310954]
  - add Kabylake H/S support, 0x9E [1310955]
  - add Knights Mill support [1381316]
  - mcelog didn't remove /var/run/mcelog-client when exitting [1362123]


author: Thorsten Glaser <tg@mirbsd.org> 45-1
changelog:
  - Upgrade mksh to R45 and the other files to the accompanying versions
  - Drop workaround for GCC PR55009 (no longer needed)
  - Use https for homepage


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
  - Update to mlocate-0.26
  - Drop no longer necessary %clean and %defattr commands.
  - Enable hardened build
    Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
  - Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
    Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
  - don't index fuse.glusterfs filesystems (#1331870)
  - don't index files on ceph filesystem (#1333152)
  - update link to upstream repository (#1502361)


author: Simo Sorce <simo@redhat.com> 1.3.1-1
changelog:
  - Various bugfixes and minor new features
  - resolves: #1258168
  - resolves: #1258171
  - resolves: #1258172
  - resolves: #1258456


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
  - Check the NSS certificate database directory for read permissions
    by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
  - Fail start start when there are invalid Protocols defined (#1389114)
  - Handle group membership when testing NSS database filesystem
    permissions (#1395300)
  - Add OCSP cache tuning directives (#1392582) 
  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
  - Update nss_pcache.8 to drop directory and prefix options (#1382102)

  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
  - Correct URL and Source entries to point to pagure.io (#1502362)
  - Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
  - Add some missing directives RHBZ #569360
  - Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
    (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
  - mwm: do not see outline of window when moving (RHBZ#1080548)
    Clone of RHBZ#997241
  - Fixed rendering issues seen while scrolling window (RHBZ#1134365)
    (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1396514) (MotifZone bug #1564)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
  - Fix last commit that is actually MotifZone#1565 and removes that patch since
    it was causing more problems. Fixes MotifZone#1576.
    Resolves: rhbz#1448509


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Honza Horak <hhorak@redhat.com> - 5.2.5-1
changelog:
  - Update to 5.2.5
  - Enlarge buffer size for query string when getting info about tables
    Related: #948619


author: Marcin Juszkiewicz <mjuszkiewicz redhat com> - 5.2.5-4
changelog:
  - Build failed because whether to use lib64 or not is done by checking
    list of known 64-bit architectures. So added AArch64 to that list.
    Resolves: #1041348


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-27
changelog:
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
  - snmpd: Speed up ipAddressTable loading. (#1327240)
  - Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
  - Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added the RELRO check (bz 1092556)


author: Phil Sutter <psutter@redhat.com> [0.6-3.el7]
changelog:
  - nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
  - evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
  - netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
  - src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]


author: Phil Sutter <psutter@redhat.com> [0.6-4.el7]
changelog:
  - evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
  - src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
  - include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
  - datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
  - meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
  - src: meta priority support using tc classid (Phil Sutter) [1380326]
  - src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
  - src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
  - payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
  - evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
  - netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
  - src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-8
changelog:
  - Fix a potential use-after-free in nsswitch module
  - Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-9
changelog:
  - Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                             status even though the service is stopped with
                             'systemctl stop nslcd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-10
changelog:
  - Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                             nslcd + pam_ldap where user has different in
                             nis/passwd and ldap.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-11
changelog:
  - Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                             controllers and locks user out


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-12
changelog:
  - Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                             using nss-pam-ldapd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - fix login handling for FIPS slots, patch from rhbz#1390154
  - backport upstream fix for CVE-2017-5462 (DRBG leak)


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Update to NSS 3.33.0
  - Remove upstreamed patches: nss-softokn-basicutil-dependency.patch,
    nss-softokn-pss-modulus-bits.patch, nss-softokn-pkcs12-sha2.patch,
    nss-softokn-pkcs12-rsa-pss.patch,
    nss-softokn-ec-derive-pubkey-check.patch, and nss-softokn-fix-drbg.patch


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22
changelog:
  - Update to last 4.01 version from OCaml git.
  - Fix bug in argument parsing
    resolves: rhbz#1139803


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22.2
changelog:
  - Use -fno-strict-aliasing when building the compiler
  - ppc, ppc64, ppc64le: Mark stack as non-executable.
    resolves: rhbz#990521
  - Provides ocaml(runtime) 4.01.1.
    related: rhbz#1098459


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Rebase to 4.05.0 (same as Fedora Rawhide).
  - Adds support for POWER, z/VM.
  - Improves support for aarch64.
    resolves: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.3-1
changelog:
  - New upstream version 1.5.3.
  - Remove patch, now upstream.
  - Clean up the spec file.
  - Rebuild for OCaml 4.00.1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.
  - Rebuild for OCaml 4.05.0
  - ExcludeArch s390, but build for s390x.
    resolves: rhbz#1447987


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.2-5
changelog:
  - Modernise the spec file.
  - Add upstream patch to remove unnecessary get_cpu_stats second parameter
    (thanks Hu Tao).


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Richard W.M. Jones <rjones@redhat.com> - 2.3-0.1.svn234
changelog:
  - Update to latest version (subversion release 234).
  - Includes fix for CVE-2012-3514 - moderate impact hash table collisions
    (resolves: rhbz#787890).
  - Clean up the spec file and bring up to modern standards.
  - Add tests.


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Honggang Li <honli@redhat.com> - 10.0.0.0-443
changelog:
  - Apply one missed patch to fix various /tmp races
  - Revert the script for building (S)RPMs
  - Resolves: bz1262327


author: Honggang Li <honli@redhat.com> - 10.3.1.0-8
changelog:
  - Rebase to upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1257452, bz1382792


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-2
changelog:
  - Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
    resolves: rhbz#1268537
  - Remove PAM calls to pam_unix2.so module
    resolves: rhbz#1313071


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-4
changelog:
  - Fix failure to quiesce filesystem when Docker containers are running
    resolves: rhbz#1406483
  - Fix for deadlock when taking a snapshot
    resolves: rhbz#1398802


author: Richard W.M. Jones <rjones@redhat.com> - 10.1.5-1
changelog:
  - Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
    resolves: rhbz#1406901
  - Enable vgauthd.
    resolves: rhbz#1269243
  - Add runtime dependency on pciutils (1388766).


author: Jakub Jelen <jjelen@redhat.com> - 3.5-2
changelog:
  - icsf token does not validate data length for verify operation for ECDSA (#1344383)
  - Create lock and log directories from opencryptoki (#1343671)
  - Create log directory with appropriate permissions (#1185421)
  - Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
  - Fix for session handle not set in session issue (#1348804)
  - Fix memory leak in icsf specific code


author: Sinny Kumari <skumari@redhat.com> - 3.5-6
changelog:
  - RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
  - RHBZ#1372188: fix illegal instruction on pkcscca tool


author: Sinny Kumari <skumari@redhat.com> - 3.6.2-1
changelog:
  - Rebase opencryptoki to 3.6.2
  - Remove patches from spec file applied during 3.5 release
  - Resolves: #1391559, #1380784, #1417905


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4
changelog:
  - add support for additional STARTTLS protocols to s_client
    original backported patch by Robert Scheck (#1396209)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: William Cohen <wcohen@redhat.com> - 0.9.9-17
changelog:
  - Define some  Intel broadwell default unit masks by names
  - Add support for Harrisonville (Denverton SoC)
  - Add support for Skylake-SP server
  - Add support for Kabylake-U/Y
  - Add support for Kabylake-H/S
  - Make Nehalem, Westmere, and Haswell event names unique.


author: William Cohen <wcohen@redhat.com> - 0.9.9-22
changelog:
  - Update ppc64/ppc64le support. rhbz1385007
  - Add recognition check for POWER8NV and POWER8NVL. rhbz1426426


author: John Kacur <jkacur@redhat.com> - 0.11.1-10
changelog:
  - dropped the git housekeeping patch, not relevant here
  - docs-Remove-stray-a.patch
  - CLI-Introduce-nohz_full-N-entity.patch
  - tuna-config-Fix-pygtk-import.patch
  - tuna-Make-isolate-include-operations-affect-proc-irq.patch
  - tuna-Decide-whether-to-isolate-a-thread-based-on-PF_.patch
  - tuna-Fix-race-in-is_hardirq_handler.patch
  - CLI-Do-not-show-column-headers-when-not-outputting-t.patch
  - Correct-a-typo-in-the-net.ipv4.ipfrag_time-help-stri.patch
  Resolves: rhbz#1234963


author: John Kacur - 0.13-3
changelog:
  - Display usage instead of traceback when -c missing args or args is incorrect
  Resolves: rhbz#1268287


author: John Kacur - 0.13-4
changelog:
  - CLI-start-a-process-from-tuna
  - docs: upgrade tuna.8 man page with option -r
  Resolves: rhbz#1235829


author: John Kacur - 0.13-5
changelog:
  - Rebuild to document
    tuna thows an exception instead of an error message when sched_setaffinity returns EINVAL
    This was actually fixed in v0.13-1
  Resolves: rhbz#1290445


author: John Kacur - 0.13-6
changelog:
  - Use errno codes instead of plain numbers
  - Exit with a message instead of a traceback in isolate_cpus
  Resolves: rhbz#1472840


author: Felipe Borges <feborges@redhat.com> - 20170813-1
changelog:
  - Update source URL to Pagure
   - Drop the rhel-7.4 data patch
   - Update to new release
   - Resolves: rhbz#1479731


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
  - Don't rebuild documentation for each platform. Doing so creates unique 
  document files which are shared and conflict on multilib installations.


author: William Cohen <wcohen@redhat.com> - 5.2.0-25
changelog:
  - Update IBM Power 9 events. rhbz1510684
  - Make lmsensor dynamically size internal array. rhbz1510497


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Robert Relyea <rrelyea@redhat.com - 1.4.10-13
changelog:
  - Add support for missing readers (broadcom, cherry).
  - mark deprecated readers as unsupported and needing an update


author: Petr Pisar <ppisar@redhat.com> - 1.70-1
changelog:
  - 1.70 bump (bug #1101251)
  - Regenerate Perl code from timezone sources (bug #1101251)
  - Update time zone data to Olson 2017b (bug #1101251)


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
  - Respect OpenSSL default ciphers and protocol versions (bug #1127322)
  - Fix typo in Utils.pm (bug #1097710)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-9
changelog:
  - Fixes showing same cgroups for threads under process by adding format option
  - Resolves: rhbz#1284087


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Chris Lumens <clumens@redhat.com> - 1.99.66.11-1
changelog:
  - Document %traceback and %onerror. (clumens)
    Related: rhbz#1412538
  - Add an %onerror script section. (clumens)
    Related: rhbz#1412538
  - Add more test coverage around Group and Script objects. (clumens)
    Related: rhbz#1412538
  - Add --nohome option to autopart command. (#141) (vponcova)
    Related: rhbz#663099
  - Add --chunksize option to raid command. (#140) (vponcova)
    Related: rhbz#1332316


author: Chris Lumens <clumens@redhat.com> - 1.99.66.12-1
changelog:
  - Add documentation for the snapshot feature (jkonecny)
    Related: rhbz#1113207
  - Add tests for a new snapshot command (jkonecny)
    Related: rhbz#1113207
  - Add support of --when param to snapshot command (jkonecny)
    Related: rhbz#1113207
  - Add new snapshot KS command (jkonecny)
    Related: rhbz#1113207


author: Chris Lumens <clumens@redhat.com> - 1.99.66.14-1
changelog:
  - Add timeout and retries options to %packages section (#1482912) (vponcova)
  - Add command hmc to support SE/HMC file access (#1498829) (vponcova)
  - Add tests for method command (vponcova)
  - Rewrite the method command. (vponcova)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.15-1
changelog:
  - Fix import in the mount command (vponcova)
    Related: rhbz#1450922
  - Add a new 'mount' command (vpodzime)
    Related: rhbz#1450922


author: Chris Lumens <clumens@redhat.com> - 1.99.66.18-1
changelog:
  - Add tests for the new firewall option. (clumens)
    Related: rhbz#1526486
  - Use RHEL7_Firewall instead of F28_Firewall. (clumens)
    Related: rhbz#1526486
  - Port the F20 firewall test from master. (clumens)
    Related: rhbz#1526486
  - firewall: add --use-system-defaults arg to command (dusty)
    Resolves: rhbz#1526486


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 2.0.0-2
changelog:
  - Use python2- prefix for Fedora dependencies if possible
  - Use parallel make to build documentation


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.0.0-3
changelog:
  - Remove examples-directory from Source tarball due to possible
    licensing issues
  - Append python-keyring bundled directory to search path where needed

    Resolves: rhbz#1511222


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
  - Update to 1.7.2
  - Disable pytest.deprecated_call() tests
  - Remove versioned pytest
  - Add build requirements pytz


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
  - Add depenency on python-setuptools, fixes RHBZ#1459947
  - Fix parsing of long OIDs, fixes RHBZ#1455755


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
  - Rebase to new snapshot with some fixes integrated
  - Reenable one test that I can't replicate the failure with.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.16-3
changelog:
  - Bundle python-keyring
  - Append python-keyring bundled directory to search path where needed

    Resolves: rhbz#1511228


author: John Eckersberg <jeckersb@redhat.com> - 0.7.5-1
changelog:
  - New upstream release 0.7.5
  - Updated summary and description to match upstream README
  - Updated URL and source to reflect upstream move to github


author: Jakub Hrozek <jhrozek@redhat.com> - 0.7.5-3
changelog:
  - Do not traceback on invalid IPNetwork input (upstream issues #2, #6, #5, #8)
  - Remove executable bit from documentation files to make rpmlint happy


author: Pavel Vomacka <pvomacka@redhat.com> - 0.7.5-8
changelog:
  - Resolves: #1438668 DNS forwarder address added during IPA installation
    shouldn't add IP-Address '0.0.0.0'


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
  - version 0.4.0:
    - get rid of (ancient) PolicyKit-0.x support
    - add basic (experimental, unstable) dbus introspection support
    - learn to cope with polkitd being restarted


author: Charalampos Stratakis <cstratak@redhat.com> - 0.4.0-3
changelog:
  - Make firewalld to not log errors when running commands as root
  in the absence of polkitd.
  Resolves: rhbz#1393488


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.13-8
changelog:
  - Fix memory leak in the auth_fn callback.
  - Make sure auth info is NUL-terminated.
  Resolves: rhbz#1248519


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: bkabrda <bkabrda@redhat.com> - 1.10.2-2
changelog:
  - Fix the way we unbundle six to make ovirt work even when they remove .py files
  Resolves: rhbz#1247093


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.5-14
changelog:
  * Mon May 02 2016 Jan Grulich <jgrulich@redhat.com> - 1:4.8.5-13
  - Prefer adwaita-qt theme over gtk
    Resolves: bz#1332094


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.7-1
changelog:
  - Update to 4.8.7 (+ sync with Fedora)
    Resolves: bz#1484361

  - Don't close Qt apps in Gnome on shutdown dialog
    Resolves: bz#1378865


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Keith Robertson <kroberts@redhat.com> - 0.9.7-1
changelog:
  - Allow the CLI to return more than 50 results
  - TypeError: Incorrect padding with a specific password and not working further.
  - diagnose filename output gives URLs to the XML file, not html, and XML displays author sso name
  - getcase subcommand of redhat-support-tool doesn't show the group name


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - bz1161141 - search plugin output gives URLs to the XML page, not html
  - bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
  - Resolves: rhbz#1168414 - rhel7 vmcore offset
  - Resolves: rhbz#1174461 - skip already downloaded attachments
  - Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
  - Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1196297 - typos in opencase
  - Resolves: rhbz#1196316 - change menus when closing a case
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
  - Resolves: rhbz#1104344 - add soscleaner
  - Resolves: rhbz#1273976 - caches bad password
  - Resolves: rhbz#1284306 - improve ? help
  - Resolves: rhbz#1284308 - show attachment sizes
  - Resolves: rhbz#1284309 - show attachment full path
  - Resolves: rhbz#1284314 - differentiate diagnose and analyze
  - Resolves: rhbz#1290909 - change case internal status
  - Resolves: rhbz#1351141 - reverse severity list


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
  - Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
  - Resolves: rhbz#1342628 - When opening a new case, offer a default product.
  - Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-12
changelog:
  - Resolves: #1378903 - uptime report: respect xmlrpc's integer limits994531 -
    uptime report: respect xmlrpc's integer limits (mzazrivec@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-13
changelog:
  - Related: #1378903 - uptime report: respect xmlrpc's integer limits1378903 -
    uptime report: respect xmlrpc's integer limits (grinrag@gmail.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-14
changelog:
  - Related: #1378903 - fixed BZ ID in a changelog1378903 - fixed BZ ID in a
    changelog (grinrag@gmail.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
  - Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
    changelog (galt@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
  - Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification1415742 - rhn-search traceback - immediateTrigger-
    server exists with certain identification (eherget@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
  - Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists with certain identification" (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
  - Resolves: #1430298 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
  - Related: #1494389 - detect if action has been picked up for 2nd time
    (tkasparek@redhat.com)
  - Resolves: #1494389 - revert previous reboot loop changes
    (tkasparek@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.5.65-2
changelog:
  - fix except in rhnlib to make it compatible with Python 2.4 (galt@redhat.com)
  - 1409577 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.65-5
changelog:
  - Resolves: #1471045 - check a state of handshake before shutdown SSL
    connection (grinrag@gmail.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
  - let rhnsd.service be enabled after installation
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-22
changelog:
  - Move rpm-plugin-systemd-inhibit man page to that package (#1360706)
  - Fix off by one error in base64 code (#1341913)
  - Add sources to lua to prevent %autosetup failing in some cases (#1359084)
  - Fix refcounting for Python hdr objects (#1358467)
  - Perl dependecy generator: Skip blocks after variable definitions (#1378307)
  - Verify signatures properly (#1371487)
  - Export function in Python binding for yum (#1343692)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-28
changelog:
  - Make sure files in /usr/src/debug are not world writable (RHBZ #1441098)
  - Increase maximal header size (RHBZ #1434656)
  - Increase buffer to be able to render Korean dates (RHBZ #1425231)
  - Add --noconfig option (RHBZ #1406611)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
  - Resolves: #1082496 - socket activation for rsync doesn't work (added missing
    rsyncd@.service file)


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-8
changelog:
  RHEL 7.4 ERRATUM
  - added dependency automake autoconf libtool due to yum-builddep
  - reenable omruleset module
    resolves: rhbz#1431615
    resolves: rhbz#1428403
    resolves: rhbz#1427821(fix regression, failed QA)
    resolves: rhbz#1432069
  - resolves: rhbz#1165236
    resolves: rhbz#1419228
    resolves: rhbz#1431616 
    resolves: rhbz#1196230(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-9
changelog:
  RHEL 7.4 ERRATUM
  - added autoreconf call
  - added patch to replace gethostbyname with getaddrinfo call
    resolves: rhbz#1056548(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-10
changelog:
  RHEL 7.4 ERRATUM
  - edited patches Patch19 and Patch21
    resolves: rhbz#1419228(coverity scan problems)
    resolves: rhbz#1056548(failed QA, coverity scan problems)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-11
changelog:
  RHEL 7.4 ERRATUM
  - added new patch that backports num2ipv4 due to rhbz#1427821
    resolves: rhbz#1427821
  - enable pmrfc3164sd module
    resolves: rhbz#1431616


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-13
changelog:
  RHEL 7.5 ERRATUM
  - added patch to properly resolve FQDN
    resolves: rhbz#1401456
  - added documentation patch correcting qeues default values
    resolves: rhbz#1459896
  - added patch adjusting log level of journal reloaded msg
    resolves: rhbz#1497985 
  - added patch to prevent crash with invalid set statement
    this also obsoletes patch2 (for 1188503) 
    resolves: rhbz#1462160
  - added patch with nullptr check to prevent ABRT
    resolves: rhbz#1488186


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-14
changelog:
  RHEL 7.5 ERRATUM
  - renamed patch for undocumented recover_qi script to correct bz number
    resolves: rhbz#1507028
  - added patch ensuring relp conneciton is active before closing it
    resolves: rhbz#1505103


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-15
changelog:
  RHEL 7.5 ERRATUM
  - made rsyslog-doc noarch and fixed search on doc regeneration
    resolves: rhbz#1507028


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-16
changelog:
  RHEL 7.5 ERRATUM
  - edited the patch to conform to latest upstream doc
    resolves: rhbz#1459896 (failedQA)
  - disabled 32-bit builds on all arches as they are not shipped
    anymore in RHEL7


author: <kwenning@redhat.com> - 1.2.1-20
changelog:
  - tarball updated to c511b0692784a7085df4b1ae35748fb318fa79ee
    from https://github.com/Clusterlabs/sbd
    Resolves: rhbz#1324240


author: <kwenning@redhat.com> - 1.2.1-22
changelog:
  - Rebuild with shared-storage enabled
  - Package original manpage
  - Added ppc64le target
    Resolves: rhbz#1413951


author: <kwenning@redhat.com> - 1.3.0-3
changelog:
  - prevent creation of duplicate servants
  - check 2Node flag in corosync to support
    2-node-clusters with shared disk fencing
  - move disk-triggered reboot/off/crashdump
    to inquisitor to have sysrq observed by watchdog

    Resolves: rhbz#1413951


author: <kwenning@redhat.com> - 1.3.1-2
changelog:
  - rebase to upstream v1.3.1

    Resolves: rhbz#1499864
              rhbz#1468580
              rhbz#1462002


author: <kwenning@redhat.com> - 1.3.1-3
changelog:
  - mention timeout caveat with SBD_DELAY_START
    in configuration template
  - make systemd wait for sbd-start to finish
    before starting pacemaker or dlm

    Resolves: rhbz#1525981


author: <kwenning@redhat.com> - 1.3.1-7
changelog:
  - reenable sbd on upgrade so that additional
    links to make pacemaker properly depend on
    sbd are created

    Resolves: rhbz#1525981


author: Martin Preisler <mpreisle@redhat.com> 1.1.1-1
changelog:
  - Require English fonts (bz#1134418)
  - Updated with latest upstream URLs
  - Reorganized the spec a little
  - Removed SCL related parts from the spec
  - Updated to new upstream release 1.1.1


author: Watson Sato <wsato@redhat.com> 1.1.4-1
changelog:
  - Updated to new upstream release 1.1.4 (rhbz#1404394)
  - UX improvements
  - Fixed fetch remote resources warning (rhbz#1367923)
  - Improved error message when scanning a remote machine in which openscap-scanner
    is not installed (rhbz#1368463)
  - Fixed search on disabled item (rhbz#1368493)
  - Fixed multi benchmark tailoring use case
  - Fixed a bug that caused tailored profiles to have titles duplicated (rhbz#1320197)
  - Fixed path of tailoring file in dry run output (rhbz#1368516)
  - Now Workbench doesn't allow edit of values with prohibitedChanges attribute
  - Added --version and --help command line options (rhbz#1368527)
  - Improved workflow of dry run execution (rhbz#1385549)
  - Check capabilities of oscap with propper arguments (rhbz#1368463)
  - Show number of selected rules in profile listing


author: Martin Preisler <mpreisle@redhat.com> 1.1.6-1
changelog:
  - Updated to new upstream release 1.1.6
  - Tri-state checkboxes for tailoring
  - Fixed remote host and port being cleared when scan starts
  - Fiixed formating of Profile html description in Tailoring Window
  - Fixed oscap message "Downloading ... ok" appearing as an error
  - Fixed tab order of widgets in main window
  - Load Content as the default button of the SSG integration dialog
  - New validation of the customization file name
  - Generate bash and Ansible remediation roles from profiles
  - Generate bash and Ansible remediation roles from results after scanning
  - Fixed a short integer overflow when using ssh port numbers higher than 32k
  - Fixed long loading times on OSX
  - Open tailoring file directly via command line


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.1
changelog:
  - seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
  - Resolves: bz#1392028
    ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-2.el7
changelog:
  - seabios-smm-disable-by-default.patch [bz#1378006]
  - seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
  - Resolves: bz#1378006
    (guest paused on target host sometimes when do migration during guest boot)
  - Resolves: bz#1418320
    (Seabios does not fully reset AHCI adapters)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-2.el7
changelog:
  - seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
  - Resolves: bz#1428347
    (reboot hangs on rhel6 machine types (~1/20 times))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-3.el7
changelog:
  - seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
  - seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
  - seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
  - seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
  - Resolves: bz#1020622
    (seabios fail to recognize virtio-scsi device if specify LUN not 0)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 1.10.2-4.el7
changelog:
  - seabios-virtio-IOMMU-support.patch [bz#1463163, bz#1467811]
  - Resolves: bz#1463163
    (Guest OS will down when disk enable the IOMMU for Virtio)
  - Resolves: bz#1467811
    (Guest OS will down when disk enable the IOMMU for virtio-scsi)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-5.el7
changelog:
  - seabios-boot-Rename-drive_g-to-drive.patch [bz#1452603]
  - seabios-disk-Don-t-require-the-struct-drive_s-to-be-in-the-f.patch [bz#1452603]
  - seabios-block-Rename-disk_op_s-drive_gf-to-drive_fl.patch [bz#1452603]
  - seabios-virtio-Allocate-drive_s-storage-in-low-memory.patch [bz#1452603]
  - Resolves: bz#1452603
    (can't bootup from image when attached multi-virtio-scsi disks with multi-luns)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.0-2.el7
changelog:
  - seabios-pci-fix-io-hints-capability-for-RedHat-PCI-bridges.patch [bz#1523166]
  - Resolves: bz#1523166
    ([Q35] guest kernel panic when boot with 9 nics)


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.28-1
changelog:
  - Fix sealert message for capability2
  - Spelling fixes
  - sealert - provide a better error message when SELinux is disabled (#1420084)
  - Fix report problem summary string (#1343397)
  - Update setroubleshootd.8 (#1348140)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.62-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended
  - Suggest to use ausearch instead of grep


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
  - smartmontools updated to 6.5
  - adds support for NVMe devices (#1369731)
  - minor spec cleanup (#1463148)


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-4
changelog:
  - RHEL 7.4 erratum
  - fixed cmnd_no_wait patch
  - backported iolog_flush sudoers default
    Resolves: rhbz#1369856
    Resolves: rhbz#1425853


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-5
changelog:
  - RHEL 7.4 erratum
  - added doc patch about sudo lookup issue
    Resolves: rhbz#1293306
  - added test suite patch
    Resolves: rhbz#1360687
  - fixed use after free fqdn problem
    Resolves: rhbz#1360687


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-7
changelog:
  - RHEL 7.4 erratum
  - added patch to fix output truncation (in some cases) when log_output
    option is enabled
    Resolves: rhbz#1454571


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.19-1
changelog:
  - Rebase to supermin 5.1.19.
  - Build on s390x.
  - Add upstream signature.
  - Remove upstream patches.
    resolves: rhbz#1484890, rhbz#1484973


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-5
changelog:
  - resolves: #1100365
    fixed issue when sa data files weren't correctly overwritten in some cases
  - resolves: #1097294
    count with xz compressed files as well in sa2 script
  - resolves: #1097292
    fix file mode of sysstat cron file
  - resolves: #1128569
    added workaround for dyn-tick kernel feature which makes /proc/stat file
    unreliable under certain circumstances
  - resolves: #1110852
    added better explanation of HISTORY setting to sysstat(5) man page
  - resolves: #1102610
    added possibility to set compress method in /etc/sysconfig/sysstat file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-6
changelog:
  - resolves: #1146081
    fixed issue when cifsiostat and nfsiostat were reporting incorrect statistics
    on a single CPU machines


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
  - Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
  - Remove the documentation (#915737). (clumens)
  - Display hidden groups in the package selection UI (#915029). (clumens)
  - Default to SHA512, same as anaconda (#915013). (clumens)
  - Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
  - Transifex has moved, so update the config. (clumens)
  - Remove the Japanese-specific man page. (clumens)
  - Update the system-config-kickstart man page to something useful (#948447). (clumens)
  - Fix a typo. (clumens)


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
  - Applied upstream patch to fix job retrieval (bug #1119227).
  - Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.1-20
changelog:
  - 1145739 - cannot add samba printer without python-smbc
  - 1203219 - Tracebacks due to selection/cursor handling
  - 1296815 - system-config-printer should require gtk3 instead of gtk2
  - 1164188 - ImportError: No module named cairo
  - 1140627 - Nested class are not allowed


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-1
changelog:
  - Upgrade 1.9.4 release
  - Fixed bad day-of-week of first entry in changelog
  - Do not install on systems with efi partition
    See https://access.redhat.com/articles/2217041
    Resolves: rhbz#1275031
    Resolves: rhbz#1293526
    Resolves: rhbz#1307176
    Resolves: rhbz#1313876
    Resolves: rhbz#1332691


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-2
changelog:
  - Test for UEFI system with /sys/firmware/efi, rather than looking in
    the boot directory for an efi directory.
  - Allow install on UEFI platform, but with warning message, in order to
    permit completion of provisioning.
    Resolves: rhbz#1356571


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Kalev Lember <klember@redhat.com> - 0.24.1-1
changelog:
  - Update to 0.24.1
  - Fix the build with glib 2.46 and later
  - Rebuild against gobject-introspection 1.54
  - Resolves: #1507813


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
    Resolves: bz#1388620
    Resolves: bz#1343899
    Resolves: bz#1410164
    Resolves: bz#1415547
    Resolves: bz#1418945
    Resolves: bz#1416290
    Resolves: bz#1342956
  - Fix shared memory leakage
    Resolves: bz#1358090
  - Added systemd unit file for xvnc
    Resolves: bz#1393971


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-2
changelog:
  - Be more restrictive with shared memory mode bits
    Resolves: bz#1152552
    Limit max username/password size in SSecurityPlain [CVE-2017-7394]
    Resolves: bz#1438737
    Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
    Resolves: bz#1438742


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
    Resolves: bz#1439127
    Prevent double free by crafted fences [CVE-2017-7393]
    Resolves: bz#1439134


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9
changelog:
  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
  - Remove global macro pkg_version to avoid duplicate of version
  - Use ExclusiveArch instead of ExcludeArch
  - Use less wildcard in %files section to be more specific
  - Add trailing slash at end of added directory in %file section
  - Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
  - Increase release version to 2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
  - Add systemd unit for resourcemgr
  - Add utils subpackage
  - Add Makefile.am patch to install test programs
  - Add patch to swap out AX_PTHREAD for different check
  - Increase release version to 3
  resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


author: John Kacur <jkacur@redhat.com> - 2.6.0-7
changelog:
  - Updated to latest upstream, which among many fixes also includes
  - external library for other programs to link to trace-cmd
  - bash completion
  Resolves: rhbz#1445825


author: Felipe Borges <feborges@redhat.com> -1.10.5-3
changelog:
  - Add osinfo ontology to the default TrackerNamespace
  - Whitelist "openat" sys call in seccomp
  - Resolves: #1435340


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-4
changelog:
  - Remove WITHOUT ROWID optimizations from fts5 to preserve compat with sqlite 3.7.x
  - Resolves: #1451669


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-5
changelog:
  - Update to upstream 1.10.6, backporting all fixes as of yet for UNIQUE constraint nie:url errors
  - Resolves: #1430769


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-6
changelog:
  - Backport 1.10.6 nie:url UNIQUE constraint fixes to 1.10.5
  - Fix the previous changelog entry
  - Resolves: #1430769


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-2
changelog:
  - respin
    related: rhbz#1388454
  - systemd: added support for older systemd CPUAffinity syntax
    resolves: rhbz#1441791
  - scheduler: added workarounds for low level exceptions from
    python-linux-procfs
    resolves: rhbz#1441792
  - bootloader: workaround for adding tuned_initrd to new kernels on restart
    resolves: rhbz#1441797
  - cpu-partitioning: use tuna for cores isolation
    related: rhbz#1403309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1467576
    - added recommend.d functionality
      resolves: rhbz#1459146
    - recommend: added support for matching of processes
      resolves: rhbz#1461838
    - cpu-partitioning: used tuned instead of tuna for cores isolation
      resolves: rhbz#1442229
    - bootloader: splitted string for removal from cmdline
      resolves: rhbz#1461279
    - network-latency: added skew_tick=1 kernel command line parameter
      resolves: rhbz#1451073
    - bootloader: accepted only certain values for initrd_remove_dir
      resolves: rhbz#1455161
    - increased udev monitor buffer size, made it configurable
      resolves: rhbz#1442306
    - bootloader: don't add nonexistent overlay image to grub.cfg
      resolves: rhbz#1454340
    - plugin_cpu: don't log error in execute() if EPB is not supported
      resolves: rhbz#1443182
    - sap-hana: fixed description of the sap-hana profiles
      resolves: rhbz#1482005
    - plugin_systemd: on full_rollback notify about need of initrd regeneration
      resolves: rhbz#1469258
    - don't log errors about missing files on verify with ignore_missing set
      resolves: rhbz#1451435
    - plugin_scheduler: improved logging
      resolves: rhbz#1474961
    - improved checking if we are rebooting or not
      resolves: rhbz#1475571
    - started dbus exports after a profile is applied
      resolves: rhbz#1443142
    - sap-hana: changed force_latency to 70
      resolves: rhbz#1501252
    - plugin_video: added support for the 'dpm' power method
    - list available profiles on 'tuned-adm profile'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.2.rc2
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1467576
    - fixed expansion of the variables in the 'devices' section
      related: rhbz#1490399
    - cpu-partitioning: add no_rebalance_cores= option
      resolves: rhbz#1497182


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-7
changelog:
  - RHEL 7.5 erratum
    - Fixed usbguard-daemon on systems with kernel >= 4.13
    - Use distribution specific usbguard-daemon.conf instead
      of the upstream version
    Resolves: rhbz#1516930


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-8
changelog:
  - RHEL 7.5 erratum
    - Require a lower version of libaudit during build-time
    Resolves: rhbz#1491313


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-20
changelog:
  - Rebase to fedora 3.11.0
    (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-21
changelog:
  - Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
  - Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
  - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
  - Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
  - Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
  - valgrind 3.13.0 (fedora).
  - Update description.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch
  - Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch
  - Add --error-exitcode=1 to /bin/true check.
  - Add valgrind-3.13.0-xml-socket.patch
  - Add valgrind-3.13.0-ppc64-vex-fixes.patch
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch
  - Workaround gdb/python bug in testsuite (#1434601)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-1
changelog:
  - Update to 3.22.0
  - Remove/modify current patches when needed
  - Rely on file triggers
  - Resolves: #1384965


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-3
changelog:
  - cli: Don't double warn when skipping disk size warning (rhbz#1433239)
  - devicedisk: Raise proper error on invalid source_volume (rhbz#1445198)
  - sshtunnels: Detect listen type=none for VNC (rhbz#1445714)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-4
changelog:
  - virtinst.cpu: don't validate "cpus" for NUMA cells (rhbz#1281526)
  - virtinst: introduce support for <maxMemory> element (rhbz#1281526)
  - virtinst: add support for memory device (rhbz#1281526)
  - interface: don't print error for active interface without an IP address (rhbz#1449509)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-5
changelog:
  - Reset Guest.domain to None on domain creation error (rhbz#1441902)
  - guest: Don't repeatedly overwrite self.domain (rhbz#1441902)
  - guest: Only use define+start logic for vz (rhbz#1441902)
  - virtinst.diskbackend: set pool after creating StorageVolume (rhbz#1450311)
  - virtManager.connection: introduce cb_add_new_pool (rhbz#1435064)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-6
changelog:
  - virt-install: add support for SMM feature (rhbz#1387479)
  - virt-install: add support for loader secure attribute (rhbz#1387479)
  - virtinst: if required by UEFI enable SMM feature and set q35 machine type (rhbz#1387479)
  - localization: update Japanese translations (rhbz#1375044)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.2-1
changelog:
  - Rebased to virt-manager-1.4.2 (rhbz#1472271)
  - The rebase also fixes the following bugs:
      rhbz#1457170


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-1
changelog:
  - Rebased to virt-manager-1.4.3 (rhbz#1472271)
  - The rebase also fixes the following bugs:
      rhbz#1486313, rhbz#1461684, rhbz#1456185, rhbz#1455491, rhbz#1453094
      rhbz#1446486, rhbz#1441127, rhbz#1430642


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-2
changelog:
  - domain: don't add URI into params for tunneled migration (rhbz#1456185)
  - diskbackend: convert to long the calculated size (rhbz#1450908)
  - diskbackend: get a proper size of existing block device while cloning (rhbz#1450908)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-3
changelog:
  - delete: undefine only persistent domain (rhbz#1517119)
  - localization: update Japanese translations (rhbz#1481239)


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-1
changelog:
  - Rebase to the latest upstream release
    Resolves: rhbz#1413982
  - Rebuild with spice-gtk 0.33
    Resolves: rbhz#1431995
  - Rebuild with correct hardening flags
    Resolves: rhbz#1420780
  - Fix display id inconsistencies in debug logs
    Resolves: rhbz#1368390
  - Provide a dialog for selecting ISOs
    Resolves: rhbz#1414016
  - Always display warning messages
    Resolves: rhbz#1386630
  - Do not print password in the logs
    Resolves: rhbz#1410030
  - Update qemu+ssh URL example
    Resolves: rhbz#1377283
  - Add cli options for precise VM selection in virt-viewer
    Resolves: rhbz#1399077


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-2
changelog:
  - Really enable the hardened build
    Resolves: rhzb#1420780
  - Fixup for precise VM selection
    Resolves: rhbz#1399077


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-3
changelog:
  - Handle initial zoom settings for vnc
    Resolves: rhbz#1436991
  - Allow to control zoom using numpad
    Resolves: rhbz#1337575
  - Support new elements in libvirt xml
    Resolves: rhbz#1411765


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-4
changelog:
  - Fix seamless migration in virt-viewer
    Resolves: rhbz#1442929
  - Make file transfer progressbar smooth again
    Resolves: rhbz#1449572
  - Update translation from internal zanata
    Resolves: rhzb#1378279


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-8
changelog:
  - Show authentication dialog if in kiosk mode and connecting to ovirt
    Resolves: rhbz#1459808
  - Keep the remove-viewer-connect dialog window on top
    Resolves: rhbz#1459800
  - Show overwrite confirmation when saving screenshot file
    Resolves: rhbz#1455832
  - Fix REST endpoint used to load the storagedomains
    Resolves: rhb#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-9
changelog:
  - Drop downstream specific patch reverting string change
    Related: rhbz#1481243
  - Fix scope declaration of enable_autotools macro
    Resolves: rhbz#1504132
  - Fix wrong date in previous changelog entry
    Resolves: rhbz#1504132
  - Save oVirt uri after connecting to guest
    Resolves: rhbz#1459792
  - Adjust reference to spice-gtk man page
    Resolves: rhbz#1477966


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-10
changelog:
  - Adjust reference to spice-gtk man page for remote-viewer
    Resolves: rhbz#1477966
  - Update translations
    Resolves: rhbz#1481243


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
  - Add Pressure2K option for backwards-compatibility with applications that
    hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
  - Fix hang after unplugging a device (#1496650)
  - Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-36
changelog:
  - yum-config-manager: document syntax for enabling/disabling all repos.
  - Resolves: bug#1245117
  - verifytree: use current url of comps schema.
  - Resolves: bug#1296282


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-37
changelog:
  - needs-restarting: add option for reboot hint.
  - Resolves: bug#1192946
  - needs-restarting: add option to list services.
  - Resolves: bug#1335587
  - reposync: add --download-metadata to the man page.
  - Resolves: bug#1329649
  - debuginfo-install: also respect provides when testing for installonly.
  - Related: bug#1293707


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-40
changelog:
  - needs-restarting: rework reboothint logic.
  - Related: bug#1192946
  - needs-restarting: rebase patch for 1335587.
  - Related: bug#1335587


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-41
changelog:
  - yum-config-manager: only select exact matches from --setopt.
  - Resolves: bug#1403015
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1406891


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-43
changelog:
  - yumdownloader: fix crash on broken srpm metadata.
  - Resolves: bug#1458098
  - package-cleanup: don't remove required dupes.
  - Resolves: bug#1455318
  - fastestmirror: move the logic before MD retrieval.
  - Resolves: bug#1428210
  - yum-debug-dump: improve repo failure handling.
  - Resolves: bug#1445751


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-44
changelog:
  - Add pre-transaction-actions plugin.
  - Resolves: bug#1470647
  - yum-builddep: add --define option.
  - Resolves: bug#1437636
  - verifytree: handle no @core group gracefully.
  - Resolves: bug#1349433
  - verifytree: fix handling of missing comps.
  - Resolves: bug#1333353


author: Stephen Herr <sherr@redhat.com> 2.0.1-5
changelog:
  - Related: #1115516 - don't encode proxy url if not set (mzazrivec@redhat.com)
  - Related: #1115516 - encode proxy url when passing it to urlgrabber
    (mzazrivec@redhat.com)
  - Resolves: #1115516 - correctly initialize proxy settings for URLGrabber
    (mzazrivec@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.1-7
changelog:
  - Resolves: #1423007 - request failed: error reading the headers
    (CVE-2016-8743) (pstudeni@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.1-8
changelog:
  - Resolves: #1398406 - update repo options from rhnplugin.conf even in
    cacheonly mode (michael.mraka@redhat.com)
  - Resolves: #1391867 - pass retry_no_cache option to urlgrabber
    (michael.mraka@redhat.com)
  - Resolves: #1361185 - use yum's lock to prevent concurent yum & rhn_check
    actions (michael.mraka@redhat.com)


