# changelog

author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.47-1
changelog:
  - Rebase to 5.5.47
    Also fixes: CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816
    CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858
    CVE-2015-4861 CVE-2015-4870 CVE-2015-4879 CVE-2015-4913 CVE-2015-7744
    CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598
    CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616
    CVE-2016-2047
    Resolves: #1304515


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-0.b13
changelog:
  - Update to u101b13.
  - Backport REPOS option in generate_source_tarball.sh
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13
changelog:
  - Add upstream patch for S8157306, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1365620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-5.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1368440


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-13.git20140307
changelog:
  - Update to new git master snapshot
  - connection-editor: allow VLANs/slaves of more device types (rh #1045203)
  - connection-editor: add DCB configuration UI (bgo #711032) (rh #1068688)


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #1034139).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Caolán McNamara <caolanm@redhat.com> - 2.8.3-4
changelog:
  - Resolves: rhbz#813481 x86_64 valgrind spews, see rhbz#813780
  - Related: rhbz#813481 dump valgrind failure log


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Psychotic Build System <builder@psychotic.ninja> - 1.0.0-1
changelog:
  - Forked from the Psychotic Ninja 'stikkit-1.0.6-7' package and rebased to 1.0.0
  - Renamed stikkit->cpaste; stikkit.1->cpaste.1; README.Psychotic->README.CentOS
  - Updated README.CentOS
  - Updated stikkit.1
  - Path references changed from /stikkit/ to /cpaste/


author: Pablo Greco <pablo@fliagreco.com.ar> - 1.0.0-2
changelog:
  - Backport patch from stikkit to support private pastes
  - Backport patch from stikkit to change useragent
  - Use last invalid arg as filename, no need to use -i to paste a file


author: Doug Ledford <dledford@redhat.com> - 1.4-7
changelog:
  - The upstream tarball as provided is broken.  Clean up the tarball so
    the package builds properly


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Colin Walters <walters@redhat.com> - 2.36.3-5
changelog:
  - Backport patch to fix gnome-shell lockups
    Resolves: #1030601
  - Backport patch to fix vmtoolsd hangs
    Resolves: #1063789


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Dan Walsh <dwalsh@redhat.com> 1.2-1
changelog:
  - Vendor in latest containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Add registries.conf link to a few man pages


author: Jaromír Končický <jkoncick@redhat.com> - 2.0-0.10.20130607git
changelog:
  - use all interfaces instead of default (#1003875)
  - reverted all changes on ether-wake.c and put original file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Michal Hlavinka <mhlavink@redhat.com> - 40i-0.20120630
changelog:
  - Upgrade to pre-release of 40i
  - includes new legacy shell lksh for old scripts requiring pdksh or similar old
    ksh-88 shell, see man lksh for differences


author: Owen Taylor <otaylor@redhat.com> - 3.8.4-7
changelog:
  - Add an upstream patch that fixes a bug with left-over window
    shadows that show up when we add patches to Clutter to stop
    redrawing the entire screen on every window move.
    Resolves: rhbz#1063984


author: Owen Taylor <otaylor@redhat.com> 3.8.4-13
changelog:
  - Add patches for quadbuffer stereo suppport
    Fix a bad performance problem drawing window thumbnails
    Resolves: rhbz#861507


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 7.12-7
changelog:
  - Add patch to link malshow with -lm, hopefully fixes FTBFS caused by
    https://fedoraproject.org/wiki/Features/ChangeInImplicitDSOLinking


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212096, #1217499, #1218610, #1217484


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-23.el7.centos.0.1
changelog:
  - add reporter mantisbt plugin
  - add problem format api
  - set url to public faf server
  - add event for reporting AVCs
  - Resolves bugs.centos#8422


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
  - Applied upstream patch to fix job retrieval (bug #1119227).
  - Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Steve Dickson <steved@redhat.com> 1.3.0-0.25
changelog:
  - mountstats.man:  Remove a few bogus .R macros (bz 1266013)
  - systemd: ensure nfs-config service is re-run as needed (bz 1331460)
  - exportfs: Deal with path's trailing "/"  (bz 1276534)
  - exportfs: replace one xlog(D_GENERAL) in host_canonname() (bz 1331801)
  - exportfs: Fix buf size in test_export() dump() (bz 1243234)
  - blkmapd: Added a usage routine (bz 1001431)
  - rpc.idmapd: Added a usage routine (bz 1001438)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.26
changelog:
  - gssd: use pthreads to handle upcalls (bz 1331540)
  - gssd: Fix inner-loop variable reuse (bz 1334848)
  - mount: run START_STATD fully as root (bz 1275082)
  - lockd: added lockd.conf to set module parameters (bz 1264387)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.27
changelog:
  - nfsd: use correct byte order on rdma port (bz 1310691)
  - blkmapd: Add the -h flag on the man page (bz 1001431)
  - nfsd: Remove some warnings nfsd.c (bz 1336419)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037924)
  - mountd: cleaned up usage message (bz 1003716)
  - mountstats.man: fixed typo in man page (bz 1263966)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.29
changelog:
  - mountd: fix netgroup lookup for resolvable IP addresses (bz 1341908)
  - umount: fixed typo in usage message (bz 1246329)
  - mount.nfs: added usage output when no arguemnts are given (bz 1001443)
  - nfsidmap: added the -h option (bz 1339877)
  - exportfs: Do not fail on empty exports file (bz 1340788)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.30
changelog:
  - statd: suppress a benign log message in nsm_delete_host() (bz 1347030)
  - start-statd: Use flock to serialize the running of this script (bz 1300007)
  - spec: update requires version of libtirpc-devel (bz 1346711)


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections
  Resolves: #1049977


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-5
changelog:
  - Remove default s0 range from semanage-login command. It is handled in seobject.py.
  Resolves:#1028106


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-3
changelog:
  - Few more issues reported by Coverity
  - Fix Segfault when trace in enabled in api_interface.c
  - Fix the misleading indentation
  - Fix memory leak by closing the lock file descriptor in C_Final


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.1
changelog:
  - Resolves: rhbz#1477461

  - main: Add option to set priority (rhbz#1477461)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
  - main: Add support for libcgroup (rhbz#1477461)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.2
changelog:
  - Resolves: rhbz#1484264

  - totem: Propagate totem initialization failure (rhbz#1484264)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
  - totemcrypto: Refactor symmetric key importing (rhbz#1484264)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
  - totemcrypto: Use different method to import key (rhbz#1484264)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
  - totemcrypto: Fix compiler warning (rhbz#1484264)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-0.b14
changelog:
  - Update to u92b14.
  - Remove upstreamed patches for AArch64 byte behaviour and template issue.
  - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
  - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112.
  - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
  - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
  - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
  - Replace PR2974/RH1343832 patch with u92 version used in IcedTea 3.
  - Resolves: rhbz#1350036


author: Petr Lautrbach <plautrba@redhat.com> 3.0-11.1
changelog:
  - Add a pkcscca tool to help migrate cca private token objects
    from v2 (encrypted with cca hardware) to v3 (encrypted in software)
    (#1165621)


author: Jan Černý <jcerny@redhat.com> - 1.2.15-1
changelog:
  - upgrade to the latest upstream release
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information (#1439813)
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe
  - added Fedora 28 CPE
  - fixed oscap-docker with Docker >= 2.0
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts
  - severity of tailored rules is not discarded
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap
  - fixed pkgconfig file


author: Matěj Týč <matyc@redhat.com> - 1.2.16-1
changelog:
  - upgrade to the latest upstream release
  - moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies


author: Matěj Týč <matyc@redhat.com> - 1.2.16-2
changelog:
  - moved oscap-docker to newly created openscap-containers.
  - moved man of oscap-chroot to oscap-scanner.


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: William Poteat <wpoteat@redhat.com> 1.13.17-1
changelog:
  - Revert "884285: Needs to maintain loop for dbus calls" (alikins@redhat.com)
  - Revert "1159266: rhsm-icon -i fails with "TypeError: 'NoneType' object has no attribute '__getitem__'""
  - Revert "Send list of compliance reasons on dbus"


author: Adrian Likins <alikins@redhat.com> 1.13.21-1
changelog:
  - 1191237: Fix proxy "test connection" in firstboot. (alikins@redhat.com)
  - 1191237: Make proxy config "save" work in firstboot. (alikins@redhat.com)


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jan Grulich <jgrulich@redhat.com> - 1.3.1-1
changelog:
  - Drop unecessary patches
  - Re-base to 1.3.1 (bug #1199453)
  - Re-build against re-based xserver (bug #1194898)
  - Check the return value from XShmAttach (bug #1072733)
  - Add missing part of xserver114.patch (bug #1140603)
  - Keep pointer in sync (bug #1100661)
  - Make input device class global (bug #1119640)
  - Add IPv6 support (bug #1162722)
  - Set initial mode as prefered (bug #1181287)
  - Do not mention that display number is required in the file name (bug #1195266)
  - Enable Xinerama extension (bug #1199437)
  - Specify full path for runuser command (bug #1208817)


author: Phil Sutter - 1.4.21-24.1
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
  - Propagate errors on service stop (RHBZ#1563168)
  - Avoid overwriting parent's return code (RHBZ#1563168)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.13.1-66.gitdded712
changelog:
  - Resolves: #1588773
  - built docker @projectatomic/docker-1.13.1-rhel commit dded712
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 6675634
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit a9d1096
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
  - built docker-init commit fec3683
  - built libnetwork commit 19279f0


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.1-20
changelog:
  - 1145739 - cannot add samba printer without python-smbc
  - 1203219 - Tracebacks due to selection/cursor handling
  - 1296815 - system-config-printer should require gtk3 instead of gtk2
  - 1164188 - ImportError: No module named cairo
  - 1140627 - Nested class are not allowed


author: Bala FA <barumuga@redhat.com> - v3.6.0.24-1
changelog:
  - fixes bugs bz#1104153 bz#1109149 bz#1112582 bz#1113961 bz#1114008 
    bz#1114592 bz#1115266 bz#1115267


author: Bala FA <barumuga@redhat.com> - v3.6.0.25-1
changelog:
  - fixes bugs bz#1007033 bz#1101910 bz#1104121 bz#1104921 bz#1109150 
    bz#1116376 bz#1116703 bz#1116992 bz#1117135 bz#1120198 bz#1120245 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.26-1
changelog:
  - fixes bugs bz#1111029 bz#1111577 bz#1113852 bz#1116761 bz#1117135 
    bz#1117283 bz#1119223 bz#1120830 bz#1121059 bz#1121603


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-22
changelog:
  - ipa-replica-install never checks for 7389 port (#1075165)
  - Non-terminated string may be passed to LDAP search (#1075091)
  - ipa-sam may fail to translate group SID into GID (#1073829)
  - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-26
changelog:
  - When IdM server trusts multiple AD forests, IPA client returns invalid group
    membership info (#1079498)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28
changelog:
  - ipa-client-automount fails with incompatibility error when installed against
    older IPA server (#1083108)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28.1
changelog:
  - Server installation fails using external signed certificates with
    "IndexError: list index out of range" (#1130031)
  - Add rhino to BuildRequires to fix Web UI build error


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.61-5
changelog:
  - chkconfig: don't create symlinks if they already exist
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: Lukas Nykryn <lnykryn@redhat.com> - 219-30.9
changelog:
  - core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
  - core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)
  - core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-3.1
changelog:
  resolves: #1415724 - write_logs option is not correctly handled
  resolves: #1415726 - Setting log_format to NOLOG make auditd core dump


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.7.20120407git0deb9c
changelog:
  - update to 20120407git0deb9c
  - move timepps.h to sys (#852950)
  - include license files in devel subpackage
  - remove obsolete macros


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-20
changelog:
  - release 1.3.4.0-20
  - Resolves: bug 1278729 - Share nsslapd-threadnumber in the case nunc-stans is enabled (DS 48339)
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1279572 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1279573 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1280210 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1281522 - acl - regression - trailing ', (comma)' in macro matched value is not removed (DS 48344)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13-1
changelog:
  - New version
    Resolves: rhbz#837749
  - Fixed -i option
    Resolves: rhbz#828844
  - Added virtual provide and FPC ticket link for bundled gnulib
    Resolves: rhbz#821759


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-3
changelog:
  - Add a number of bug-fixes to deal better with high res cams (#873434)
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)
  - Fix the flash when taking a photo being dark grey instead of white (#965813)
  - Fix needing to press the effects button twice to select effects after
    selecting an effect for the first time
  - Various other bug-fixes


author: Andreas Schneider <asn@redhat.com> - 4.4.4-1
changelog:
  - resolves: #1303076 - Rebase Samba to version 4.4.4
  - resolves: #1314673 - Fix CVE-2015-7560
  - resolves: #1263322 - Add '--no-dns-updates' option to 'net ads join'
  - resolves: #1264433 - Fix segfault in pam_winbind.so with invalid config
                         options
  - resolves: #1193504 - Fix smbget to retrieve files recursively
  - resolves: #1193502 - Fix smbget to use command line credentials
  - resolves: #1193493 - Fix smbget url credentials parsing
  - resolves: #1273999 - Support printing with Kerberos credentials on newer
                         CUPS versions
  - resolves: #1296821 - Define /etc/pam.d/samba as a non replaceable config
  - resolves: #1261107 - Fix memory leak because of missing talloc stackframe
  - resolves: #1333562 - Fix memory leak after smbc_free_context()
  - resolves: #1315422 - Fix regression from CVE-2015-5252
  - resolves: #1316899 - Fixed idmap_hash module issues when used with others
  - resolves: #1322691 - Fix badlock related bugs
  - Fix CVE-2015-5370
  - Fix CVE-2016-2110
  - Fix CVE-2016-2111
  - Fix CVE-2016-2112
  - Fix CVE-2016-2113
  - Fix CVE-2016-2114
  - Fix CVE-2016-2115
  - Fix CVE-2016-2118
  - resolves: #1327951 - Fix regression with anonymous connections from OS X
  - resolves: #1327845 - Fix pcap_cache_reload() with spoolssd
  - resolves: #1289640 - Fix ctdb selinux issue with read only tracking dbs
  - resolves: #1341208 - Fix enumerating groups over NSS with idmap_ad
  - resolves: #1345827 - Fix resolving trusted domain users on domain member
  - resolves: #1346334 - Fix typo in smb.conf.example
  - resolves: #1335292 - Fix site-aware 'net ads join -k'
  - resolves: #1260214 - Accept empty realm for ad domains with 'security=domain'


author: Steve Dickson <steved@redhat.com> 1.3.0-0.39
changelog:
  - nfsstats: fix some exit codes (bz 1400658)
  - Added server-generator to improve ordering (bz 1437190)
  - nfsman: document minorversion (bz 1389827)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.40
changelog:
  - gssd: ensure that preferred_realm is non-NULL (bz 1432643)
  - mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
  - sm-notify: ending the grace period early should be configurable (bz 1424599)
  - Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
  - Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:1.13.1-64.git6c336e4
changelog:
  - built docker @projectatomic/docker-1.13.1-rhel commit 6c336e4
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 04caa55
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
  - built docker-init commit 5b117de
  - built libnetwork commit 5c1218c


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-11.el7_0.1
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1135434


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1168050)
  - mod_proxy: support Unix Domain Sockets (#1168081)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
  - Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-20
changelog:
  - remove the old dump directories during upgrade
  - abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
  - fix race conditions and directory traversal issues in abrt-dbus
  - use /var/spool/abrt instead of /var/tmp/abrt
  - make the problem directories owned by root and the group abrt
  - validate uploaded problem directories in abrt-handle-upload
  - don't override files with user core dump files
  - fix symbolic link and race condition flaws
  - Resolves: #1211969, #1212819, #1212863, #1212869
  - Resolves: #1214453, #1214610, #1216973, #1218583


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - do not open the build_ids file as the user abrt
  - do not unlink failed and big user core files
  - Related: #1212819, #1216973


author: CentOS Sources <bugs@centos.org> - 2.1.11-22.el7.centos
changelog:
  - Drop RHTS hint
  -  Change by David Mansfield <david@orthanc.cobite.com>
  -  Per http://bugs.centos.org/view.php?id=7192


author: Lukas Nykryn <lnykryn@redhat.com> - 219-14
changelog:
  - Revert "sysctl.d: default to fq_codel, fight bufferbloat" (#1263158)
  - loginctl: print nontrivial properties in logictl show-* (#1260465)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-15
changelog:
  - login: fix label on /run/nologin (#1264073)
  - udev-rules: prandom character device node permissions (#1264112)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-16
changelog:
  - login: fix gcc warning, include missing header file (#1264073)
  - shutdown: make sure /run/nologin has correct label (#1264073)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-17
changelog:
  - sd-event: fix prepare priority queue comparison function (#1266479)
  - units: run ldconfig also when cache is unpopulated (#1265539)
  - selinux: fix regression of systemctl subcommands when absolute unit file paths are specified (#1185120)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jan Grulich <jgrulich@redhat.com> - 0.26-2
changelog:
  - Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
    Resolves: bz#1547207

    Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
    Resolves: bz#1545232


author: Jan Grulich <jgrulich@redhat.com> - 0.26-3
changelog:
  - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
    remote attacker to cause a denial of service via a crafted tif file
    Resolves: bz#1548410


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400839


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400839


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 10-0.1
changelog:
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Tim Waugh <twaugh@redhat.com> 1.4.1-8
changelog:
  - Fixed misplaced parenthesis (bug #979119).
  - Fixed another codec issue (bug #978970).
  - Avoid race when renaming printer (bug #975705).
  - Don't check for missing drivers in remote printers (bug #975058)
  - Another fix from the move to gi.repository (bug #973662).
  - Fixed another codec issue (bug #971973).


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-7
changelog:
  - resolves: #844791
    rank Z_BLOCK flush below Z_PARTIAL_FLUSH only when last flush was Z_BLOCK
  - done some minor .spec file cleanup


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Mark Wielaard <mjw@redhat.com> 0.156-4
changelog:
  - Add elfutils-0.156-et_dyn-kernels.patch.
    Fixes an issue on ppc64 with systemtap kernel address placement.


author: Mark Wielaard <mjw@redhat.com> 0.156-5
changelog:
  - Add elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
    Sets up initial CFI return register, CFA location expression and
    register rules for PPC, S390 and ARM (dwarf_cfi_addrframe support).


author: Mark Wielaard <mjw@redhat.com> 0.157-1
changelog:
  - Update to 0.157.
  - Remove elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
  - Remove elfutils-0.156-et_dyn-kernels.patch.


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.19
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Martin Pitt <mpitt@redhat.com> 176-2
changelog:
  - Update to 176 release
  - Storage: Offer installation of VDO on demand
  - Machines: Add disks to a virtual machine


author: Debarshi Ray <rishi@fedoraproject.org> - 3.8.5-8
changelog:
  - Fix the patch to preview encrypted PDFs
  - Fix the patch to protect against spurious view-as signals
    Resolves: #959175


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Kalev Lember <kalevlember@gmail.com> - 2.24.2-1
changelog:
  - Update to 2.24.2
  - Removed mm-common buildrequire which is no longer needed for tarball builds
  - Cleaned up the spec file for modern rpmbuild


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7_4.1
changelog:
  - kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
  - Resolves: bz#1468107
    (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-141.el7_4.2
changelog:
  - kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
  - kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
  - Resolves: bz#1482468
    (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-2
changelog:
  - Update to NSS 3.28.3
  - Remove upstreamed patches for the previous FIPS validation
  - Package lowkeyi.h and lowkeyti.h in freebl-devel
  - Pick up a patch in the Fedora package to fix build issue


author: Bob Relyea <rrelyea@redhat.com> - 3.28.3-4
changelog:
  - include new PKCS12 NSS specific mechanisms.
  - alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
  - add RSA PSS oid to decrypting PKCS #5 key blobs.
  - move ec public key check from softokn to freebl so apps like Java can benefit.


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - fix login handling for FIPS slots, patch from rhbz#1390154
  - backport upstream fix for CVE-2017-5462 (DRBG leak)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Joe Orton <jorton@redhat.com> - 0:1.4.15-1
changelog:
  - update to 1.4.15 (#782395)
  - switch to simple systemd service (#878198)
  - use systemd scriptlet macros (Václav Pavlín, #850204)


author: Kalev Lember <klember@redhat.com> - 0.24.1-1
changelog:
  - Update to 0.24.1
  - Fix the build with glib 2.46 and later
  - Rebuild against gobject-introspection 1.54
  - Resolves: #1507813


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-102
changelog:
  - LVM: update metadata on start/relocate
  - LVM: warn when cache mode is not writethrough

    Resolves: rhbz#1451933


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
  - clean up:
    - don't BR: gimp-devel, R: sane-backends
    - get rid of buildroot, %makeinstall and %clean section
    - dont obsolete/provide "sane" (ancient)


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-4 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-8
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-5 + 0.9.3-8
changelog:
  - use tty allocation for a remote scp (#985650)
  - run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set (#969375)
  - FIPS mode - adjust the key echange DH groups and ssh-keygen according toSP800-131A (#1001748)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-7 + 0.9.3-8
changelog:
  - log fipscheck verification message into syslog authpriv
  - ssh-keygen - relative-specified certificate expiry time should be relative
    to current time and not the validity start time (#1058234)
  - use the size of security of 3des for DH (#1053107)
  - ssh-copy-id.1 man page fix (#1058792)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-6.1
changelog:
  - Fix issues caused by security tightening for Badlock:
    - Only validate MIC when "map to guest" is set
    - NetApp SMB servers don't negotiate NTLMSSP_SIGN
    - Anonymous connections don't work anymore
    - wbinfo -u or 'net ads search' don't work anymore
    - Handle empty session in client code
  - resolves: #1333794


author: Andreas Schneider <asn@redhat.com> - 4.2.10-6.2
changelog:
  - related: #1333794 - Fix issues caused by security tightening for Badlock
    o ntlm_auth issues and segfault
    o rpcclient doesn't respect "client ipc *" options
    o fix anonymous authentication if signing is mandatory


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-29
changelog:
  - Correct handling systemd service (bug #737264)
  - Allow configuration with automake-1.13.1
  - Allow to stop all server instances by stopping cvs.target


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-30
changelog:
  - Fix texinfo documentation to work with texinfo-5.1 (bug #970716)
  - Do not crash if crypt(3) returns NULL (bug #966497)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-31
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name. This reverts
    canonicalization on clite side introduced with 1.11.23-20 and replaces it
    with a more benevolent key selection on server side. (bug #722972)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-32
changelog:
  - Harden build for cvs in server role (bug #983164)
  - Add cvs.sh(5) manual page (bug #983164)
  - Add cvs.csh(5) manual page (bug #983164)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-1123
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-56
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1312112)
  - document some options of the speed command (#1312110)
  - fix high-precision timestamps in timestamping authority
  - enable SCTP support in DTLS 
  - use correct digest when exporting keying material in TLS1.2 (#1289620)
  - fix CVE-2016-0799 - memory issues in BIO_printf
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-57
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60.1
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-7.el7_1.2
changelog:
  - fix SIGSEGV of the syntax check in ksh emulation mode (#1222867)
  - make the wait built-in work for already exited processes (#1162198)
  - optimize matching of multiple * in wildcards (#1130418)


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - doc: fix related to conditional compilation of man page
  - spec: add dbus dependency for abrt-cli and abrt-python
  - Related: #1191572, #1245527


author: Richard Marko <rmarko@redhat.com> - 2.1.11-29
changelog:
  - ccpp: use global TID
  - ccpp: fix comment related to 'MakeCompatCore' option in CCpp.conf
  - cli: fix testing of DBus API return codes
  - dbus-api: unify reporting of errors
  - Related: #1210601, #1252419, #1224984


author: Richard Marko <rmarko@redhat.com> - 2.1.11-31
changelog:
  - Only analyze vulnerabilities when coredump present
  - Only generate core_backtrace if it's not already present.
  - Related: #1210601


author: Richard Marko <rmarko@redhat.com> - 2.1.11-33
changelog:
  - abrt-auto-reporting documentation
  - ccpp: Use global PID
  - ccpp: correct comments mentioning TID
  - Related: #1252590, #1261036, #1223805


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-35
changelog:
  - make /var/spool/abrt owned by root
  - remove 'r' from /var/spool/abrt for other users
  - abrt-action-install-debug-info: use secure temporary directory
  - stop saving abrt's core files to /var/spool/abrt if DebugLevel < 1
  - Fixes for: CVE-2015-5273 and CVE-2015-5287
  - Resolves: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36.el7.centos
changelog:
  - add abrt patches related to CentOS from https://github.com/abrt/abrt/tree/centos7
  - disabled authenticated autoreporting


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.3
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
  - Fix madvise performance issues (#1298930).
  - Avoid "monstartup: out of memory" error on powerpc64le (#1298956).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.5
changelog:
  - Fix memory leak in ftell for wide-oriented streams (#1323781).
  - Avoid race condition in _int_free involving fastbins (#1313308).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.6
changelog:
  - Fix NULL pointer dereference in stub resolver with unconnectable name
    server addresses (#1323839).


author: Peter Jones <pjones@redhat.com> - 8.28-12
changelog:
  - Do a better job recognizing "title" and "default" position and formatting
    on extlinux
    Resolves: rhbz#1200045
  - Do a better job recognizing stanza names and defaults on grub1 and grub2
    Related: rhbz#1142545
  - (reordered some patches to match the ordering in master)
    Related: rhbz#1200045
    Related: rhbz#1142545
  - Add test suite coverage and minor fixes related to zipl and
    --default-{kernel,index,title}
    Related: rhbz#1184014
  - Use systemd debug options that work on RHEL 7
    Resolves: rhbz#1212128


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1420749
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1420749
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1420749


author: Jan Chaloupka <jchaloup@redhat.com> - 1.4.0-0.1.git87d9d8d
changelog:
  - Update to ose v3.4.0.34
    resolves: #1403892
  - Add missing dependency of kube-proxy on conntrack-tools
    resolves: #1403196


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-20
changelog:
  - Rebase to fedora 3.11.0
    (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-21
changelog:
  - Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
  - Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
  - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
  - Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
  - Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
  - valgrind 3.13.0 (fedora).
  - Update description.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch
  - Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch
  - Add --error-exitcode=1 to /bin/true check.
  - Add valgrind-3.13.0-xml-socket.patch
  - Add valgrind-3.13.0-ppc64-vex-fixes.patch
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch
  - Workaround gdb/python bug in testsuite (#1434601)


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.1-1
changelog:
  - New upstream version 0.6.1.1.
  - Remove mlvirsh subpackage, no longer upstream.
  - Replace custom configure with RPM macro configure.
  - Use RPM global instead of define.
  - Use built-in RPM OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.2-5
changelog:
  - Modernise the spec file.
  - Add upstream patch to remove unnecessary get_cpu_stats second parameter
    (thanks Hu Tao).


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.1
changelog:
  - Add 0189-RHBZ-1395298-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Resolves: bz #1395298


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.2
changelog:
  - Add 0190-RHBZ-1429885-max-sectors-kb.patch
    * add new max_sectors_kb multipath.conf parameter
  - Resolves: bz #1429885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.3
changelog:
  - Modify 0190-RHBZ-1429885-max-sectors-kb.patch
    * make max_sectors_kb only update the device sysfs paramter on creates.
  - Resolves: bz #1429885


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1626372


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209076


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-5
changelog:
  - Avoid a PV label scan while in a critical section.
  - Add Requires: resource-agents to lvm2-cluster and cmirror subpackage.
  - Add new lvm2-cluster-standalone and cmirror-standalone subpackages.
  - Add systemd native service for clvmd, cmirrord and clustered LV activation.
  - Move obsolete clvmd/cmirrord initscripts to lvm2-sysvinit subpackage.
  - Use --ignoreskippedcluster in lvm2-monitor initscript/systemd unit.
  - Use --ignoreskippedcluster in activation systemd units if use_lvmetad=0.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-6
changelog:
  - Add initial support for LVM cache and cachepool segment types.
  - Include various bug fixes from upcoming lvm2 v2.02.106 release
    detailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-10
changelog:
  - Fix cache consistency in lvmetad when PV moves around.
  - Fix memleak when lvmetad discovers PV to appear on another device.
  - Fix invalid memory read in lvmetad that could cause a deadlock.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-12
changelog:
  - Do not try to check empty pool with scheduled messages.
  - Fix return value in pool_has_message() when quering for any message.
  - Fix dmeventd logging with parallel wait event processing.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-13
changelog:
  - Use VG read lock during 'pvscan --cache -aay' autoactivation.
  - Issue a VG refresh before autoactivation only if the PV has changed/is new.
  - Add flag to lvmetad protocol to indicate the PV scanned has changed/is new.
  - Also add vgname to lvmetad protocol when referencing VGs for PVs scanned.
  - Use correct PATH_MAX for locking dir path.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.105-14
changelog:
  - Increase wait time for finishing initial lvmetad scan that's run in parallel.
  - Reinitialise lvmcache properly on fork to fix polldaemon exiting prematurely.
  - Add more cleanup for stray "cpg_dispatch_failed" cmirror messages.


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-7
changelog:
  - Improve message for number of usb channels in usb device widget
    Resolves: rhbz#1299931
  - Fix usbredir leak when redirecting a webcam
    Resolves: rhbz#1270363


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-8
changelog:
  - Check runtime usbredir version
    Resolves: rhbz#1320827
  - Allow connection to password protected guests
    Resolves: rhbz#1320806
  - Fix runtime warnings related to shared folders and usb redirection
    Resolves: rhbz#1319405
  - Change runtime warning for empty monitor config to debug message
    Resolves: rhbz#1319405
  - Fix 16 bpp LZ image decompression
    Resolves: rhbz#1285469


author: Victor Toso <victortoso@redhat.com> - 0.31-3
changelog:
  - Fix client's crash when agent is killed
    Resolves: rhbz#1336321
  - Parse ipv6 address
    Resolves: rhbz#1335239
  - Improving parsing of Smartcard messages
    Resolves: rhbz#1338727
  - Fix hangs with "Connected to graphic server"
    Resolves: rhbz#1323092


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-4
changelog:
  - Fix SASL GSSAPI (kerberos authentication)
    Resolves: rhbz#1343361
  - Allow to connect to ipv6 behind proxy
    Resolves: rhbz#1331777


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - Initial import into Fedora
  - Remove runme from docs section (review item)
  - Improve description of package (review item)


author: Kyle McMartin <kmcmarti@redhat.com> - 2.0-4
changelog:
  - aarch64: add get_cycles implementation since <asm/timex.h> is no longer
    exported by the kernel.
  - Resolves: #1100043


author: Ray Strode <rstrode@redhat.com> - 3.26.1-1
changelog:
  - Update to 3.26.1
    Resolves: #1489359
    Related:  #1481740
  - Enable wayland support
    Resolves: #1481740
  - Fix bogus wtmp entries
    Resolves: #1391156


author: Ray Strode <rstrode@redhat.com> - 3.26.2.1-1
changelog:
  - Update to 3.26.2.1
    Integrates a lot of the downstream patches
    Related: #1481740
  - Fixes race condition introduced by list display patch
    Related: #1413900


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: fkluknav <fkluknav@redhat.com> - 2:1.12.6-40.1.gitf55a118
changelog:
  - rebased docker and containerd
  - built docker @projectatomic/docker-1.12.6 commit f55a118
  - built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.12.6-41.1.gitf55a118
changelog:
  - Resolves: #1468249, #1468244
  - record exact commits rebased to in previous build
  - built oci-umount commit c134575


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.12.6-45.git1680dd8
changelog:
  - Resolves: #1467350, #1463824, #1460931, #1446635, #1436731, #1418173
  - Resolves: #1413536, #1412881, #1389545, #1366803, #1264971
  - add bzs fixed so far ^
  - built docker @projectatomic/docker-1.12.6 commit 1680dd8
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 8647404
  - built docker-runc @projectatomic/docker-1.12.6 commit f572169
  - built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
  - built oci-umount commit afbf716


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.12.6-47.git0fdc778
changelog:
  - Resolves: #1471218
  - built docker @projectatomic/docker-1.12.6 commit 0fdc778
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 8647404
  - built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
  - built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
  - built oci-umount commit 4f960ae


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.12.6-48.git0fdc778
changelog:
  - built docker @projectatomic/docker-1.12.6 commit 0fdc778
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 8647404
  - built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
  - built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
  - built oci-umount commit 8377044


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Karel Zak <kzak@redhat.com> 2.23.2-7
changelog:
  - fix #1024366 - losetup does not use loop-control to add device
  - fix #1016471 - document that blockdev --setbsz call has never worked


author: Karel Zak <kzak@redhat.com> 2.23.2-9
changelog:
  - fix #1039189 - taskset man page PERMISSIONS section is incorrect
  - fix #1050852 - lscpu: support discontinuous NUMA nodes


author: Karel Zak <kzak@redhat.com> 2.23.2-11
changelog:
  - fix #1046849 - filesystem type is not correctly displayed by df command
  - fix #1055490 - libblkid: Do not problem for backup btrfs superblock
  - fix #1054186 - wipefs does not clean gpt header fully, PMBR remains


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.8
changelog:
  - remote: Extract common clearing of event callbacks of client private data (rhbz#1619206)
  - remote: Move the call to remoteClientFreePrivateCallbacks from FreeFunc to CloseFunc (rhbz#1619206)


author: ckozak <ckozak@redhat.com>
changelog:
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)
  - Log the new requestUuid from candlepin if it is present in the response.
    (dgoodwin@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - Fix a crash that occurs when rhsm.conf is missing (ckozak@redhat.com)
  - Correct implementation of __eq__ for Content objects. (awood@redhat.com)
  - Log ca_dir and loaded ca pems on one line. (alikins@redhat.com)
  - Add default full_refresh_on_yum option. (awood@redhat.com)
  - Send empty JSON list when deleting all overrides. (awood@redhat.com)
  - Add __hash__ method to Content classes. (awood@redhat.com)
  - Add method to get all content overrides for a consumer (mstead@redhat.com)
  - Add methods to set and delete content overrides. (awood@redhat.com)
  - 1008808: json ValueErrors have no .msg attribute (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Removing entitlement cert and key from getEntitlementList (ckozak@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.12-2
changelog:
  - Add attributes for brand_name (alikins@redhat.com)
  - updated tito.props (ckozak@redhat.com)
  - removed other releasers (ckozak@redhat.com)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.3.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - drop conflicts from phc2sys service


author: Debarshi Ray <rishi@fedoraproject.org> - 1:2.8.8-19
changelog:
  - Use XDG_CONFIG_HOME instead of home for config files
    (http://sourceforge.net/p/xchat/bugs/1506/)
  - Use name and generic name correctly in desktop file
    (http://sourceforge.net/p/xchat/bugs/1397/)


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-1
changelog:
  - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built with $RPM_OPT_FLAGS
  - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing: ibus: visible 
    password entry flaw [fedora-all]
    Thanks czchen for the GitHub pull request 39.
  - Added translations: fr_FR, ja_JP, ko_KR
  - Adopt cmake-fedora-1.2.0


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-7
changelog:
  - Target "translation" is built separately with all, 
    in order to tame multiple job make.
  - Resolves Bug 1013977 - ibus-chewing needs to have ibus write-cache --system in %post and %postun
  - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing: ibus: visible password entry flaw [rhel-7.0]
  - Resolves Bug 1028911 - [zh_TW]'Chinese<->English' switch does not work when clicking on the Chewing menu list.
  - Resolves Bug 1045868 - ibus-chewing *again* not built with $RPM_OPT_FLAGS
  - Option "Sync between caps lock and IM":
    + Default of  is changed to "disable",  because the previous default
      "keyboard" cause bug 1028911 for GNOME Shell.
    + Now Sync from "input method" can control Caps LED in GNOME shell.
  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA
  - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing log.


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-9
changelog:
  - Resolves Bug 1119963 - Slow focus change with ibus-chewing
  - Resolves Bug 1062133 - ibus-chewing may not handle key event after focus change
  - Resolves Bug 1073797 - Cannot identify input mode for Chinese IME (ibus-chewing)


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-8
changelog:
  - Fix a potential use-after-free in nsswitch module
  - Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-9
changelog:
  - Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                             status even though the service is stopped with
                             'systemctl stop nslcd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-10
changelog:
  - Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                             nslcd + pam_ldap where user has different in
                             nis/passwd and ldap.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-11
changelog:
  - Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                             controllers and locks user out


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-12
changelog:
  - Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                             using nss-pam-ldapd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Resolves: bz #1069584, #1104605, #1086825, #1086825, #1127944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-69
changelog:
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Resolves: bz #979474


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-3.1
changelog:
  - Use required DER encoding when setting CA basic constraint (#1560961)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1560960)


author: Guenther Deschner <gdeschner@redhat.com> 0.2.3-8
changelog:
  - Fix default proxymech documentation and fix LOCAL_FIRST implementation
  - resolves: https://fedorahosted.org/gss-proxy/ticket/105


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-0
changelog:
  - New upstream release 0.3.0:
    * Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
    * Add support for new rpc.gssd mode of operation that forks and changes uid
    * Add 2 new options allow_any_uid and cred_usage


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-3
changelog:
  - Fix flags handling in gss_init_sec_context()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/106
  - resolves: #1031713
  - Fix OID handling in gss_inquire_cred_by_mech()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/107
  - resolves: #1031712
  - Fix continuation processing for not yet fully established contexts.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/108
  - resolves: #1031711
  - Add flags filtering and flags enforcing.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/109
  - resolves: #1031710


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-4
changelog:
  - Use secure_getenv
  - resolves: https://fedorahosted.org/gss-proxy/ticket/110
  - resolves: #1032684
  - Use strerror_r instead of strerror
  - resolves: https://fedorahosted.org/gss-proxy/ticket/111
  - resolves: #1033350


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-15
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1600905 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1611245 - Certificate generation happens with partial
    attributes in CMCRequest file [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1611250 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1612880 - CMC Revocations throws exception with
    same reqIssuer & certissuer [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1614837 - ipa-replica-install --setup-kra broken on
    DL0 with latest version [rhel-7.5.z] (abokovoy)
  - Bugzilla Bug #1614839 - CC: Enable all config audit events
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1615266 - ECC keys not supported for signing audit
    logs [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1539933 - keyGen fails when only Identity


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Ray Strode <rstrode@redhat.com> 3.14.13-20.1
changelog:
  - Ensure motif and related windows get told to supply resize borders
    for CSD decorated windows
  Resolves: #1416874


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.1
changelog:
  - qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
  - cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
  - qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
  - qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
  - qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
  - qemu: Update host-model CPUs on reconnect (rhbz#1470582)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.2
changelog:
  - qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
  - qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320658


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop AArch64 patch (PR2914) included in 2.6.6
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350041


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350041


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-49
changelog:
  - Fix bug where maximized windows would flicker to the wrong size when
    restarting the shell (on stereo enable or otherwise)
    Resolves: #1306802


author: Kevin Howell <khowell@redhat.com> 1.19.13-1
changelog:
  - 1447722: use socket.getaddrinfo() to mimic hostname -f cmd
    (jhnidek@redhat.com)
  - 1427069: Add secondary file to determine external repo file changes
    (wpoteat@redhat.com)
  - 1444453: set bin scripts file encoding to utf-8 (khowell@redhat.com)
  - 1445204: Update timestamp during intitial cert check. (jhnidek@redhat.com)
  - 1444453: Set default encoding for gui to UTF-8 (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.14-1
changelog:
  - 1449824: facts collection aborts with unknown locale (jhnidek@redhat.com)
  - 1448855: golden ticket entitlement was not removed. (jhnidek@redhat.com)
  - 1447211: Don't read non-existing json cache file. (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.15-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
  - 1451003: identity reports right info in name field (jhnidek@redhat.com)
  - 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
  - 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
    (jhnidek@redhat.com)
  - 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
  - 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
  - 1450210: Make lscpu ignore locale again (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.17-1
changelog:
  - Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
  - 1441397: Sync zanata translations (khowell@redhat.com)
  - 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.18-1
changelog:
  - Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
  - 1452075: print only readable part of SSL error to console
    (jhnidek@redhat.com)
  - 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
  - 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
  - 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
  - 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.21-1
changelog:
  - 1463765: Sync zanata translations (khowell@redhat.com)
  - 1463765: Fix wrong Indic-language translations (khowell@redhat.com)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-277
changelog:
  - Move CPANPLUS-Dist-Build files from perl-CPANPLUS
  - Move CPAN-Meta-Requirements files from CPAN-Meta
  - Add perl-Scalar-List-Utils to perl-core dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-278
changelog:
  - Update SystemTap scripts to recognize new phase__change marker and new probe
    arguments (bug #971094)
  - Update h2ph(1) documentation (bug #948538)
  - Update pod2html(1) documentation (bug #948538)
  - Do not double-own archlib directory (bug #894195)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-279
changelog:
  - Do not distribute File::Spec::VMS (bug #973713)
  - Remove bundled CPANPLUS-Dist-Build (bug #973041)


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.13.1-14.1.git55ffbf0
changelog:
  - built docker @projectatomic/docker-1.13.1-rhel commit 55ffbf0
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit 2ade59f
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit e39d94f
  - built docker-init commit 81f886d
  - built libnetwork commit eed0fe8


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.13.1-16.1.git19ea2d3
changelog:
  - Resolves: #1460268, #1460784
  - built docker @projectatomic/docker-1.13.1-rhel commit 19ea2d3
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit 2ade59f
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit e39d94f
  - built docker-init commit eb3987c
  - built libnetwork commit 73f58e1


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.13.1-21.1.gitcd75c68
changelog:
  - Resolves: #1473333
  - built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
  - built docker-init commit 4892d4d
  - built libnetwork commit f81e09a
  - Requires: docker >= 1.12.6-48


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Nick Clifton <nickc@redhat.com> 2.25.1-25-base
changelog:
  - Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
    (#1326710)


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-17
changelog:
  - Import from rawhide:
    * Tue Oct 01 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
    - add support for ppc64le architecture


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-18
changelog:
  - Import from rawhide:
    * Wed Jan 15 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-12
    - include ppc64le in %power64 macro (#1052930)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.1
changelog:
  - Resolves: rhbz#1392896 - AD provider: SSSD does not retrieve a domain-local
                             group with the AD provider when following AGGUDLP
                             group structure across domains


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.164-2
changelog:
  - Suppress some unnecessary --stripesize parameter warnings.
  - Fix selection of PVs when allocating raid0_meta.
  - Specify max stripes for raid LV types: raid0:64; 1:10; 4,5:63; 6:62; 10:32.
  - Avoid double suffix when naming _rmeta LV paired with _rimage LV.


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.164-3
changelog:
  - Disallow segtype and mirror conversions of raid10 volumes.
  - Fix dmeventd unmonitoring when segment type (and dso) changes.
  - Don't allow lvconvert --repair on raid0 devices or attempt to monitor them.
  - No longer adjust incorrect number of raid stripes supplied to lvcreate.
  - Move lcm and gcd to lib/misc.
  - Suppress some unnecessary --stripesize parameter warnings.
  - Fix 'pvmove -n name ...' to prohibit collocation of RAID SubLVs


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Phil Sutter - 1.4.21-18.2
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1491963)
  - Don't restart services upon upgrade (RHBZ#1491961)


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Thomas Spura <tomspur@fedoraproject.org> - 2.2.1-1
changelog:
  - update to upstream release 2.2.1 (fixes CVE-2012-2374)
  - fix typo for epel6 macro bug #822972 (Florian La Roche)


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-7
changelog:
  - quagga is service which might implement networking, thus it should not have
    WantedBy=network.target in its systemd configuration
  - resolves: #976883


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.3-1
changelog:
  - update to 0.99.22.3
  - disable ospfapi and ospfclient
  - fix bogus dates in changelog
  - resolves : #984532


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-4
changelog:
  - fix link to upstream tarball (#1059219)
  - reference pidfiles of quagga daemons in service files (#842309)


author: Ondřej Lysoněk <olysonek@redhat.com> - 0.99.22.4-5
changelog:
  - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
    certain forms of UPDATE message allowing to crash or potentially execute
    arbitrary code
  - Resolves: rhbz#1546015


author: Rex Dieter <rdieter@fedoraproject.org> - 0.15.2-2
changelog:
  - -devel: drop Requires: glib2-devel, already gets pulled in via pkgconfig deps
  - -editor: add icon scriptlets
  - tighten subpkg deps via %{_isa}


author: Kalev Lember <kalevlember@gmail.com> - 0.15.3-1
changelog:
  - Update to 0.15.3
  - Install the HighContrast icons and update the icon cache scriptlets to take
    this into account


author: Jiri Popelka <jpopelka@redhat.com> - 1.17-40
changelog:
  - fix dist tag and URL
  - put psutils-copyright.patch among sources as it's used only in
    psutils-remove-copyrighted-files
  - no need to define BuildRoot and clean it in %clean and %install anymore
  - %defattr no longer needed in %files


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Jaromir Capik <jcapik@redhat.com> - 3.1.0-5
changelog:
  - Introducing man pages for binaries in the eepromer subpackage
  - Introducing -r switch in the i2cset help


author: Richard Marko<rmarko@redhat.com> 0.8-1
changelog:
  - New upstream version
    - Added support for json de/serialization of reports and stacktraces.
    - Library version number increased, as the interface changed since the last release


author: Jakub Filak <jfilak@redhat.com> 0.9-1
changelog:
  - New upstream version
    - Enrich koops uReport data with koops text and kernel version.
    - Improve koops modules handling.


author: Martin Milata <mmilata@redhat.com> 0.9-2
changelog:
  - Fix malformed JSON for some Java and koops reports
    - Resolves: #1035317
    - Resolves: #1036790
  - Fix memory leak in RPM handling
    - Resolves: #1016780
  - Check for unsigned overflows
    - Resolves: #1034869


author: Martin Milata <mmilata@redhat.com> 0.13-2
changelog:
  - Use elfutils unwinder
    - Resolves: #1051569
  - Disable function fingerprinting
    - Resolves: #1052402


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

  - Fix minor manpage spelling mistake
    Resolves: #675454


author: Peter Hatina <phatina@redhat.com> 1.10.3-1
changelog:
  - upgrade to 1.10.3
  - see http://www.wireshark.org/docs/relnotes/wireshark-1.10.3.html
  - Resolves: #1026649
              CVE-2013-6336
              CVE-2013-6337
              CVE-2013-6338
              CVE-2013-6339
              CVE-2013-6340


author: Ray Strode <rstrode@redhat.com> 3.8.4-44
changelog:
  - If password authentication is disabled and smartcard authentication is
    enabled and smartcard isn't plugged in at start up, prompt user for
    smartcard
    Resolves: #1159385


author: Fridolin Pokorny <fpokorny@redhat.com> 6.18.00-7
changelog:
  - File locking patch modified to reflect HIST_MERGE flag (#879371)
  - Drop tcsh-6.18.00-sigint-while-waiting-for-child.patch, accepted by upstream
  - Add tcsh-6.18.00-history-merge.patch to merge histlist properly (#919452)
  - Add tcsh-6.18.00-history-savehist.patch to store history with length
    $savehist, not only $history.


author: Fridolin Pokorny <fpokorny@redhat.com> 6.18.01-1
changelog:
  - Update to tcsh-6.18.01
  - Removed tcsh-6.18.00-history-savehist.patch, not accepted by upstream
    http://mx.gw.com/pipermail/tcsh-bugs/2013-March/000824.html


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-4
changelog:
  - Fix regression in default $status value in case of lists/pipelines
    (Changed 'anyerror' variable to 'tcsh_posix_status' with opposite meaning)
    Resolves: #1025703


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.1.0-11
changelog:
  - 1071397 - Load i2c-dev module when i2cdetect is executed
  - 1195285 - Ship modprobe.d files in /usr/lib/modprobe.d


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-41
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-4
changelog:
  - backport upstream fixes
  - drop -fno-delete-null-pointer-checks hack (included in qt5-rpm-macros as needed now)


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Jaromir Capik <jcapik@redhat.com> - 6.5.5-8
changelog:
  - #759321 - psacct logrotate script references init.d service
  - #735300 - Enabling psacct causes daily cron spam


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-10.el7.4
changelog:
  - Resolves: #1615983 ipa-restore fails on newly installed system.
    - Fix ipa-restore: create /var/run/ipa files
  - Resolves: #1615966 ipa-replica-manage re-initialize TypeError: 'NoneType' object does not support item assignment
    - Check if replication agreement exist before enable/disable it
  - Resolves: #1615984 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - Tests: add integration test for password changes by dir mgr
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1615893 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1615964 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Fix elements not being removed in otpd_queue_pop_msgid()


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-10.el7.4.2
changelog:
  - Resolves: #1623673 SRV lookup doesn't correctly sort results
    - Sort and shuffle SRV record by priority and weight
  - Resolves: #1623679 Installation of replica against a specific master
    - Always set ca_host when installing replica
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
    - Fix KRA replica installation from CA master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1623676 Replication races in DogtagInstance.setup_admin
    - Improve and fix timeout bug in wait_for_entry()
    - Use common replication wait timeout of 5min
    - Fix replication races in Dogtag admin code
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623680 Increase WSGI worker process count
    - Increase WSGI process count to 5 on 64bit
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1623669 ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623668 Replica install: certmonger sometimes fails
    - Auto-retry failed certmonger requests
    - Wait for client certificates


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-10.el7.4.3
changelog:
  - Resolves: #1624811 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-10.el7_5.4.4
changelog:
  - Resolves: #1626379 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup


author: Robert Relyea <rrelyea@redhat.com> 3.16.2-12
changelog:
  - Add support for encrypt_derive.
  - Allow us to init database at level1 while already in FIPS mode.
  - Allow UserDBOpen'ed FIPS tokens to do all the mechanisms as well as
    the main fips token.
  - Silence SIGCHLD when prelink is used.


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Remove temporary workaround for brew build problems now resolved
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Till Maas <opensource@till.name> - 1.2.4-4
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-10
changelog:
  - Add libstdc++-static as a build requirement when running
    the testsuite.
  - Add remaining power8 support (#731883)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-11
changelog:
  - Add support for TDB notes section (#805115)
  - Fix length operands for cdzt, cxzt czdt and czxt (#805115)


author: Jakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12
changelog:
  - Add Intel AVX3, MPX and SHA support.
  - Add support for x86-64 -mcmodel=large -fpic TLS transitions.  (#994244)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-14
changelog:
  - Fix two may-be-uninitialized issues exposed by changes in
    compiler flags used to build binutils (#1048848).


author: Milan Crha <mcrha@redhat.com> - 3.12.11-16
changelog:
  - Add patch for RH bug #1221523 (Update translations)
  - Add patch for RH bug #1261737 (Avoid vertical scrolling in the filtering rules editor dialog)
  - Add patch for RH bug #1265613 (Use configured Date/Time format in Tasks/Memos Preview)
  - Add patch for RH bug #1284563 (Searches for user avatars on gravatar cannot be disabled)
  - Add patch for RH bug #1300358 (Do not let itip-formatter plugin disable)


author: Milan Crha <mcrha@redhat.com> - 3.12.11-17
changelog:
  - Update patch for RH bug #1284563 (Searches for user avatars on gravatar cannot be disabled)
  - Add patch for RH bug #1070749 ([IMAPx] Try to autodetect server folder variants for local folders and use them)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Honza Horak <hhorak@redhat.com> 5.5.35-1
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1054041


author: Honza Horak <hhorak@redhat.com> - 1:5.5.37-1
changelog:
  - Rebase to 5.5.37
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Also fixes: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432 CVE-2014-2431
    CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1101062


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160548


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.41-1
changelog:
  - Rebase to 5.5.41
    Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186109


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Dave Brolley <brolley@redhat.com> - 3.10.5-3
changelog:
  - Update with missing package dependency for pmda-lustrecomm.
  - Rebuild to pickup bintils fix (BZ 1238469)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-1
changelog:
  - Export the softnet_stat kernel networking metrics (BZ 1190912)
  - Latest upstream PCP, dropping all earlier patches (BZ 1200584)
  - Re-enable the pcp-pmda-jsonpointer package build (BZ 1238134)
  - Fix failing test cases and bugs from Red Hat QE (BZ 1241591)
  - pcp2graphite support for exporting from archives (BZ 1242622)
  - Remove percpu interrupt metrics from default set (BZ 1243809)
  - pcp-collector meta-package enables pmcd+pmlogger (BZ 1249090)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-2
changelog:
  - Fixes targetting several QE reported test failures (BZ 1241591)
  - Remove tool-specific interval settings for pmlogconf (BZ 1243809)


author: Nathan Scott <nathans@redhat.com> - 3.11.2-1
changelog:
  - Improve PMAPI python clients signal handling (BZ 1238550)
  - Fix issues in postfix PMDA search for mail log (BZ 1252308)
  - Fix local_sock() souble free error in perl API (BZ 1258860)
  - Fix sigsegv in pcp-uptime(1) --archive option (BZ 1262721)
  - Update to current stable PCP version (BZ 1284307)
  - Fix pcp-compat dependency drawing in many packages (BZ 1293466)
  - Support for per-processor softnet kernel metrics (BZ 1316085)
  - Fix GFS2 PMDA Install script PMNS parsing error (BZ 1320591)
  - Report Docker version 1.10+ container information (BZ 1327737)


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-1.el7.aarch64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.7-1
changelog:
  - updated to itw 1.7 and sync from fedora
  - added forgotten slaves of itweb-settings policyeditor
  - Own %{_datadir}/%{name} dir
  - Mark non-English man pages with %lang
  - Install COPYING as %license
  - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
  - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
  - removed maven macros in favour of manual handling (bug)
  - Resolves: rhbz#1475411


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
  - Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
  - Support connections that has interface-name option specified
  - Fix that bond slave names are not going above 2
  - allow virtual device name change for bonds
  - Resolves: #1064215, #1064324, #1064280, #1064334


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-4
changelog:
  - Fix IPv6Type property of LMI_IPAssignmentSettingData class for DHCPv6
  - React to IP configuration change
  - Resolves: #1066853, #1069169


author: Philip Prindeville <philipp@fedoraproject.org> - 1.5.0-1
changelog:
  - Version bump to 1.5.0
  - Have GeoIP.dat be a symlink to the real data, and install the canned
    GeoIP.dat as GeoIP-initial.dat
  - Change config as per Boris' instructions to use 'lite' databases which are
    regularly updated.
  - Add pkgconfig (.pc) file into devel subpackage
  - Add cron support for refreshing the lite databases and make a separate
    subpackage.


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716 patch, now applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
  - Drop PR3497 AArch64 patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Fix file path in rh1022017.patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Update to new tarball with AArch64 return value fixes, dropping local patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
  - Resolves: rhbz#1528233


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Updated can_xs to fix a bug in it
  - Reinstate compatibility with old distributions like EL-5
  - Drop Test::More version requirement to 0.42
  - BR: perl(ExtUtils::MakeMaker)
  - BR: perl(Test::LeakTrace) except on EL-4/EL-5 where it's not available
  - BR: perl(Pod::Simple), perl(Test::CPAN::Meta), perl(Test::MinimumVersion)
    (if we're not bootstrapping) and perl(Test::Pod), and run the developer tests
    too
  - Don't use macros for commands
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more specific
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Jan Cholasta <jcholast@redhat.com> - 3.3.3-28.2
changelog:
  - Implement a fallback for situation where no closest server available during
    trust setup (#1143779)
  - trust-add should not be run with DCs without PDC role (#1144030)
  - Improve handling of forest trust domains when establishing a cross-forest
    trust (#1144031)


author: Petr Pisar <ppisar@redhat.com> - 3.0-18
changelog:
  - wnb requires a font to start
  - Move Tk browser to sub-package wordnet-browser
  - Move alternative manual pages to wordnet-doc package
  - Do not package INSTALL instructions and correct URL
  - Modernize spec file


author: Pingfan Liu <piliu@redhat.com> 2.0.15-3
changelog:
  - makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
  - makedumpfile: ppc64: get the info of mem reserved for crashkernel
  - makedumpfile: Fix SECTION_MAP_MASK for kernel >= v.13


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.163-1
changelog:
  - Add profile for lvmdbusd which uses lvm shell json report output.
  - Restrict in-command modification of some parms in lvm shell.
  - Apply LVM_COMMAND_PROFILE early for lvm shell.
  - Refactor reporting so lvm shell log report collects whole of cmd execution.
  - Support LVM_*_FD envvars to redirect output to file descriptors.
  - Limit use of --corelog and --mirrorlog to mirrors in lvconvert.
  - Reject --nosync option for RAID6 LVs in lvcreate.
  - Do not refresh whole cmd context if profile dropped after processing LVM cmd.
  - Support straightforward lvconvert between striped and raid4 LVs. 
  - Support straightforward lvconvert between raid1 and mirror LVs. 
  - Report supported conversions when asked for unsupported raid lvconvert.
  - Add "--rebuild PV" option to lvchange to allow for PV selective rebuilds.
  - Preserve existing mirror region size when using --repair.
  - Forbid stripe parameters with lvconvert --repair.
  - Unify stripe size validation into get_stripe_params to catch missing cases.
  - Further lvconvert validation logic refactoring.
  - Add "lvm fullreport" man page.
  - Add dm_report_destroy_rows/dm_report_group_output_and_pop_all for lvm shell.
  - Adjust group handling and json production for lvm shell.


author: Ondrej Vasik <ovasik@redhat.com> 8.22-3
changelog:
  - mark deprecated SELinux related downstream options as
    deprecated in usage/man
  - temporarily disable setting SELinux contexts recursively
    for existing directories - broken (#1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-5
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-21
changelog:
  - enable build for arm64 (#926610)
  - silence gcc warnings (lint fixes without risk from upstream) for RPMDiff


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.0.0-1
changelog:
  - Remove gawk-3.1.8-syntax.patch, gawk-3.1.8-double-free-wstptr.patch
  - Update to upstream 4.0.0 (#717885)


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
  - Version 4.60.1 (bugfix release)
  - Added man-pages
  - The only patch was rebased
  - Small cosmetic spec-file cleanups


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-13
changelog:
  - Re-align with DPDK patches inside OVS FDP 18.08 (#1610407)
  - Backport "net/i40e: fix port segmentation fault when restart" (#1610481)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29.el7_5.1
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621156)
    - CVE-2018-15910 (bug #1621157)
    - CVE-2018-16542 (bug #1621380)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
  - Update to 1.7.2
  - Disable pytest.deprecated_call() tests
  - Remove versioned pytest
  - Add build requirements pytz


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.6.alpha2
changelog:
  - xfs_metadump: Require -F if proper SB magic is not found (#1040921)
  - xfs_repair: fix bad block pointer found in large directories (#1034157)
  - libxfs: Don't mark single-map blockmaps as discontiguous (#1033480)
  - libxfs: Clear stale buffer errors on write (1033480)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.7.alpha2
changelog:
  - xfs_metadump: Really add xfs_metadump -F option (#1040921)
  - xfs_check: Remove xfs_check manpage, xfs_check is deprecated (#1029458)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.8.alpha2
changelog:
  - mkfs.xfs fix default log size for small filesystems (#1034003)
  - xfs_copy: partial fixups for CRC filesystems (#1043570)
  - xfs_logprint: Don't error out after split items lose context (#1043591)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-1
changelog:
  - New upstream release (#1119940)
  - xfs_copy: fix data corruption of target (#1105170)
  - mkfs.xfs: handle mkfs of file on 4k block device (#1101236)
  - xfs_copy: don't exit with error code on success (#1100376)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-2
changelog:
  - xfs_quota: fix segfault when reporting on nonexistant path (#1077826)
  - xfs_quota: fix reporting on symlinked paths (#1077841)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-6
changelog:
  - xfs_repair: fix maximum block offset test (#1173146)
  - xfs_copy: fix assert failure on 4k sector devices (#1162414)
  - xfs_quota: man page updates (#175133, #1175627)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57.1
changelog:
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.60-1
changelog:
  - Rebase to 5.5.60
  - CVE's fixed: #1558256, #1558260, #1559060
    CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
    CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
    CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
    CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
    CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
  - Resolves: #1535217, #1491833, #1511982, #1145455, #1461692


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73
changelog:
  - Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74
changelog:
  - Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
    when it's defined outside <Proxy> setting


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75
changelog:
  - Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
    using SetEnv or PassEnv. Needs documentation.


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-80.1
changelog:
  - Resolves: #1560609 - httpd: active connections being terminated when httpd
    gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
    honored


author: Roland Mainz <rmainz@redhat.com> 0.4.1-0
changelog:
  - Rebase gssproxy to 0.4.1 per bug #1132389 ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").


author: Roland Mainz <rmainz@redhat.com> 0.4.1-1
changelog:
  - Add patch to remove -fno-strict-aliasing (gssproxy ticket #140,
    a dependicy for the fix for bug #1092515 (see below))
  - Add patch to fix bug #1092515 ("gssproxy - PIE and RELRO check")


author: Roland Mainz <rmainz@redhat.com> 0.4.1-2
changelog:
  - The following bugs have been fixed by the rebase to 0.4.1
    in bug ("[RFE] Rebase gssproxy to the latest to match
    expectations of other projects"):
    - Bug #1196371 ("rpc.gssd segfaults in gssproxy (proxymech.so)")
      Upstream tickets { #137, #144 }
    - Bug #1053730 ("KrbLocalUserMapping does not work with
      Apache & GSS-Proxy")
      Upstream ticket #101
    - Bug #1168962 ("gssproxy is not working with httpd on ppc64 and s390x")
      Upstream ticket #146


author: Roland Mainz <rmainz@redhat.com> 0.4.1-3
changelog:
  - Bug #1213852 ("[gssproxy] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy") was
    fixed by the rebase to 0.4.1 in bug ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").
    Note that the same bug was also fixed in the kernel with
    "9507271 svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT
    decoding failures" (see
    https://bugzilla.redhat.com/show_bug.cgi?id=1213852#c2
    and RH Bug #1120860 ("[NFS] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy")) to
    handle various corner cases not covered by gssproxy,
    for example individual krb5 ticket fields exceeding
    the kernel's buffer size.


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.3-1
changelog:
  - Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
  - detach -cavs subpackage
  - enable seccomp filter for sandboxed child


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.2
changelog:
  - Add patch to fix highly-parallel build (e.g. -j16)
  - Add additional compiler warning flags to highlight questionable code
  - Add patch to fix comparisons between signed and unsigned integers
  - Add patch to fix const usage
  - Add patch to fix missing field initializers
  - Add patch to suppress warnings about possibly unused variables
  - Add patch to fix declarations that are not prototypes
  - Add patch to fix warnings about nested externs
  - Add patch to fix dubious typecasts that violate strict-aliasing rules
  - Update the FSF address references and GPLv2 license text
  - Use default optimization level (-O2) again


author: Paul Howarth <paul@city-fan.org> 1.7.2-14
changelog:
  - Build with warning-fix patches to address occasional segfaults (#749455)
  - Patches have all now been merged upstream


author: Paul Howarth <paul@city-fan.org> 1.7.2-17
changelog:
  - Add note in options.pptp about MPPE not being available in FIPS mode
    (#845112)
  - Add note in options.pptp about PPTP with MSCHAP-V2 being insecure


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-3.1
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1169773)


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-8
changelog:
  - Allow to customize desktop size for RDP protocol
  - Add available translations for new strings
  - Resolves: #862389


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-9
changelog:
  - Use FreeRDP API in RDP plugin
  - Request RDP certificate verification if needed
  - Add available translations for new strings
  - Resolves: #1091765


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-116
changelog:
  - azure-lb: new resource agent
  - CTDB: fix initial probe

    Resolves: rhbz#1516435
    Resolves: rhbz#1512580


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-117
changelog:
  - ocf_attribute_target: add fallback for Pacemaker versions without
    bundle support

    Resolves: rhbz#1520574


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Andreas Schneider <asn@redhat.com> - 4.2.10-6.3
changelog:
  - resolves: #1350759 - Fix idmap_hash when used with other modules
  - resolves: #1351260 - Fix krb5 encryption type setup during join


author: Lokesh Mandvekar <lsm5@redhat.com> - 2.4.1-1
changelog:
  - Resolves: #1338871 - rebase to v2.4.1
  - Resolves: #1338824 - s3 driver: Sorting completed parts by part number for
  a better accordance with S3 spec (upstream PR# 1670)


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-4
changelog:
  - Build wayland support
  - Backport fixes proposed by upstream to 2.16 branch
  - Remove accidentally committed workaround for rhbz#1486771
  - Resolves: rhbz#1496800


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-5
changelog:
  - Update the bundled brotli and woff2 to the latest releases due to
    woff2's license incompatibility with WebKitGTK+ project
  - Resolves: rhbz#1499745
  - Drop unused patches


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-6
changelog:
  - Don't strip debug info from bundled icu libraries, otherwise there
    will be conflicts between webkitgtk4-debuginfo and icu-debuginfo packages
  - Resolves: rhbz#1486771


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Richard Hughes <rhughes@redhat.com> - 2.42.2-2
changelog:
  - Update to 2.42.2
  - [walters] Switch to autosetup -Sgit for less painful patch management
  - [walters] Actually forward port patches
  - Resolves: #1203755


author: Colin Walters <walters@redhat.com> - 2.46.2-3
changelog:
  - Rebase to 2.46.2
  - Backport two additional notable+applicable patches from upstream
    branch
  - Resolves: #1305515


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.0.12-2
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Raphael Sanchez Prudencio <rsprudencio@redhat.com> - 1.2.10-3
changelog:
  - fix oscap-docker bug that incorrectly informs about incompliance of the assessed system (#1410409)


author: Milan Broz <mbroz@redhat.com> - 1.6.0-0.1
changelog:
  - Update to cryptsetup 1.6.0-rc1.
  - Relax license to GPLv2+ according to new release.
  - Compile cryptsetup with libpwquality support.


author: Milan Broz <mbroz@redhat.com> - 1.6.0-1
changelog:
  - Update to cryptsetup 1.6.0.
  - Change default LUKS encryption mode to aes-xts-plain64 (AES128).
  - Force use of gcrypt PBKDF2 instead of internal implementation.


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-2
changelog:
  - Fix URL to actually point to libusbx
  - Improve description to explain the relation between libusbx and libusb
  - Build the examples (to test linking, they are not packaged)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Tomas Bzatek <tbzatek@redhat.com> - 2.1.2-2.el7
changelog:
  - Fix crash when loop-deleting non-loop device (#1036076)
  - Fix some thread safety issues (#1036099)
  - Fix lingering mount after CD-ROM drive is ejected (#835120)
  - Fix some uninitializes variables (#1056580)


author: Lubomir Rintel <lrintel@redhat.com> - 1.2.0-0.1.beta3
changelog:
  - Update to 1.2-beta3:
  - Added support for main exchange type (rh #1292912)
  - A device libreswan is unable listen on no longer aborts connection (rh #1285367)
  - Added import/export support (rh #1129878)
  - Replace NetworkManager-openswan (rh #1264552)


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Wim Taymans <wtaymans@redhat.com> - 3.0-16
changelog:
  - Build SUID proximity-helper with full relro
  - don't mark .desktop and dbus configurations as %config
  - Related #884146


author: Wim Taymans <wtaymans@redhat.com> - 3.0-17
changelog:
  - Use the statically allocated UID and GID from /usr/share/doc/setup/uidgid (#1056656)
  - The pulse-rt group doesn't exist (#885020)
  - Related #884146


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Milan Broz <mbroz@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0 (#890770)
  - Remove no longer provided onepin-opensc-pkcs11.so.
  - Add iasecc-tool, openpgp-tool and sc-hsm-tool.


author: Stef Walter <stefw@redhat.com> - 0.13.0-4
changelog:
  - Use the standard name format for p11-kit module configs
  - Put the p11-kit module config is the system location


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-35
changelog:
  - resolves: #1105504 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108844 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105573 - CVE-2014-0178: Uninitialized memory exposure.


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-21.el7
changelog:
  - kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1255898]
  - Resolves: bz#1255898
    (CVE-2015-5225 qemu-kvm-rhev: Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface [rhel-7.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-22.el7
changelog:
  - kvm-mirror-Fix-coroutine-reentrance.patch [bz#1251487]
  - kvm-RHEL-Set-vcpus-hard-limit-to-240-for-Power.patch [bz#1257781]
  - kvm-provide-vhost-module-config-file-with-max_mem_region.patch [bz#1255349]
  - Resolves: bz#1251487
    (qemu core dump when do drive mirror)
  - Resolves: bz#1255349
    (vhost: default value of 'max_mem_regions' should be set  larger(>=260) than 64)
  - Resolves: bz#1257781
    (The prompt is confusing when boot a guest with larger vcpu number than host physical cpu)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-23.el7
changelog:
  - kvm-scsi-disk-Fix-assertion-failure-on-WRITE-SAME.patch [bz#1247042]
  - kvm-mirror-Speed-up-bitmap-initial-scanning.patch [bz#1259229]
  - kvm-qemu-iotests-Disable-099-requires-blkverify.patch [bz#1257059]
  - kvm-spapr-Reduce-advertised-max-LUNs-for-spapr_vscsi.patch [bz#1260464]
  - kvm-vnc-Don-t-assert-if-opening-unix-socket-fails.patch [bz#1261263]
  - kvm-qcow2-Handle-EAGAIN-returned-from-update_refcount.patch [bz#1254927]
  - kvm-pc-memhotplug-fix-incorrectly-set-reserved-memory-en.patch [bz#1261846]
  - kvm-pc-memhotplug-keep-reserved-memory-end-broken-on-rhe.patch [bz#1261846]
  - Resolves: bz#1247042
    (qemu quit when using sg_write_same command inside RHEL7.2 guest)
  - Resolves: bz#1254927
    (qemu-img shows Input/output error when compressing guest image)
  - Resolves: bz#1257059
    (qemu-iotests 099 failed for vmdk)
  - Resolves: bz#1259229
    (drive-mirror blocks QEMU due to lseek64() on raw image files)
  - Resolves: bz#1260464
    (The spapr vscsi disks for lun id '9-31' and channel id '4-7' could not be recognized inside a power pc guest)
  - Resolves: bz#1261263
    (qemu crash while start a guest with invalid vnc socket path)
  - Resolves: bz#1261846
    (qemu-kvm-rhev: 64-bit PCI bars may overlap hotplugged memory and vice verse)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-24.el7
changelog:
  - kvm-spapr-Don-t-use-QOM-syntax-for-DR-connectors.patch [bz#1262143]
  - kvm-virtio-mmio-ioeventfd-support.patch [bz#1185480]
  - kvm-scsi-fix-buffer-overflow-in-scsi_req_parse_cdb-CVE-2.patch [bz#1244334]
  - kvm-spapr-Populate-ibm-associativity-lookup-arrays-corre.patch [bz#1262670]
  - kvm-ppc-spapr-Fix-buffer-overflow-in-spapr_populate_drco.patch [bz#1262670]
  - kvm-spapr_pci-Introduce-a-liobn-number-generating-macros.patch [bz#1263795]
  - kvm-spapr_iommu-Make-spapr_tce_find_by_liobn-public.patch [bz#1263795]
  - kvm-spapr_pci-Rework-device-tree-rendering.patch [bz#1263795]
  - kvm-spapr_pci-enumerate-and-add-PCI-device-tree.patch [bz#1263795]
  - kvm-spapr_pci-populate-ibm-loc-code.patch [bz#1263795]
  - kvm-tests-remove-irrelevant-assertions-from-test-aio.patch [bz#1211689]
  - kvm-aio-posix-move-pollfds-to-thread-local-storage.patch [bz#1211689]
  - kvm-aio-Introduce-type-in-aio_set_fd_handler-and-aio_set.patch [bz#1211689]
  - kvm-aio-Save-type-to-AioHandler.patch [bz#1211689]
  - kvm-aio-posix-Introduce-aio_poll_clients.patch [bz#1211689]
  - kvm-block-Mark-fd-handlers-as-protocol.patch [bz#1211689]
  - kvm-nbd-Mark-fd-handlers-client-type-as-nbd-server.patch [bz#1211689]
  - kvm-aio-Mark-ctx-notifier-s-client-type-as-context.patch [bz#1211689]
  - kvm-dataplane-Mark-host-notifiers-client-type-as-datapla.patch [bz#1211689]
  - kvm-block-Introduce-bdrv_aio_poll.patch [bz#1211689]
  - kvm-block-Replace-nested-aio_poll-with-bdrv_aio_poll.patch [bz#1211689]
  - kvm-block-Only-poll-block-layer-fds-in-bdrv_aio_poll.patch [bz#1211689]
  - Resolves: bz#1185480
    (backport ioeventfd support for virtio-mmio)
  - Resolves: bz#1211689
    (atomic live snapshots are not atomic with dataplane-backed devices)
  - Resolves: bz#1244334
    (qemu-kvm-rhev: Qemu: scsi stack buffer overflow [rhel-7.2])
  - Resolves: bz#1262143
    (VM startup is very slow with large amounts of hotpluggable memory)
  - Resolves: bz#1262670
    ([PowerKVM]SIGSEGV when boot up guest with -numa node and set up the cpus in one node to the boundary)
  - Resolves: bz#1263795
    (vfio device can't be hot unplugged on powerpc guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-25.el7
changelog:
  - kvm-block-backend-Expose-bdrv_write_zeroes.patch [bz#1256541]
  - kvm-qemu-img-convert-Rewrite-copying-logic.patch [bz#1256541]
  - kvm-main-loop-fix-qemu_notify_event-for-aio_notify-optim.patch [bz#1256541]
  - kvm-error-New-error_fatal.patch [bz#1232308]
  - kvm-Fix-bad-error-handling-after-memory_region_init_ram.patch [bz#1232308]
  - kvm-loader-Fix-memory_region_init_resizeable_ram-error-h.patch [bz#1232308]
  - kvm-memory-Fix-bad-error-handling-in-memory_region_init_.patch [bz#1232308]
  - kvm-spapr_pci-encode-class-code-including-Prog-IF-regist.patch [bz#1264845]
  - kvm-scripts-dump-guest-memory.py-fix-after-RAMBlock-chan.patch [bz#1234802]
  - kvm-spec-Require-proper-version-of-SLOF.patch [bz#1263795]
  - Resolves: bz#1232308
    ([abrt] qemu-system-x86: qemu_ram_alloc(): qemu-system-x86_64 killed by SIGABRT)
  - Resolves: bz#1234802
    ([RHEL7.2] dump-guest-memory failed because of Python Exception <class 'gdb.error'> There is no member named length.)
  - Resolves: bz#1256541
    (qemu-img hangs forever in aio_poll when used to convert some images)
  - Resolves: bz#1263795
    (vfio device can't be hot unplugged on powerpc guest)
  - Resolves: bz#1264845
    ([regression] Guest usb mouse/keyboard could not be used on qemu-kvm-rhev-2.3.0-24.el7.ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-26.el7
changelog:
  - kvm-qcow2-Make-size_to_clusters-return-uint64_t.patch [bz#1260365]
  - kvm-iotests-Add-test-for-checking-large-image-files.patch [bz#1260365]
  - Resolves: bz#1260365
    (Guest image created coredump after installation.)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-27.el7
changelog:
  - kvm-sdl2-Fix-RGB555.patch [bz#1247479]
  - kvm-spice-surface-switch-fast-path-requires-same-format-.patch [bz#1247479]
  - kvm-virtio-blk-only-clear-VIRTIO_F_ANY_LAYOUT-for-legacy.patch [bz#1207687]
  - kvm-vhost-enable-vhost-without-without-MSI-X.patch [bz#1207687]
  - kvm-vhost-user-Send-VHOST_RESET_OWNER-on-vhost-stop.patch [bz#1207687]
  - kvm-virtio-avoid-leading-underscores-for-helpers.patch [bz#1207687]
  - kvm-vhost-user-use-VHOST_USER_XXX-macro-for-switch-state.patch [bz#1207687]
  - kvm-vhost-user-add-protocol-feature-negotiation.patch [bz#1207687]
  - kvm-vhost-rename-VHOST_RESET_OWNER-to-VHOST_RESET_DEVICE.patch [bz#1207687]
  - kvm-vhost-user-add-VHOST_USER_GET_QUEUE_NUM-message.patch [bz#1207687]
  - kvm-vhost-introduce-vhost_backend_get_vq_index-method.patch [bz#1207687]
  - kvm-vhost-user-add-multiple-queue-support.patch [bz#1207687]
  - kvm-vhost-user-add-a-new-message-to-disable-enable-a-spe.patch [bz#1207687]
  - Resolves: bz#1207687
    ([6wind 7.2 FEAT]: vhost-user does not support multique)
  - Resolves: bz#1247479
    (display mess when boot a win2012-r2-64 guest with -vga std)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-28.el7
changelog:
  - kvm-rhel-Revert-unwanted-cannot_instantiate_with_device_.patch [bz#1224542]
  - kvm-Disable-additional-e1000-models.patch [bz#1224542 bz#1265161]
  - kvm-Remove-intel-iommu-device.patch [bz#1224542]
  - kvm-virtio-net-unbreak-self-announcement-and-guest-offlo.patch [bz#1262232]
  - kvm-block-mirror-fix-full-sync-mode-when-target-does-not.patch [bz#1136382]
  - Resolves: bz#1136382
    (block: Mirroring to raw block device doesn't zero out unused blocks)
  - Resolves: bz#1224542
    (unsupported devices need to be disabled in qemu-kvm-rhev after rebasing to 2.3.0)
  - Resolves: bz#1262232
    (self announcement and ctrl offloads does not work after migration)
  - Resolves: bz#1265161
    (Support various e1000 variants)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-29.el7
changelog:
  - kvm-vfio-Remove-unneeded-union-from-VFIOContainer.patch [bz#1259556]
  - kvm-vfio-Generalize-vfio_listener_region_add-failure-pat.patch [bz#1259556]
  - kvm-vfio-Check-guest-IOVA-ranges-against-host-IOMMU-capa.patch [bz#1259556]
  - kvm-vfio-Record-host-IOMMU-s-available-IO-page-sizes.patch [bz#1259556]
  - kvm-memory-Allow-replay-of-IOMMU-mapping-notifications.patch [bz#1259556]
  - kvm-vfio-Allow-hotplug-of-containers-onto-existing-guest.patch [bz#1259556]
  - kvm-spapr_pci-Allow-PCI-host-bridge-DMA-window-to-be-con.patch [bz#1259556]
  - kvm-spapr_iommu-Rename-vfio_accel-parameter.patch [bz#1259556]
  - kvm-spapr_iommu-Provide-a-function-to-switch-a-TCE-table.patch [bz#1259556]
  - kvm-spapr_pci-Allow-VFIO-devices-to-work-on-the-normal-P.patch [bz#1259556]
  - Resolves: bz#1259556
    (Allow VFIO devices on the same guest PHB as emulated devices)


author: Mike Bonnet <mikeb@redhat.com> - 1.0.90-1
changelog:
  - return the contents of the AP_REP message from rd_rep()
  - improved memory handling
  - removed use of KRB_PRIVATE


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235158


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Update to NSS 3.33.0
  - Remove upstreamed patches: nss-softokn-basicutil-dependency.patch,
    nss-softokn-pss-modulus-bits.patch, nss-softokn-pkcs12-sha2.patch,
    nss-softokn-pkcs12-rsa-pss.patch,
    nss-softokn-ec-derive-pubkey-check.patch, and nss-softokn-fix-drbg.patch


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Jitka Plesnikova <jplesnik@redhat.com> - 804.030-2
changelog:
  - Update license - add SWL
  - Specify all dependencies
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Drop removing of empty directory
  - Package COPYING


author: Petr Pisar <ppisar@redhat.com> - 804.030-4
changelog:
  - Fix file modes changed while building (bug #1017322)
  - Correct change log entry date (bug #1017322)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - Fix relocation regression wrt unowned directories (#1001553)
  - Fix build-time double-free wrt %caps() on wildcard file entry (#1002089)
  - Fix source URL in spec


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
changelog:
  - Fix segfault on empty -p <lua> scriptlet body (#1004062)
  - Add missing dependency on tar to rpm-build (#986539)


author: Harald Hoyer <harald@redhat.com> 033-153
changelog:
  - fcoe: wait for lldpad to be ready
  Resolves: rhbz#1080353
  - network: handle "ip=dhcp6" for all interfaces
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-156
changelog:
  - network: set correct lease times for DHCPv6
  Resolves: rhbz#1064365
  - include dm-cache kernel modules
  Resolves: rhbz#1081435


author: Harald Hoyer <harald@redhat.com> 033-160
changelog:
  - add fsck.<filesystem>, if it exists
  Resolves: rhbz#1083654
  - set IPV6INIT=yes if inet6 is found on the interface
  Resolves: rhbz#1083153


author: Harald Hoyer <harald@redhat.com> 033-165
changelog:
  - do not reload systemd with wait_for_dev
  Resolves:rhbz#1144066
  - do not bind persistent interface names to HWADDR
  Resolves:rhbz#1135478


author: Tom Lane <tgl@redhat.com> 9.0.0-1
changelog:
  - Update pg_filedump to version 9.0.0, to support PostgreSQL 9.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update pg_filedump to version 9.1.0, to support PostgreSQL 9.1.
  - Point to new upstream home at pgfoundry.org.


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-6
changelog:
  - obsolete quagga-sysvinit subpackage
  - use macro to specify location where to install tmpfiles configuration file
  - fix rpm scripts handling documentation in info format


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-12
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1103292


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-13
changelog:
  - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error
  Resolves:#1082956
  - Make fixfiles_exclude_dirs working if there is a substituion for the given directory
  Resolves:#1082676
  - Add ability to list the actual active modules
  Resolves:#1075023
  - Update XDG_RUNTIME_DIR directory
  Resolves:#1112811
  - Fix semanage man page to talk about  semanage-* (8) man pages.
  Resolves:#1084390


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Jay Fenlason <fenlason@redhat.com> 3.5-1
changelog:
  - New upstream release, which obsoletes both patches.
  - Correct the Source url to point to sourceforge's current path.


author: Jay Fenlason <fenlason@redhat.com> - 3.5-8.1
changelog:
  - Add a patch to shut up some compiler warnings.  (and not segfault on
    machines that can't do unaligned accesses)
    Resolves: rhbz884472


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-12.el7
changelog:
  - kvm-block-add-bdrv_co_drain_end-callback.patch [bz#1506531]
  - kvm-block-rename-bdrv_co_drain-to-bdrv_co_drain_begin.patch [bz#1506531]
  - kvm-blockjob-do-not-allow-coroutine-double-entry-or-entr.patch [bz#1506531]
  - kvm-coroutine-abort-if-we-try-to-schedule-or-enter-a-pen.patch [bz#1506531]
  - kvm-qemu-iotests-add-option-in-common.qemu-for-mismatch-.patch [bz#1506531]
  - kvm-qemu-iotest-add-test-for-blockjob-coroutine-race-con.patch [bz#1506531]
  - kvm-blockjob-Remove-the-job-from-the-list-earlier-in-blo.patch [bz#1506531]
  - kvm-block-Expect-graph-changes-in-bdrv_parent_drained_be.patch [bz#1506531]
  - kvm-blockjob-remove-clock-argument-from-block_job_sleep_.patch [bz#1506531]
  - kvm-blockjob-introduce-block_job_do_yield.patch [bz#1506531]
  - kvm-blockjob-reimplement-block_job_sleep_ns-to-allow-can.patch [bz#1506531]
  - kvm-blockjob-Make-block_job_pause_all-keep-a-reference-t.patch [bz#1506531]
  - kvm-target-ppc-Move-setting-of-patb_entry-on-hash-table-.patch [bz#1517051]
  - kvm-target-ppc-Fix-setting-of-cpu-compat_pvr-on-incoming.patch [bz#1517051]
  - kvm-BZ1513294-spapr-Include-pre-plugged-DIMMS-in-ram-siz.patch [bz#1513294]
  - kvm-virtio-Add-queue-interface-to-restore-avail-index-fr.patch [bz#1491909]
  - kvm-vhost-restore-avail-index-from-vring-used-index-on-d.patch [bz#1491909]
  - kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1398633]
  - kvm-ppc-fix-setting-of-compat-mode.patch [bz#1396119]
  - kvm-pc-fix-crash-on-attempted-cpu-unplug.patch [bz#1506856]
  - kvm-sockets-avoid-crash-when-cleaning-up-sockets-for-an-.patch [bz#1506218]
  - Resolves: bz#1396119
    ([IBM 7.5 Feature] POWER9 - Virt: QEMU: POWER8/P8-Compat mode for POWER8 Guests on POWER9 platform)
  - Resolves: bz#1398633
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
  - Resolves: bz#1491909
    (IP network can not recover after several vhost-user reconnect)
  - Resolves: bz#1506218
    (seg at exit - due to missing fd?)
  - Resolves: bz#1506531
    ([data-plane] Qemu-kvm core dumped when hot-unplugging a block device with data-plane while the drive-mirror job is running)
  - Resolves: bz#1506856
    ([abrt] qemu-kvm-rhev: object_get_class(): qemu-kvm killed by SIGSEGV)
  - Resolves: bz#1513294
    (Guest got stuck when attached memory beforehand.[-device dimm and object memory-backend-ram])
  - Resolves: bz#1517051
    (POWER9 - Virt: QEMU: Migration of HPT guest on Radix host fails)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Marek Kasik <mkasik@redhat.com> 0.22.5-2
changelog:
  - Add poppler-0.22.5-CVE-2013-4473.patch
      (Limit length of output to pathName buffer)
  - Add poppler-0.22.5-CVE-2013-4474.patch
      (Check file pattern)
  - Resolves: #1025160


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Johnny Hughes <johnny@centos.org> - 2.02-0.44
changelog:
  - Roll in CentOS Secureboot keys
  - Move the edidir to be CentOS, so people can co-install fedora, rhel and centos
  - add 0001-centos-grub2-password-fix.patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.12.3-1
changelog:
  - update to 0.12.3
  - drop upstreamed immodule patch
  - rewrite Net/ThemeName handling: set it based on .gtkrc-2.0-kde4 (kcm-gtk)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-1
changelog:
  - new upstream version 8.22 (#1043552)
  - temporarily df symlink test (incomplete upstream fix, not
    regression)
  - enable build with openssl for better performance of
    HASHsum utilities (not for md5sum because of FIPS)
  - turn on the multibyte path in the testsuite to cover
    i18n regressions
  - fix possible colorls.csh script errors for tcsh with
    noclobber set and entered include file


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-2
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - add support for /etc/pki/tls/legacy-settings also for minimum DH length
    accepted by SSL client
  - compare the encrypt and tweak key in XTS as required by FIPS


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400838


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400838


author: Brian Pepple <bpepple@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop python subpackage. gobject-introspection is used now.
  - Drop unnecessary buildroot cleaning in install section.
  - Update BR for farstream02-devel.


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.1.alpha1
changelog:
  - New upstream alpha release with preliminary CRC support (#1015632)
  - Additional patches beyon 3.2.0-alpha1:
  - Fix big endian build
  - Handle symlinks in xfs_quota arguments (#1013668)
  - Don't report non-regular files as xfsctl-capable (#1012412)
  - Fix log recovery on 4k filesystems


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.2.alpha1
changelog:
  - Move xfs_types.h from xfsprogs-qa-devel to xfsprogs-devel (#1024048)
  - Remove deprecated xfs_check from package (#1029458)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.3.alpha2
changelog:
  - New upstream alpha release (#1034445)
  - Remove xfs_check reference from fsck.xfs output (#1029455)
  - Fix xfs_fsr on some files with selinux attributes (#1034013)


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.6-1
changelog:
  - Align with the 1.0.6 upstream release:
  - editor: add support for setting MTU on team connections (rh #1255927)
  - editor: offer bond connections in vlan slave picker (rh #1255735)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
  - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase
  - Fix libssl and test patches that disable ssl2 support
  - Replace expired PayPal test certificate that breaks the build


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Restore missing options descriptions fix for certutil manpage
  - Document certutil options --dump-ext-val, --extGeneric, and --extSAN
  - Related: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1165525 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1165525 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-16
changelog:
  - Apply upstream patch to fix CVE-2014-5029 (bug #1122600),
    CVE-2014-5030 (bug #1128764), CVE-2014-5031 (bug #1128767). Also:
    - Fix conf/log file reading for authenticated users (STR #4461).
    - Fix icon display in web interface during server restart (STR #4475).
  - Apply upstream patch to fix privilege escalation due to insufficient
    checking (CVE-2014-3537, bug #1115576).
  - Describe ErrorPolicy in the cupsd.conf man page (bug #1120591).
  - Reduce package dependencies (bug #1115057):
    - New client subpackage containing command line client tools.
    - Removed 'Requires: /sbin/chkconfig'.
    - Moved 'Provides: lpd' to lpd subpackage.
  - Avoid race condition in cupsdReadClient() (bug #1113045).
  - Apply upstream patch to avoid 10 second timeouts in cupsd caused by
    reading when no data ready (bug #1110259).
  - Use colord interface correctly (bug #1087323).
  - Fix for cupsEnumDest() 'removed' callbacks (bug #1072954, STR #4380).


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-17
changelog:
  - Support for failover without load-balancing (bug #1115219).
  - Fix cupsGetPPD3() so it doesn't give the caller an unreadable file
    (part of fix for CVE-2014-5031, STR #4500).
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149245).
  - Start cups.service after network.target (bug #1144780).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Brian C. Lane <bcl@redhat.com> 3.1-18
changelog:
  - Fix manpage NAME so whatis works with parted
    Resolves: rhbz#948424
  - GPT add support for PReP GUID
    Resolves: rhbz#1108196


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9
changelog:
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)
  - log when a client requests an interactive session and only sftp is allowed (#1130198)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9
changelog:
  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9
changelog:
  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9
changelog:
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-33
changelog:
  - execute: Add new PassEnvironment= directive (#1426214)
  - test-execute: Add tests for new PassEnvironment= directive (#1426214)
  - test-execute: Clarify interaction of PassEnvironment= and MANAGER_USER (#1426214)
  - load-fragment: resolve specifiers in RuntimeDirectory (#1428110)
  - Add microphone mute keymap for Dell Precision (#1413477)
  - hwdb: update micmute YCODE on device node at DELL LATITUDE laptops for mic mute button. (#5012) (#1413477)
  - udev/path_id: improve and enhance bus detection for Linux on z Systems (#1274401)
  - core: port config_parse_bounding_set to extract_first_word (#1387398)
  - core: simplify parsing of capability bounding set settings (#1387398)
  - test: add test for capability bounding set parsing (#1387398)
  - capabilities: keep bounding set in non-inverted format. (#1387398)
  - capabilities: added support for ambient capabilities. (#1387398)
  - man: add AmbientCapabilities entry. (#1387398)
  - test-capability: rebase to upstream version (#1387398)
  - namespace: don't fail on masked mounts (#1433687)
  - sysv-generator: Provides: $network should also pull network.target to transaction (#5652) (#1438749)
  - Install: correctly report symlink creations (#1435098)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
  - Modernize spec file
  - Specify all dependencies
  - Change license to "(Copyright only) and (Artistic or GPL+)" because of
    ppport.h


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-1
changelog:
  - Fix dmstats and dmfilemapd permissions.
  - Fix memory warnings by using mempools for command definition processing.
  - Fix running commands from a script file.
  - Adjust pvresize/pvcreate messages and prompt if underlying device size
    differs.
  - Preserve region size on raid1 image count changes.
  - Handle insufficient space on RAID takeover.
  - Raise mirror/raid default regionsize to 2MiB.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-2
changelog:
  - Stop using '--yes' mode when fsadm runs without terminal.
  - Extend validation of filesystems resized by fsadm.
  - Enhance lvconvert automatic settings of possible (raid) LV types.
  - Allow lvchange to change properties on a thin pool data sub LV.
  - Fix lvcreate extent percentage calculation for mirrors.
  - Don't reinstate still-missing devices when correcting inconsistent metadata.
  - Properly handle subshell return codes in fsadm.
  - Disallow cachepool creation with policy cleaner and mode writeback.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-4
changelog:
  - Converting linear to raid1 using "recover" not "resync".
  - Print a warning about in-use PVs with no VG using them.
  - Disable automatic clearing of PVs that look like in-use orphans.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-5
changelog:
  - Improve lvcreate --cachepool arg validation.
  - Limit maximal size of thin-pool for specific chunk size.
  - Accept truncated files in calls to dm_stats_update_regions_from_fd().


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-6
changelog:
  - Reenable conversion of data and metadata thin-pool volumes to raid.
  - Improve handling of RAID status in lvs.
  - Disable RAID reshape/take-over in a cluster or when snapshot exists.


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-1
changelog:
  - treat unexpected command-line arguments as an error to avoid setting
    incorrect expectations, and warn when a check file doesn't appear to
    contain anything for us to check (#1016706)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-4
changelog:
  - only BuildRequire: prelink on the arches on which we know it runs (currently
    %{ix86}, x86_64, ppc, ppc64, s390, s390x), so that it can be built on the
    rest (#1061889)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-13
changelog:
  - Fix connection using broken monitor mapping
    Resolves: rhbz#1351243
  - Provide correct exit code on cancel
    Resolves: rhbz#1374430
  - Inform user about connection failure
    Resolves: rhbz#1377100
  - Recommend using ssh-agent
    Resolves: rhbz#1377283


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.15-1
changelog:
  - Rebased to libvirt-python-1.2.15 (rhbz#1194594)
  - The rebase also fixes the following bugs:
      rhbz#1212168


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-1
changelog:
  - Rebased to libvirt-python-1.2.17 (rhbz#1194594)
  - The rebase also fixes the following bugs:
      rhbz#1194594, rhbz#1222795


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-2
changelog:
  - examples: Introduce nodestats example (rhbz#1051494)
  - iothread: Fix crash if virDomainGetIOThreadInfo returns error (rhbz#1248295)
  - Check return value of PyList_Append (rhbz#1249511)


author: Jiri Denemark <jdenemar@redhat.com> - 1.3.2-1
changelog:
  - Rebased to libvirt-python-1.3.2 (rhbz#1286680)
  - The rebase also fixes the following bugs:
      rhbz#1311058


author: Jiri Denemark <jdenemar@redhat.com> - 1.3.3-1
changelog:
  - Rebased to libvirt-python-1.3.3 (rhbz#1286680)
  - The rebase also fixes the following bugs:
      rhbz#


author: Richard W.M. Jones <rjones@redhat.com> 22.20-1
changelog:
  - Update to 22.20.
    Contains a fix for: http://sourceforge.net/p/psmisc/bugs/53/
  - Fix src/pstree.c when SELinux is available.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.46
changelog:
  - v2v: Refuse to convert Windows > 7
    reverts: rhbz#1190669
  - v2v: Depend directly on libguestfs-xfs
    resolves: rhbz#1240275
  - v2v: Inclusion of libguestfs-winsupport in RHEL 7.2
    resolves: rhbz#1240274, rhbz#1240276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Akira TAGOH <tagoh@redhat.com> - 1.6.2-1
changelog:
  - New upstream release.
  - the spec file cleanup.
  - Correct License field
  - Add Provides: bundled(egglib) to im-chooser-common since
    it actually contains things in libimchooseui.so.0


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release.
    - Add a link to the log file in the error dialog (#950488)
    - Fix a crash issue (#859624)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-7
changelog:
  - Multiple fixes in web UI
  - Fixed crash on missing nagios agents metadata
  - Check user/group membership on each request
  - Print output of crm_resource in pcs resource cleanup
  - Resolves: #rhbz1158571 #rhbz1189857 #rhbz1235022 #rhbz1257369


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-8
changelog:
  - Fixes in loading cluster status for web UI
  - Fixed checking user/group membership
  - Fixed a typo in an error message
  - Resolves: #rhbz1158566 #rhbz1158569 #rhbz1158571


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-9
changelog:
  - Multiple fixes in web UI (dashboard, nodes, resources, fence devices)
  - Fixed an authentication issue in web UI
  - Port parameter of fence agents is now considered optional
  - Resolves: rhbz#1158566 rhbz#1188361 rhbz#1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-10
changelog:
  - Web UI fixes
  - Added more detailed warnings for 'pcs stonith confirm'
  - Resolves: rhbz#1189857 rhbz#1245264


author: Chris Feist <cfeist@redhat.com> - 0.9.143-12
changelog:
  - Fixed issue managing resources that were clones and had the unmanaged
    meta attribute set under the clone/master
  - Resolves: rhbz#1268801


author: Chris Feist <cfeist@redhat.com> - 0.9.143-14
changelog:
  - Fixed remaining issues when managing resources/groups/etc. that were
    previously unmanaged
  - Resolves: rhbz#1268801


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Martin Milata <mmilata@redhat.com> - 0.13-5
changelog:
  - Fix minor bugs found by static analyzers
    - Resolves: #1142856
  - Return empty duphash for koopses with no reliable frames
    - Resolves: #1123262
  - Fix parsing of python SyntaxError exceptions
    - Resolves: #1142339
  - Fix parsing of ppc64 gdb stacktraces
    - Resolves: #1142338
  - Limit the depth of generated stacktrace to avoid huge reports
    - Resolves: #1142346
  - Add authentication support to uReport, needed for reporting to customer portal
    - Resolves: #1139555


author: Honza Horak <hhorak@redhat.com> - 1:5.5.37-2
changelog:
  - Build with -O3 on all power64 arches
    Disable some failing tests temporarily on ppc64le
    Resolves: #1123497


author: Simone Caronni <negativo17@gmail.com> - 1.1.0-9
changelog:
  - Added patches for file transfer and status time workaround:
    http://www.lilotux.net/~mikael/pub/meanwhile/
  - Spec file formatting.


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-6
changelog:
  - api: Remove check on iothread_id arg in virDomainPinIOThread (rhbz#1251886)
  - api: Adjust comment for virDomainAddIOThread (rhbz#1251886)
  - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (rhbz#1251886)
  - conf: Check for attach disk usage of iothread=0 (rhbz#1253108)
  - virNetDevBandwidthUpdateRate: turn class_id into integer (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthChangeAllowed (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthUpdate (rhbz#1252473)
  - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (rhbz#1252473)
  - cpu: Don't update host-model guest CPUs on ppc64 (rhbz#1251927)
  - cpu: Better support for ppc64 compatibility modes (rhbz#1251927)
  - cpu: Move check for NULL CPU model inside the driver (rhbz#1251927)
  - tests: Add some compatibility-related cases to the CPU tests (rhbz#1251927)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.00-5
changelog:
  - Ensure that NetBackup is started automatically upon recovery (PR#1544)
    Also do not kill daemons spawned by sysinit.service at the service's end
    (PR#1610, applies to NetBackup and also to dhclient)
    Resolves #1506231


author: Nathaniel McCallum <npmccallum@redhat.com> - 7-1
changelog:
  - Update to v7
  - Resolves: rhbz#1467907
  - Resolves: rhbz#1467908
  - Resolves: rhbz#1475406
  - Resolves: rhbz#1500975
  - Resolves: rhbz#1478888


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Petr Pisar <ppisar@redhat.com> - 1:2.0016-1
changelog:
  - 2.0016 bump (disable XML_PARSE_HUGE by default to prevent from
    CVE-2003-1564, a recursive XML entity expansion leads to memory exhaustion
    in a XML parser)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
  - drop last man page change, that option is just for compatibility
  - fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.12
changelog:
  - Resolves: rhbz#1405584 - SSH: default_domain_suffix is not being used
                             for users' authorized keys


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.13
changelog:
  - Resolves: rhbz#1418943 - If a long-running task (e.g. enumeration) blocks the
                             sssd_be process, sssd_be can deadlock
  - Also Require a new-enough version of selinux-policy so that setpgid() by sssd
    is allowed


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.14
changelog:
  - Resolves: rhbz#1422183 - Fails to accept any sudo rules if there are
                             two user entries in an ldap role with the same
                             sudo user.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.15
changelog:
  - Resolves: rhbz#1445821 - sssd does not evaluate AD UPN suffixes which
                             results in failed user logins


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.16
changelog:
  - Resolves: rhbz#1446085 - D-Bus interface of sssd is giving inappropriate
                             group information for trusted AD users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.17
changelog:
  - Resolves: rhbz#1450125 - Wrong pam return code for user from subdomain
                             with ad_access_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-43.18
changelog:
  - Resolves: rhbz#1456013 - sssd intermittently failing to resolve groups
                             for an AD user in IPA-AD trust environment.


author: Petr Oros <poros@redhat.com> - B.02.18-8
changelog:
  - Proper detect vendor_id/device_id for virtual functions
  - Sync SMBIOS with latest specification
  - Resolves: #1445473


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.4-2.el7
changelog:
  - Resolves: #1461177 ipa-otptoken-import  - XML file is missing PBKDF2
    parameters!
  - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during
    search in cn=ad, cn=trusts,dc=example,dc=com
  - Resolves: #1467887 iommu platform support for ipxe
  - Resolves: #1477178 [ipa-replica-install] - 406 Client Error: Failed to
    validate message: Incorrect number of results (0) searching forpublic key for
    host
  - Resolves: #1478251 IPA WebUI does not work after upgrade from IPA 4.4 to
    4.5
  - Resolves: #1480102 ipa-server-upgrade failes with "This entry already
    exists"
  - Resolves: #1482802 Unable to set ca renewal master on replica
  - Resolves: #1484428 Updating from RHEL 7.3 fails with Server-Cert not found
    (ipa-server-upgrade)
  - Resolves: #1484826 FreeIPA/IdM installations which were upgraded from
    versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
    thus startup of Web UI fails
  - Resolves: #1486283 TypeError in renew_ca_cert prevents from swiching back
    to self-signed CA
  - Resolves: #1469246 Replica install fails to configure IPA-specific
    temporary files/directories
  - Resolves: #1469480 bind package is not automatically updated during
    ipa-server upgrade process
  - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new
    installs only)
  - Resolves: #1477703 IPA upgrade fails for latest ipa package


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-6
changelog:
  - Fix missing deps in -gnome and -bonobo subpkg (#689836).
    gnome-python2-gnome should "Requires: gnome-python2-bonobo"
    gnome-python2-bonobo should "Requires: gnome-python2-canvas"


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-7
changelog:
  - Drop unused/ancient -capplet subpackage definition remains.
  - Add %?_isa to all explicit dependencies on package names.
  - Make pygtk2 dependency arch-specific (#749835).


author: Colin Walters <walters@verbum.org> - 2.28.1-12
changelog:
  - Drop requires on bonobo-activation, since it is the same as libbonobo,
    but that package dropped the provides.


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
  - Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
  - Removed tests which fails due to changes openssl 1.0.1h and later


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1174911
  - Resolves: rhbz#1142191
  - Resolves: rhbz#1142148


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
  - Resolves: rhbz#1258745
  - Resolves: rhbz#1258488
  - Resolves: rhbz#1267563
  - Resolves: rhbz#1293390
  - Resolves: rhbz#1273924
  - Resolves: rhbz#1274368
  - Resolves: rhbz#1291924


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.11-1
changelog:
  - Revert: provide KVM guest count and limit info message (#1014731)
  - add C implementation of reverted patch


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.12-1
changelog:
  - use iw instead of iwconfig and friends (#915343)
  - don't care about rc.local anymore (#1034156)
  - udev-kvm-check: simplify reading of threshold (#1031568)
  - brandbot: read only first line (#1031490)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.13-1
changelog:
  - delete IPX support
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - set shmmax and shmall defaults to match rhel6 values (#1056547)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.14-1
changelog:
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - service: add condrestart to allowed commands (#1069222)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Joe Orton <jorton@redhat.com> - 2.4.1-40.1
changelog:
  - keyutil: use SHA1 as default hash in created certs (#1030470)
  - genkey: default to 2048 bit keysize (#1039896)


author: Joe Orton <jorton@redhat.com> - 2.4.1-42
changelog:
  - genkey: skip cert generation after CSR for OpenSSL (#1039896)
  - keyutil: fix error reporting (#1039896)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-102
changelog:
  - Remove workaround for kernel netlink bug (#1089836).
  - Use only 32-bit instructions in optimized 32-bit POWER functions (#1240796).


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.4-2
changelog:
  - Use newer WebKit
  - Refresh the credentials during startup and network changes
  Resolves: #1174600, #1189888


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1224169, #1223462, #1207799)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-25
changelog:
  - don't fail with error 500 when ticket is expired and Authorization header is
    provided by client (#982521)


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Jaromir Capik <jcapik@redhat.com> - 0.3.0-5
changelog:
  - Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
  - Resolves: rhbz#1127230


author: Jeff Law <law@redhat.com> 0.1.4-2
changelog:
  - Remove commands/directives automatically handled by rpm
  - Add comment on how to build the tarball
  - Change Requires to reference package rather than file
  - Add comments on licensing issues
  - Add autoconf and automake to BuildRequires


author: Jeff Law <law@redhat.com> 0.1.4-3
changelog:
  - Change %define to %global for git hash
  - Remove git hash from version # in changelog
  - Build with -fno-strict-aliasing
  - Fix minor spelling error in description


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-97.el7
changelog:
  - kvm-ide-Check-array-bounds-before-writing-to-io_buffer-C.patch [bz#1243690]
  - kvm-ide-atapi-Fix-START-STOP-UNIT-command-completion.patch [bz#1243690]
  - kvm-ide-Clear-DRQ-after-handling-all-expected-accesses.patch [bz#1243690]
  - Resolves: bz#1243690
    (EMBARGOED CVE-2015-5154 qemu-kvm: qemu: ide: atapi: heap overflow during I/O buffer memory access [rhel-7.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-98.el7
changelog:
  - kvm-block-curl-Don-t-lose-original-error-when-a-connecti.patch [bz#1235812]
  - kvm-vfio-pci-Add-pba_offset-PCI-quirk-for-Chelsio-T5-dev.patch [bz#1244347]
  - kvm-block-Print-its-file-name-if-backing-file-opening-fa.patch [bz#1238639]
  - kvm-block-Propagate-error-in-bdrv_img_create.patch [bz#1238639]
  - kvm-iotests-Add-test-for-non-existing-backing-file.patch [bz#1238639]
  - Resolves: bz#1235812
    (block/curl: Fix generic "Input/output error" on failure)
  - Resolves: bz#1238639
    (qemu-img shows error message for backing file twice)
  - Resolves: bz#1244347
    (Quirk for Chelsio T5 MSI-X PBA)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-99.el7
changelog:
  - kvm-usb-ccid-add-missing-wakeup-calls.patch [bz#1243731]
  - kvm-vpc-Handle-failure-for-potentially-large-allocations.patch [bz#1217349]
  - kvm-block-vpc-prevent-overflow-if-max_table_entries-0x40.patch [bz#1217349]
  - kvm-block-qemu-iotests-add-check-for-multiplication-over.patch [bz#1217349]
  - kvm-virtio-scsi-use-virtqueue_map_sg-when-loading-reques.patch [bz#1249718]
  - kvm-scsi-disk-fix-cmd.mode-field-typo.patch [bz#1249718]
  - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248766]
  - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248766]
  - kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248766]
  - kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248766]
  - Resolves: bz#1217349
    (qemu-img vpc driver segfault)
  - Resolves: bz#1243731
    (smart card emulation doesn't work with USB3 (nec-xhci) controller)
  - Resolves: bz#1248766
    (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-7.2])
  - Resolves: bz#1249718
    (Segfault occurred at Dst VM while completed migration upon ENOSPC)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Martin Sebor <msebor@redhat.com> - 2.17-100
changelog:
  - Prevent tst-rec-dlopen from intermittently failing in parallel
    builds due to a missing makefile dependency (#1225959).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-10
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-11
changelog:
  - Update default CA certificate file path due to recent changes in tog-pegasus
    Resolves: #1320077
  - Fix wbemcli dont accept dot (.) as password character on command line
    Resolves: #1103368
  - Fix bogus date in %changelog


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-13
changelog:
  - Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data [rhel-7.5.z] (cfu)
  - Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-3
changelog:
  - Remove have_bridge_hotkey and need_pygobject3 macros which does no
    longer make sense after F17
  - Add ibus-hangul-dconf-prefix.patch
  - Fix bug 909509 - Hangul Keybaord doesn't be changed in IBusHangul Setup


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-7
changelog:
  - Invoke ibus-setup-hangul with the absolute path.
  - Fix bug 1012732 - Click ibus hangul setup on gnome-shell top bar's
    ibus -> No Response


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-10
changelog:
  - Add ibus-hangul-hangul-toggle.patch
  - Fix bug 1071351 - Cannot switch English input mode and Hangul
    (Korean) input mode by Hangul key


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-22
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015515


author: Parag Nemade <pnemade AT redhat DOT com> - 1.6.4-2
changelog:
  - Resolves:rh#877925 - drop m17n-lib-flt provides
  - Fix bogus date in %changelog
  - Make sure not to attempt to use parallel make as it fails the build


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Jack Magne <jmagne@redhat.com> - 1.1.0-28
changelog:
  - Thanks to: Marcin Juszkiewicz <mjuszkiewicz@redhat.com>
  - Handle all kernel versions
  - Fix gecko version


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Michal Schmidt <mschmidt@redhat.com> - 4.1-1
changelog:
  - Update IMB to 4.1.
  - Update OSUMB to 5.3.
  - Add subpackages for new mpich and mvapich2 versions and variants.
  - Resolves: rhbz961885
  - Resolves: rhbz1093466


author: Michal Schmidt <mschmidt@redhat.com> - 5.4-1
changelog:
  - Update IMB to 2018.0.
  - Update OMB to 5.4.
  - Add builds for openmpi 3 and mvapich 2.3.
  - Build IMB NBC and RMA tests.
  - Build OSUMB collective async tests.
  - Add precise Requires.
  - Resolves: rhbz1358437


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b15
changelog:
  - Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
  - Swap java.security md5sum for 7.2.z version with ECC patch.
  - Resolves: rhbz#1381990


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-4.el7
changelog:
  - kvm-Reenable-Educational-device.patch [bz#1414694]
  - kvm-usb-xhci-Fix-PCI-capability-order.patch [bz#1447874]
  - kvm-block-vxhs.c-Add-support-for-a-new-block-device-type.patch [bz#1265869]
  - kvm-block-vxhs.c-Add-qemu-iotests-for-new-block-device-t.patch [bz#1265869]
  - kvm-qemu-iotests-exclude-vxhs-from-image-creation-via-pr.patch [bz#1265869]
  - kvm-block-vxhs-modularize-VXHS-via-g_module.patch [bz#1265869]
  - kvm-Remove-the-dependencies-to-seavgabios-bin-and-ipxe-r.patch [bz#1449939]
  - Resolves: bz#1265869
    (RFE: Veritas HyperScale VxHS block device support (qemu-kvm-rhev))
  - Resolves: bz#1414694
    (Reenable edu device for kvm-unit-tests support)
  - Resolves: bz#1447874
    (Migration failed from rhel7.2.z->rhel7.4 with "-M rhel7.0.0" and "-device nec-usb-xhci")
  - Resolves: bz#1449939
    (Remove dependency on seavgabios-bin and ipxe-roms-qemu for qemu-kvm-rhev on s390x)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-5.el7
changelog:
  - kvm-blockdev-ignore-aio-native-for-empty-drives.patch [bz#1402645]
  - kvm-dump-Acquire-BQL-around-vm_start-in-dump-thread.patch [bz#1445174]
  - kvm-Downstream-Don-t-disable-SMT-on-POWER9-hosts.patch [bz#1450724]
  - kvm-aio-add-missing-aio_notify-to-aio_enable_external.patch [bz#1446498]
  - kvm-Update-configuration-for-qemu-2.9.patch [bz#1400962]
  - Resolves: bz#1400962
    (Verify configuration coverage for rebased qemu-kvm-rhev)
  - Resolves: bz#1402645
    (Required cache.direct=on when set aio=native)
  - Resolves: bz#1445174
    ([RHEV7.4] [guest memory dump]dump-guest-memory QMP command with "detach" param makes qemu-kvm process aborted)
  - Resolves: bz#1446498
    (Guest freeze after live snapshot with data-plane)
  - Resolves: bz#1450724
    ([Pegas 1.0] qemu package scripts should not disable host multi-threading for POWER9)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-6.el7
changelog:
  - kvm-aarch64-Enable-usb-xhci.patch [bz#1446570]
  - kvm-scsi-Disable-deprecated-implicit-SCSI-HBA-creation-m.patch [bz#971799]
  - kvm-block-vhdx-Make-vhdx_create-always-set-errp.patch [bz#1447551]
  - kvm-block-Add-errp-to-b-lk-drv-_truncate.patch [bz#1447551]
  - kvm-blockdev-use-drained_begin-end-for-qmp_block_resize.patch [bz#1447551]
  - kvm-spapr-Don-t-accidentally-advertise-HTM-support-on-PO.patch [bz#1449007]
  - kvm-target-ppc-Allow-workarounds-for-POWER9-DD1.patch [bz#1443289]
  - kvm-xhci-relax-link-check.patch [bz#1444003]
  - kvm-curl-strengthen-assertion-in-curl_clean_state.patch [bz#1437393]
  - kvm-curl-never-invoke-callbacks-with-s-mutex-held.patch [bz#1437393]
  - kvm-curl-avoid-recursive-locking-of-BDRVCURLState-mutex.patch [bz#1437393]
  - kvm-curl-split-curl_find_state-curl_init_state.patch [bz#1437393]
  - kvm-curl-convert-CURLAIOCB-to-byte-values.patch [bz#1437393]
  - kvm-curl-convert-readv-to-coroutines.patch [bz#1437393]
  - kvm-curl-do-not-do-aio_poll-when-waiting-for-a-free-CURL.patch [bz#1437393]
  - kvm-usb-hub-clear-PORT_STAT_SUSPEND-on-wakeup.patch [bz#1447581]
  - kvm-migration-setup-bi-directional-I-O-channel-for-exec-.patch [bz#1430620]
  - kvm-block-Reuse-bs-as-backing-hd-for-drive-backup-sync-n.patch [bz#1452066]
  - kvm-migration-Fix-non-multiple-of-page-size-migration.patch [bz#1449037]
  - kvm-postcopy-Require-RAMBlocks-that-are-whole-pages.patch [bz#1449037]
  - kvm-hw-virtio-fix-vhost-user-fails-to-startup-when-MQ.patch [bz#1447592]
  - kvm-iommu-Don-t-crash-if-machine-is-not-PC_MACHINE.patch [bz#1451483]
  - kvm-migration-Call-blk_resume_after_migration-for-postco.patch [bz#1452148]
  - kvm-migration-Unify-block-node-activation-error-handling.patch [bz#1452148]
  - kvm-disable-pulseaudio-and-alsa.patch [bz#1452605]
  - kvm-block-An-empty-filename-counts-as-no-filename.patch [bz#1452702]
  - kvm-block-Do-not-unref-bs-file-on-error-in-BD-s-open.patch [bz#1452752]
  - Resolves: bz#1430620
    (TLS encryption migration via exec failed with "TLS handshake failed: The TLS connection was non-properly terminated")
  - Resolves: bz#1437393
    (snapshot created base on the image in https server will hang during booting)
  - Resolves: bz#1443289
    ([Pegas1.0 04/03 nightly build + 4.10.0-7 kernel] qemu+guest fail to apply POWER9 DD1 workarounds)
  - Resolves: bz#1444003
    (USB 3.0 flash drive not accessible on Windows guest)
  - Resolves: bz#1446570
    (enable qemu-xhci USB3 controller device model for the aarch64 target)
  - Resolves: bz#1447551
    (qemu hang when do block_resize guest disk during crystal running)
  - Resolves: bz#1447581
    ([RHEV7.4] [usb-hub] input devices under usb hub don't work on win2016 with xhci)
  - Resolves: bz#1447592
    (vhost-user/reply-ack: Wait for ack even if no request sent (one-time requests))
  - Resolves: bz#1449007
    (Pegas 1.0: Booting pegas guest on pegas host (POWER9 DD1) panics with signal 4 at userspace entry)
  - Resolves: bz#1449037
    (Dst qemu quit when migrate guest with hugepage and total memory is not a multiple of pagesize)
  - Resolves: bz#1451483
    (QEMU crashes with "-machine none -device intel-iommu")
  - Resolves: bz#1452066
    (Fix backing image referencing in drive-backup sync=none)
  - Resolves: bz#1452148
    (Op blockers don't work after postcopy migration)
  - Resolves: bz#1452605
    (disable pulseaudio and alsa support)
  - Resolves: bz#1452702
    (qemu-img aborts on empty filenames)
  - Resolves: bz#1452752
    (Some block drivers incorrectly close their associated file)
  - Resolves: bz#971799
    (qemu should not crash when if=scsi although it's unsupportable device)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-7.el7
changelog:
  - kvm-e1000e-Fix-ICR-Other-causes-clear-logic.patch [bz#1449490]
  - kvm-pc-fwcfg-unbreak-migration-from-qemu-2.5-and-qemu-2..patch [bz#1441394]
  - kvm-disable-linuxboot_dma.bin-option-rom-for-7.3-machine.patch [bz#1441394]
  - kvm-Revert-hw-pci-disable-pci-bridge-s-shpc-by-default.patch [bz#1434706]
  - kvm-qemu-img-wait-for-convert-coroutines-to-complete.patch [bz#1451849]
  - kvm-target-ppc-Show-POWER9-in-cpu-help.patch [bz#1449969]
  - Resolves: bz#1434706
    ([pci-bridge] Hotplug devices to pci-bridge failed)
  - Resolves: bz#1441394
    (fw_cfg.dma_enabled value incorrect in pc-i440fx-7.3.0 compat_props)
  - Resolves: bz#1449490
    ([q35] guest hang after do migration with virtio-scsi-pci.)
  - Resolves: bz#1449969
    ([Pegas1.0] POWER9* cpu model is not listed in  /usr/libexec/qemu-kvm -cpu ?)
  - Resolves: bz#1451849
    (qemu-img convert crashes on error)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-8.el7
changelog:
  - kvm-input-don-t-queue-delay-if-paused.patch [bz#1444326]
  - kvm-block-gluster-glfs_lseek-workaround.patch [bz#1451191]
  - kvm-mirror-Drop-permissions-on-s-target-on-completion.patch [bz#1456456]
  - kvm-stream-fix-crash-in-stream_start-when-block_job_crea.patch [bz#1456424]
  - kvm-qemu-iotests-Test-streaming-with-missing-job-ID.patch [bz#1456424]
  - kvm-monitor-Use-numa_get_node_for_cpu-on-info-numa.patch [bz#1274567]
  - kvm-virtio_net-Bypass-backends-for-MTU-feature-negotiati.patch [bz#1452756]
  - kvm-vhost-user-pass-message-as-a-pointer-to-process_mess.patch [bz#1447592]
  - kvm-virtio-serial-bus-Unset-hotplug-handler-when-unreali.patch [bz#1458782]
  - kvm-gluster-add-support-for-PREALLOC_MODE_FALLOC.patch [bz#1450759]
  - kvm-numa-Allow-setting-NUMA-distance-for-different-NUMA-.patch [bz#1395339]
  - kvm-tests-acpi-extend-cphp-and-memhp-testcase-with-numa-.patch [bz#1395339]
  - kvm-copy-SLIT-test-reference-blobs-into-tests-directory.patch [bz#1395339]
  - Resolves: bz#1274567
    (HMP doesn't reflect the correct numa topology after hot plugging vCPU)
  - Resolves: bz#1395339
    ([Intel 7.4 FEAT] Enable configuration of NUMA distance in QEMU)
  - Resolves: bz#1444326
    (Keyboard inputs are buffered when qemu in stop status)
  - Resolves: bz#1447592
    (vhost-user/reply-ack: Wait for ack even if no request sent (one-time requests))
  - Resolves: bz#1450759
    (Creating fallocated image using qemu-img using gfapi fails)
  - Resolves: bz#1451191
    (qemu-img: block/gluster.c:1307: find_allocation: Assertion `offs >= start' failed.)
  - Resolves: bz#1452756
    (Enable VIRTIO_NET_F_MTU feature in QEMU)
  - Resolves: bz#1456424
    (qemu crash when starting image streaming job fails)
  - Resolves: bz#1456456
    (qemu crashes on job completion during drain)
  - Resolves: bz#1458782
    (QEMU crashes after hot-unplugging virtio-serial device)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-9.el7
changelog:
  - kvm-shutdown-Simplify-shutdown_signal.patch [bz#1418927]
  - kvm-shutdown-Prepare-for-use-of-an-enum-in-reset-shutdow.patch [bz#1418927]
  - kvm-shutdown-Preserve-shutdown-cause-through-replay.patch [bz#1418927]
  - kvm-shutdown-Add-source-information-to-SHUTDOWN-and-RESE.patch [bz#1418927]
  - kvm-shutdown-Expose-bool-cause-in-SHUTDOWN-and-RESET-eve.patch [bz#1418927]
  - kvm-irqchip-trace-changes-on-msi-add-remove.patch [bz#1448813]
  - kvm-msix-trace-control-bit-write-op.patch [bz#1448813]
  - kvm-irqchip-skip-update-msi-when-disabled.patch [bz#1448813]
  - kvm-vhost-propagate-errors-in-vhost_device_iotlb_miss.patch [bz#1451862]
  - kvm-vhost-rework-IOTLB-messaging.patch [bz#1451862]
  - kvm-vhost-user-add-vhost_user-to-hold-the-chr.patch [bz#1451862]
  - kvm-vhost-user-add-slave-req-fd-support.patch [bz#1451862]
  - kvm-spec-vhost-user-spec-Add-IOMMU-support.patch [bz#1451862]
  - kvm-pc-Use-min-x-level-on-compat_props-on-RHEL-machine-t.patch [bz#1454641]
  - kvm-usb-don-t-wakeup-during-coldplug.patch [bz#1452512]
  - kvm-ehci-fix-overflow-in-frame-timer-code.patch [bz#1449609]
  - kvm-ehci-fix-frame-timer-invocation.patch [bz#1449609]
  - Resolves: bz#1418927
    (The lifecycle event for Guest OS Shutdown is not distinguishable from a qemu process that was quit with SIG_TERM)
  - Resolves: bz#1448813
    (qemu crash when shutdown guest with '-device intel-iommu' and '-device vfio-pci')
  - Resolves: bz#1449609
    (qemu coredump when dd on multiple usb-storage devices concurrently in guest)
  - Resolves: bz#1451862
    (IOMMU support in QEMU for Vhost-user backend)
  - Resolves: bz#1452512
    (qemu coredump when add more than 12 usb-storage devices to ehci)
  - Resolves: bz#1454641
    (Windows 10 BSOD when using rhel6.4.0/rhel6.5.0/rhel6.6.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-10.el7
changelog:
  - kvm-Revert-Change-net-socket.c-to-use-socket_-functions-.patch [bz#1451629]
  - kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1447948]
  - kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1447948]
  - kvm-nbd-make-it-thread-safe-fix-qcow2-over-nbd.patch [bz#1454582]
  - kvm-commit-Fix-use-after-free-in-completion.patch [bz#1452048]
  - kvm-qemu-iotests-Test-automatic-commit-job-cancel-on-hot.patch [bz#1452048]
  - kvm-commit-Fix-completion-with-extra-reference.patch [bz#1453169]
  - kvm-qemu-iotests-Allow-starting-new-qemu-after-cleanup.patch [bz#1453169]
  - kvm-qemu-iotests-Test-exiting-qemu-with-running-job.patch [bz#1453169]
  - kvm-virtio-serial-fix-segfault-on-disconnect.patch [bz#1447257]
  - kvm-block-fix-external-snapshot-abort-permission-error.patch [bz#1447184]
  - kvm-xhci-only-update-dequeue-ptr-on-completed-transfers.patch [bz#1451631]
  - kvm-virtio-scsi-Unset-hotplug-handler-when-unrealize.patch [bz#1449031]
  - Resolves: bz#1447184
    (qemu abort when live snapshot for multiple block device simultaneously with transaction and one is to a non-exist path)
  - Resolves: bz#1447257
    (QEMU coredump while doing hexdump test onto virtio serial ports)
  - Resolves: bz#1447948
    (qemu-nbd segment fault when nmap sweeps its port [rhel-7.4])
  - Resolves: bz#1449031
    (qemu core dump when hot-unplug/hot-plug scsi controller in turns)
  - Resolves: bz#1451629
    (TCP tunnel network: the guest with interface type=client can not start)
  - Resolves: bz#1451631
    (Keyboard does not work after migration)
  - Resolves: bz#1452048
    (qemu abort when hot unplug block device during live commit)
  - Resolves: bz#1453169
    (qemu aborts if quit during live commit process)
  - Resolves: bz#1454582
    (Qemu crashes when start guest with qcow2 nbd image)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.0-11.el7
changelog:
  - kvm-Enable-USB_CONFIG-for-aarch64.patch [bz#1460010]
  - Resolves: bz#1460010
    (USB HID (keyboard and tablet) missing [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-12.el7
changelog:
  - kvm-pseries-Correct-panic-behaviour-for-pseries-machine-.patch [bz#1458705]
  - kvm-virtio-scsi-Reject-scsi-cd-if-data-plane-enabled-RHE.patch [bz#1378816]
  - kvm-block-rbd-enable-filename-option-and-parsing.patch [bz#1457088]
  - kvm-block-iscsi-enable-filename-option-and-parsing.patch [bz#1457088]
  - kvm-nbd-fix-NBD-over-TLS-bz1461827.patch [bz#1461827]
  - kvm-monitor-add-handle_hmp_command-trace-event.patch [bz#1457740]
  - kvm-monitor-resurrect-handle_qmp_command-trace-event.patch [bz#1457740]
  - kvm-hw-pcie-fix-the-generic-pcie-root-port-to-support-mi.patch [bz#1455150]
  - Resolves: bz#1378816
    (Core dump when use "data-plane" and execute change cd)
  - Resolves: bz#1455150
    (Unable to detach virtio disk from pcie-root-port after migration)
  - Resolves: bz#1457088
    (rbd/iscsi: json: pseudo-protocol format is incompatible with 7.3)
  - Resolves: bz#1457740
    ([Tracing] compling qemu-kvm failed through systemtap)
  - Resolves: bz#1458705
    (pvdump: QMP reports "GUEST_PANICKED" event but HMP still shows VM running after guest crashed)
  - Resolves: bz#1461827
    (QEMU hangs in aio wait when trying to access NBD volume over TLS)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-14.el7
changelog:
  - kvm-sockets-ensure-we-can-bind-to-both-ipv4-ipv6-separat.patch [bz#1446003]
  - Resolves: bz#1446003
    (vnc cannot find a free port to use)


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Kamil Dudka <kdudka@redhat.com> - 2.8.7-10
changelog:
  - sync the upstream tarball with the current upstream version
  - fix specfile issues reported by the fedora-review script


author: Kamil Dudka <kdudka@redhat.com> - 2.8.8-0.1.dev15
changelog:
  - update to the latest upstream pre-release
  - drop applied patches
  - drop lynx-2.8.6-backgrcolor.patch (#908449)


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.03-20
changelog:
  - Remove BuildRoot definition.
  - Remove BuildRoot cleaning.
  - Replace PERL_INSTALL_ROOT with DESTDIR.
  - Remove cleaning empty directories.
  - Remove %defattr.
  - Do not export private library (Leak.so()).


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Milind Changire <mchangir@redhat.com> - 3.8.4-14
changelog:
  - fixes bugs bz#1408576 bz#1408705 bz#1409563 bz#1411270 bz#1413513 
    bz#1414247 bz#1414663 bz#1415583 bz#1417955 bz#1418011


author: Milind Changire <mchangir@redhat.com> - 3.8.4-15
changelog:
  - fixes bugs bz#1205162 bz#1315544 bz#1403180 bz#1409135 bz#1415101 
    bz#1417177 bz#1418901 bz#1420635 bz#1422431


author: Milind Changire <mchangir@redhat.com> - 3.8.4-18.2
changelog:
  - fixes bugs bz#1439731 bz#1439753 bz#1440162 bz#1445591 bz#1445593 
    bz#1447186 bz#1451200 bz#1451673


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Peter Rajnoha <prajnoha@redhat.com> - 7:2.02.115-3.el7_1.1
changelog:
  - Fix lvm2app lvm_lv_get_property return value for fields with info/status ioctl.
  - Fix lvm2app regression in lvm_lv_get_attr causing unknown values (2.02.115).


author: Aristeu Rozanski <aris@redhat.com> 0.4.1-8.el7
changelog:
  - Revert patch in 0.4.1-7.el7, replaced by a better patch
  - Fix sizeof() usage on pointer [1035742]
  - Added macro to build the package with stack protector [1092558]
  - Handle failures of snprintf() [1035741]
  - Fix range checking on signed char variables [1035746]
  - Added aarch64 as architecture [1070973]
  - Start recording by default [1117366] [1117367]


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Adam Jackson <ajax@redhat.com> 1.8.1-4
changelog:
  - --enable-xkb for weston
  - --disable-xprint instead of manual rm
  - BuildRequire an updated xcb-proto for XKB and DRI2 fixes


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-5
changelog:
  - conf: fix migratable XML for graphics if socket is generated based on config (rhbz#1511407)
  - storage: Extract error reporting for broken chains (rhbz#1509110)
  - qemu: domain: Refactor control flow in qemuDomainDetermineDiskChain (rhbz#1509110)
  - qemu: process: Move handling of non-backing files into qemuDomainDetermineDiskChain (rhbz#1509110)
  - qemu: domain: Fix backing store terminator for non-backing local files (rhbz#1509110)
  - numa: describe siblings distances within cells (rhbz#1454889)
  - xenconfig: add domxml conversions for xen-xl (rhbz#1454889)
  - virDomainNumaGetNodeDistance: Fix input arguments validation (rhbz#1454889)
  - numa: Introduce virDomainNumaNodeDistanceIsUsingDefaults (rhbz#1454889)
  - qemu_capabilities: Introcude QEMU_CAPS_NUMA_DIST (rhbz#1454889)
  - qemu: Support setting NUMA distances (rhbz#1454889)
  - conf: Fix memory leak for distances in virDomainNumaFree (rhbz#1454889)
  - virDomainDiskSourceNetworkParse: Don't leak @tlsCfg or @haveTLS (rhbz#1519759)
  - virDomainDiskBackingStoreParse: Don't leak @idx (rhbz#1519759)
  - qemuStateInitialize: Don't leak @memoryBackingPath (rhbz#1519759)
  - Introduce virDomainDeviceAliasIsUserAlias (rhbz#1518148)
  - qemu: prefer the PCI bus alias from status XML (rhbz#1518148)
  - virQEMUCapsHasPCIMultiBus: use def->os.arch (rhbz#1518148)
  - virQEMUCapsHasPCIMultiBus: assume true if we have no version information (rhbz#1518148)
  - qemu: add vmcoreinfo support (rhbz#1395248)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-6
changelog:
  - security: introduce virSecurityManager(Set|Restore)ChardevLabel (rhbz#1465833)
  - qemu: fix security labeling for attach/detach of char devices (rhbz#1465833)
  - nwfilter: don't crash listing filters in unprivileged daemon (rhbz#1522879)
  - docs: domain: Fix documentation of the 'snapshot' attribute for <disk> (rhbz#1523070)
  - storage: Don't dereference driver object if virStorageSource is not initialized (rhbz#1522682)
  - qemu: blockjob: Reset disk source index after pivot (rhbz#1519745)
  - qemu: Separate fetching CPU definitions from filling qemuCaps (rhbz#1521202)
  - qemu: Make sure host-model uses CPU model supported by QEMU (rhbz#1521202)
  - qemu: Avoid comparing size_t with -1 (rhbz#1521202)
  - migration.html: Clarify configuration file handling docs (rhbz#1514930)


author: Julian Sikorski <belegdol@fedoraproject.org> - 11.1.0-1
changelog:
  - Updated to 11.1.0
  - Obsoleted zsh subpackage (upstream ticket #3078)
  - mktap is gone (upstream ticket #5293)
  - Dropped obsolete Group, Buildroot, %clean and %defattr


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1170217)
  - mod_proxy: support Unix Domain Sockets (#1170286)


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-3
changelog:
  - Avoid hang when shutting down unmanaged remote node connections
  - Get correct node name when crm_node or crm_attribute is run on remote node
  - Ignore action when configured as a stonith device parameter
  - Include recent upstream bug fixes
  - Resolves: rhbz#1388489
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1417936
  - Resolves: rhbz#1421700


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-4
changelog:
  - Add support for container bundles
  - Treat systemd reloading state as monitor success
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1436696


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - in %post, attempt to rewrite any instances of "map group uniqueMember ..."
    to be "map group member ..." in nslcd.conf, as the attribute name changed
    in 0.8.4 (via freeipa ticket #3589)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.13-4
changelog:
  - compile nslcd/log.c with -fPIC instead of the current hardened-build default
    of -fPIE, which doesn't seem to avoid relocations for its thread-local
    variables on s390x (#1002834)


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-6
changelog:
  - Change the error messages the tests expect to those printed on RH based
    systems
  - Resolves: rhbz#1044482


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: John Kacur <jkacur@redhat.com> - 2.2.1-2
changelog:
  - Various fixes for problems discovered by rpmlint
  - Update the address of FSF in various files
  - Install documentation and non-script python files at mode 644


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-26.el7_2.1
changelog:
  - Do not compile testing support which caused scanning of device-mapper devices.
  - Fix missing cleanup of dmraid-activation.service symlink on package removal.


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Richard Hughes <rhughes@redhat.com> - 3.22.7-3
changelog:
  - Never show 'Startup Applications' in the search results
  - Note: the other issue shown in the bug is likely a dupe of #1445651
  - Resolves: #1481145


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Robbie Harwood <rharwood@redhat.com> 0.6.2-1
changelog:
  - Rebase to latest version since we have krb5-1.15
  - Resolves: #1379836
  - Resolves: #1344518
  - Resolves: #1366782
  - Resolves: #1379005
  - Resolves: #1379482
  - Resolves: #1379616
  - Resolves: #1380490
  - Resolves: #1378600
  - Resolves: #1285012
  - Resolves: #1333813


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.13.1-54.rhel75.gitce62987
changelog:
  - built docker @projectatomic/docker-1.13.1-rhel commit ce62987
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 8647404
  - built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
  - built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
  - built docker-init commit 0effd37
  - built libnetwork commit 1ba8194


author: Andrew Price <anprice@redhat.com> - 0.0-1.20130117git26d4e95
changelog:
  - Further improve the versioning
  - Preserve timestamp on man page
  - Remove BuildRoot, the clean and defattr sections and don't clean buildroot
  - Install to DESTDIR
  - Update Source and add a comment on how the tarball was generated
  - Use _smp_mflags in build
  - Thanks to Eduardo Echeverria for reviewing the package


author: Andrew Price <anprice@redhat.com> - 1.0-4
changelog:
  - Fix a label overflow in plot_io
    Resolves: rhbz#1004820
  - Add bounds checking in find_step
    Resolves: rhbz#1004882
  - Fix processing of trace filenames containing spaces
    Resolves: rhbz#1004865


author: Andrew Price <anprice@redhat.com> - 1.0-6
changelog:
  - Add Requires: librsvg2-tools to enable video generation
  - Merge trace dumping functions into one
  - Check program exit code properly
  - Fix up directory trace processing
    Resolves: rhbz#1004865


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-12
changelog:
  - Fix hotplugging of block device-backed usb disks (rhbz#1175668)
  - qemu: Create memory-backend-{ram, file} iff needed (rhbz#1175397)
  - conf: Don't format actual network definition in migratable XML (rhbz#1177194)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-13
changelog:
  - conf: Fix memory leak when parsing invalid network XML (rhbz#1180136)
  - qxl: change the default value for vgamem_mb to 16 MiB (rhbz#1181052)
  - qemuxml2argvtest: Fix test after change of qxl vgamem_mb default (rhbz#1181052)
  - conf: fix crash when hotplug a channel chr device with no target (rhbz#1181408)
  - qemu: forbid second blockcommit during active commit (rhbz#1135339)
  - qemu_monitor: introduce new function to get QOM path (rhbz#1180574)
  - qemu_process: detect updated video ram size values from QEMU (rhbz#1180574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-14
changelog:
  - virNetworkDefUpdateIPDHCPHost: Don't crash when updating network (rhbz#1182486)
  - Format CPU features even for host-model (rhbz#1182448)
  - util: Add function virCgroupHasEmptyTasks (rhbz#1161540)
  - util: Add virNumaGetHostNodeset (rhbz#1161540)
  - qemu: Remove unnecessary qemuSetupCgroupPostInit function (rhbz#1161540)
  - qemu: Save numad advice into qemuDomainObjPrivate (rhbz#1161540)
  - qemu: Leave cpuset.mems in parent cgroup alone (rhbz#1161540)
  - qemu: Fix hotplugging cpus with strict memory pinning (rhbz#1161540)
  - util: Fix possible NULL dereference (rhbz#1161540)
  - qemu_driver: fix setting vcpus for offline domain (rhbz#1161540)
  - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs (CVE-2014-8136)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image (CVE-2015-0236)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots (CVE-2015-0236)
  - Check for domain liveness in qemuDomainObjExitMonitor (rhbz#1161024)
  - Mark the domain as active in qemuhotplugtest (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemuDomainHotplugVcpus (rhbz#1161024)
  - Fix vmdef usage while in monitor in BlockStat* APIs (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemu process (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device detach (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device attach (rhbz#1161024)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16
changelog:
  - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)
  - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.1
changelog:
  - qemuxml2argvtest: Fake response from numad (rhbz#1194982)
  - qemuBuildNumaArgStr: Use memory-backend-ram more wisely (rhbz#1194982)
  - util: storage: Fix parsing of nbd:// URI without path (rhbz#1195156)
  - Split qemuDomainChrInsert into two parts (rhbz#1195155)
  - hotplug: only add a chardev to vmdef after monitor call (rhbz#1195155)
  - blockjob: shuffle block rebase code (rhbz#1196066)
  - blockcopy: allow block device destination (rhbz#1196066)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.2
changelog:
  - util: storagefile: Don't crash on gluster URIs without path (rhbz#1198720)
  - qemuProcessHandleBlockJob: Set disk->mirrorState more often (rhbz#1202719)
  - qemuProcessHandleBlockJob: Take status into account (rhbz#1202719)
  - qemu: process: Export qemuProcessFindDomainDiskByAlias (rhbz#1202719)
  - qemu: event: Don't fiddle with disk backing trees without a job (rhbz#1202719)
  - qemu: Disallow concurrent block jobs on a single disk (rhbz#1202719)
  - qemu: block-commit: Mark disk in block jobs only on successful command (rhbz#1202719)
  - qemu: read backing chain names from qemu (rhbz#1203119)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.3
changelog:
  - qemu: processBlockJob: Don't unlock @vm twice (rhbz#1208021)
  - qemu: Extract internals of processBlockJobEvent into a helper (rhbz#1208021)
  - qemu: blockjob: Synchronously update backing chain in XML on ABORT/PIVOT (rhbz#1208021)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.4
changelog:
  - qemu: fix cannot set graphic passwd via qemuDomainSaveImageDefineXML (rhbz#1255859)
  - qemu: Use correct flags for ABI stability check in SaveImageUpdateDef (rhbz#1255859)
  - Really fix XML formatting flags in SaveImageUpdateDef (rhbz#1255859)


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
  - Add syncrepl_refreshdone() method to SyncreplConsumer class.
    Need by FreeIPA, subsequently accepted upstream.
  - Resolves: rhbz#1122495


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-31
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - fix get_nfs_info() probe.
    - fix portmap lookup.
  - bz995979 - RFE: feature to dump automount maps in native file format
    - update dumpmaps patch with latest changes from QE testing.
  - Resolves: rhbz#1011909 rhbz#995979


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-32
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - only probe specific nfs version if requested.
  - Related: rhbz#1011909


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-33
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - regenerate configure due to missing function.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-34
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix revision in spec file.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix ipv6 libtirpc getport function.
  - Related: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1030705 - Default unmount is in 10 seconds, man page says 10 minutes
    - improve timeout option description.
  - Related: rhbz#1030705


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-37
changelog:
  - bz1035977 - with IPv6 address automount fail with "hostname lookup failed"
    - fix ipv6 link local address handling.
  - Resolves: rhbz#1035977


author: Phil Sutter <psutter@redhat.com> [3.10.0-78.el7]
changelog:
  - ip-address: Support filtering by slave type, too (Phil Sutter) [1375434]
  - tc: don't accept qdisc 'handle' greater than ffff (Davide Caratti) [1375393]
  - macsec: show usage even if the module is not available (Timothy Redaelli) [1367071]
  - libgenl: introduce genl_init_handle (Timothy Redaelli) [1367071]
  - tc: flower: Fix parsing ip address (Phil Sutter) [1422629]
  - tc: flower: support masked ICMP code and type match (Phil Sutter) [1422629]
  - tc: flower: provide generic masked u8 print helper (Phil Sutter) [1422629]
  - tc: flower: provide generic masked u8 parser helper (Phil Sutter) [1422629]
  - tc: flower: Update documentation to indicate ARP takes IPv4 prefixes (Phil Sutter) [1422629]
  - tc: flower: use correct type when calling flower_icmp_attr_type (Phil Sutter) [1422629]
  - f_flower: don't set TCA_FLOWER_KEY_ETH_TYPE for "protocol all" (Phil Sutter) [1422629]
  - tc: flower: Refactor matching flags to be more user friendly (Phil Sutter) [1422629]
  - tc: flower: Support matching ARP (Phil Sutter) [1422629]
  - kernel headers update (Phil Sutter) [1422629]
  - tc: flower: Fix incorrect error msg about eth type (Phil Sutter) [1422629]
  - tc: flower: Add missing err check when parsing flower options (Phil Sutter) [1422629]
  - tc: flower: Fix flower output for src and dst ports (Phil Sutter) [1422629]
  - tc: flower: Update dest UDP port documentation (Phil Sutter) [1422629]
  - tc: flower: support matching flags (Phil Sutter) [1422629]
  - tc/cls_flower: Add to the usage encapsulation dest UDP port (Phil Sutter) [1422629]
  - tc: flower: Allow *_mac options to accept a mask (Phil Sutter) [1422629]
  - tc: flower: document that *_ip parameters take a PREFIX as an argument. (Phil Sutter) [1422629]
  - tc: flower: Fix typo and style in flower man page (Phil Sutter) [1422629]
  - tc/cls_flower: Add dest UDP port to tunnel params (Phil Sutter) [1422629]
  - tc: flower: support matching on ICMP type and code (Phil Sutter) [1422629]
  - tc: flower: introduce enum flower_endpoint (Phil Sutter) [1422629]
  - tc: flower: make use of flower_port_attr_type() safe and silent (Phil Sutter) [1422629]
  - tc: flower: correct name of ip_proto parameter to flower_parse_port() (Phil Sutter) [1422629]
  - tc: flower: document SCTP ip_proto (Phil Sutter) [1422629]
  - tc: flower: remove references to eth_type in manpage (Phil Sutter) [1422629]
  - tc/cls_flower: Classify packet in ip tunnels (Phil Sutter) [1422629]
  - libnetlink: Introduce rta_getattr_be*() (Phil Sutter) [1422629]
  - tc: flower: Support matching on SCTP ports (Phil Sutter) [1422629]
  - tc: flower: Fix usage message (Phil Sutter) [1422629]
  - tc: flower checkpatch cleanups (Phil Sutter) [1422629]
  - tc: flower: Introduce vlan support (Phil Sutter) [1422629]
  - tc: flower: Add skip_{hw|sw} support (Phil Sutter) [1422629]
  - utils: add get_be{16, 32, 64}, use them where possible (Phil Sutter) [1422629]
  - lib/utils: introduce rt_addr_n2a_rta() (Phil Sutter) [1422629]
  - utils: make rt_addr_n2a() non-reentrant by default (Phil Sutter) [1422629]
  - make format_host non-reentrant by default (Phil Sutter) [1422629]
  - tc: flower no need to specify the ethertype (Phil Sutter) [1422629]
  - ip6tunnel: print local/remote addresses like iptunnel does (Phil Sutter) [1422629]
  - tc: ship filter man pages and refer to them in tc.8 (Phil Sutter) [1422629]
  - tc: add a man page for flower filter (Phil Sutter) [1422629]
  - tc: improve filter help texts a bit (Phil Sutter) [1422629]
  - tc: add support for Flower classifier (Phil Sutter) [1422629]
  - ip: make -resolve addr to print names rather than addresses (Phil Sutter) [1422629]


author: Phil Sutter <psutter@redhat.com> [3.10.0-80.el7]
changelog:
  - tc: m_xt: Drop needless parentheses from #if checks (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault with iptables-1.6.0 (Phil Sutter) [1326726]
  - m_xt: whitespace cleanup (Phil Sutter) [1326726]
  - tc: m_xt: Introduce get_xtables_target_opts() (Phil Sutter) [1326726]
  - tc: m_xt: Simplify argc adjusting in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of iargc variable in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of rargc in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Drop unused variable fw in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of one indentation level in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Fix indenting (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault when adding multiple actions at once (Phil Sutter) [1326726]
  - tc: m_xt: Prevent segfault with standard targets (Phil Sutter) [1326726]
  - man: update doc after support of ESN and anti-replay window (Phil Sutter) [1425059]
  - xfrm: add support of ESN and anti-replay window (Phil Sutter) [1425059]


author: Phil Sutter <psutter@redhat.com> [3.10.0-81.el7]
changelog:
  - man: ip-link: Specify min/max values for bridge slave priority and cost (Phil Sutter) [1374360]
  - man: ip-link.8: document bridge options (Phil Sutter) [1373869]


author: Ivan Vecera <ivecera@redhat.com> [3.10.0-84.el7]
changelog:
  - tc: Add support for the matchall traffic classifier. (Ivan Vecera) [1435624]
  - tc: man: Add man entry for the matchall classifier. (Ivan Vecera) [1435624]
  - tc: add missing limits.h header (Ivan Vecera) [1435624]
  - tc: man: matchall: Fix example indentation (Ivan Vecera) [1435624]
  - tc: matchall: Print skip flags when dumping a filter (Ivan Vecera) [1435624]
  - tc, clsact: add clsact frontend (Ivan Vecera) [1435624]


author: Eric Garver <egarver@redhat.com> [3.10.0-86.el7]
changelog:
  - Revert "ip-route man: add usage and description for lwtunnel encap attributes" (Eric Garver) [1459975]
  - Revert "lwtunnel: implement support for ip6 encap" (Eric Garver) [1459975]
  - Revert "lwtunnel: fix argument parsing" (Eric Garver) [1459975]
  - Revert "lwtunnel: Add encapsulation support to ip route" (Eric Garver) [1459975]


author: Sabrina Dubroca <sdubroca@redhat.com> [3.10.0-87.el7]
changelog:
  - devlink: Add e-switch support (Sabrina Dubroca) [1459772]
  - devlink: whitespace cleanup (Sabrina Dubroca) [1459772]
  - devlink: Convert conditional in dl_argv_handle_port() to switch() (Sabrina Dubroca) [1459772]
  - devlink: write usage help messages to stderr (Sabrina Dubroca) [1459772]
  - devlink: Add usage help for eswitch subcommand (Sabrina Dubroca) [1459772]
  - devlink: Call dl_free in early exit case (Sabrina Dubroca) [1459772]


author: Michal Ruprich <mruprich@redhat.com> - 3.1.7-1
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding latest version before including iperf3 in RHEL-7


author: Michal Ruprich - 3.1.7-2
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding requires to spec file for devel package


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-8
changelog:
  - Update fontconfig patch to apply issue found by upstream
  - Update fontconfig patch to apply issue with missing afm fonts (#896182)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-10
changelog:
  - Use stix fonts avoid problems with missing cm fonts (#908717)
  - Correct type mismatch in python3 font_manager (#912843, #928326)


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.7-3
changelog:
  - rhel: Add info on 6.5 and 7.0 (#1015055).
  - install-script,rhel: Fix for 'Server' & 7.0 (#1033007).


author: Ray Strode <rstrode@redhat.com> - 3.22.3-14
changelog:
  - fix unlock after upgrade
    Related: #1448786
  - switch from setup to autosetup -S git for easier patch maintenance


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-20
changelog:
  - Don't start jobs while cancelling others (bug #1233002, STR #4648).
  - Fix slow resume of jobs after restart (bug #1233006, STR #4646).
  - Fixes for post-install scriptlet (bug #1235035).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-23
changelog:
  - 1257051 - cups-lpd man page incomplete
  - 1275790 - spec file includes triggers with overlapping version intervals
  - 1259770 - permission changed after writing to /etc/cups/subscriptions.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-25
changelog:
  - 1297035 - gnome-settings-daemon leaks file descriptors
  - 1257751 - Email notifications ("lp -m") for printer classes don't work


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - update to 1.49
    - fixed problem where on some platforms test t/local/07_tcpecho.t would bail
      out if it could not bind port 1212; it now tries a number of ports to bind
      to until successful
    - improvements to unsigned casting
    - improvements to Net::SSLeay::read to make it easier to use with
      non-blocking IO: it modifies Net::SSLeay::read() to return the result from
      SSL_read() as the second return value, if Net::SSLeay::read() is called in
      list context (its behavior should be unchanged if called in scalar or void
      context)
    - fixed a problem where t/local/kwalitee.t fails with
      Module::CPANTS::Analyse 0.86
    - fixed a number of typos
    - fixed a compiler warning from Compiling with gcc-4.4 and -Wall
    - Fixed problems with get_https4: documentation was wrong, $header_ref was
      not correctly set and $server_cert was not returned
    - fixed a problem that could cause a Perl exception about no blength method
      on undef (CPAN RT#79309)
    - added documentation about how to mitigate various SSL/TLS vulnerabilities
    - SSL_MODE_* are now available as constants
  - drop upstreamed pod encoding patch


author: Paul Howarth <paul@city-fan.org> - 1.50-1
changelog:
  - update to 1.50
    - fixed a problem where t/handle/external/50_external.t would crash if any of
      the test sites were not contactable
    - now builds on VMS, added README.VMS
    - fixed a few compiler warnings in SSLeay.xs; most of them are just
      signed/unsigned pointer mismatches but there is one that actually fixes
      returning what would be an arbitrary value off the stack from
      get_my_thread_id if it happened to be called in a non-threaded build
    - added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type,
      SSL_CTX_set_tlsext_servername_callback for server side Server Name
      Indication (SNI) support
    - fixed a problem with C++ comments preventing builds on AIX and HPUX
    - perdition.org not available for tests, changed to www.open.com.au
    - added SSL_FIPS_mode_set
    - improvements to test suite so it succeeds with and without FIPS mode
      enabled
    - added documentation, warning not to pass UTF-8 data in the content
      argument to post_https


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11
changelog:
  - Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
  - Resolves: rhbz#1593737


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Tim Waugh <twaugh@redhat.com> 2.7-1
changelog:
  - 2.7.  No longer need sigsegv, get-arg, CVE-2010-4651,
    backup-if-mismatch or coverity-leak patches.


author: Peter Jones <pjones@redhat.com> - 9-6
changelog:
  - Rebuild to make some dependencies versioned, in order to make TPS's really
    broken builder setup work.
    Related: rhbz#1380825


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Rex Dieter <rdieter@fedoraproject.org> - 0.0.4-2
changelog:
  - update summary/description/Source_url
  - %files: track soname
  - cleaner cmake-fu
  - upstream noexecstack patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.0.4-3
changelog:
  - require the main package with exact version-release in -examples
  - remove explicit Requires: qt4-devel pkgconfig from -devel, now autodetected


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
  - Add depenency on python-setuptools, fixes RHBZ#1459947
  - Fix parsing of long OIDs, fixes RHBZ#1455755


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
  - Compile with -fno-strict-aliasing
  - Resolves: rhbz#1174556
  - Update translations
  - Resolves: rhbz#1223643


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
  - don't index fuse.glusterfs filesystems (#1331870)
  - don't index files on ceph filesystem (#1333152)
  - update link to upstream repository (#1502361)


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-23
changelog:
  - Update translation files and remove empty ones (#1375915)
  - sepolicy: Fix sepolicy manpage (#1509383)
  - semanage/seobject: Fix moduleRecords.modify() (#1408331)
  - semodule: Improve man page and unify it with --help (#1320565)
  - setfiles: Improve description of -d switch (#1271327)
  - sepolgen: Try to translate SELinux contexts to raw (#1356149)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-24
changelog:
  - Stop rejecting SCTP and DCCP in sepolicy.info
  - semanage: Replace bare except with specific one (#1598444)
  - semanage: Fix logger class definition (#1598444)
  - semanage: Stop rejecting aliases in semanage commands (#1544793)
  - sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
  - semanage: Stop logging loginRecords changes (#1294663)
  - Use file_contexts.local in fixfiles restore (#1559808)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-6
changelog:
  - Do not restart service after unclean exit code
  - Do not listen all if invalid interface is provided
  - Resolves: #1546043, #1580577


author: Lukas Nykryn <lnykryn@redhat.com> - 219-58
changelog:
  - tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
  - timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
  - doc: fix links to binfmt_misc kernel documentation (#1572244)
  - man/udevadm: remove superfluous --version from subcommand (#1553076)
  - man/udevadm: correctly show the short version of --exit (#1552712)
  - core/timer: downgrade message about random time addition (#5229) (#1587906)
  - fd-util: add new acquire_data_fd() API helper (#1446095)
  - systemd-analyze: make dump work for large # of units (#1446095)
  - use max. message size allowed by DBus spec (#8936) (#1446095)
  - cryptsetup: support LUKS2 on-disk format (#1573838)
  - units: don't put udev to its own mount namespace with slave propagation (#1432211)
  - rules: disable support for Lenovo IR cameras (#1540418)
  - core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
  - core: fix confusing logging of instantaneous jobs (#1506256)
  - core: correct return value from reload methods (#1506256)
  - core: always try harder to get unit status message format string (#1506256)
  - core: unit_get_status_message_format() never returns NULL (#1506256)
  - core: try harder to get job completion messages too (#1506256)
  - core: remove generic job completion messages from unit vtables (#1506256)
  - core: do not log done failed-condition jobs as if unit started (#1506256)
  - core: log completion of remaining job types (#1506256)
  - core: adjust job completion message log levels (#1506256)
  - mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
  - rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)
  - journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
  - tmpfiles: use safe_glob() (#1436004)
  - core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-59
changelog:
  - man: correct the meaning of TimeoutStopSec= (#1305509)
  - rules: mark hotplugged memory as movable (#1563532)
  - udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
  - rules: disable support for Dell IR cameras (#1591316)
  - rpm: fix 
  if [ $1 -eq 1 ] ; then 
                  systemctl preset  >/dev/null 2>&1 || : 
  fi 
  () macro. (#1582383)
  - rpm: remove confusing --user before --global (#1582383)
  - automount: handle state changes of the corresponding mount unit correctly (#1596241)
  - man: document that SIGCONT always follows SIGTERM (#1601794)
  - rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-60
changelog:
  - Revert "rules: mark hotplugged memory as movable" (#1614686)
  - rules: implement new memory hotplug policy (#1614686)
  - Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62
changelog:
  - cryptsetup-generator: introduce basic keydev support (#1619743)
  - cryptsetup-generator: don't return error if target directory already exists (#1619743)
  - cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
  - Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-3
changelog:
  - Mark stack trace with remote paths as not-reportable
  - Do not provide own reporting workflows
  - Code optimization
  - Do not report exception caught by native functions
  - Use the last frame class path for executable
  - Gracefully handle JVMTI errors
  - Add an abstract to README
  - Add support for journald and syslog
  - Make log output disabled by default
  - Add support for changing log directory
  - Fix a race condition causing a crash of JVM
  - Related: #1051198
  - Resolves: #1051483, #1054720, #1054737, #1055581


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-6
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Add test results for Linux-aarch64
  - Resolves: #1044756, #1063322


author: Jarod Wilson <jarod@redhat.com> - 2.2-1.5
changelog:
  - Update mvapich23 (TrueScale) bits to 2.3 release
  - Fix libmpi.a being built w/o -fPIC
  - Resolves: #1625672


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.1-1
changelog:
  - Update to 3.28.1
  - Rebased downstream patches
  - Revert to using Python 2 and Tracker 1.0
  - Resolves: #1568171


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Rebased downstream patches
  - Fix crash on right-click on local collection
    Resolves: #1611565


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Michal Privoznik <mprivozn@redhat.com> - 0.0.3-5
changelog:
  - Rebuild for fixed net-snmp (libvirt-snmp BZ: 1064346 net-snmp BZ: 1064437)
  - Fix day name in the changelog (Feb 2 2011 was Wed not Thu)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-4
changelog:
  - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
  - qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
  - qemu: Fix setting global_period cputune element (rhbz#1600427)
  - tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
  - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
  - qemu: command: Move graphics iteration to its own function (rhbz#1475770)
  - qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
  - conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
  - conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
  - qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
  - tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
  - tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
  - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
  - qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
  - qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
  - qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
  - conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
  - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
  - conf: Introduce new <hostdev> attribute 'display' (rhbz#1475770)
  - qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
  - docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
  - conf: Introduce new video type 'none' (rhbz#1475770)
  - virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
  - tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
  - src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-5
changelog:
  - esx storage: Fix typo lsilogic -> lsiLogic (rhbz#1571759)
  - networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
  - nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
  - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
  - qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
  - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
  - examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-6
changelog:
  - qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
  - conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-7
changelog:
  - qemu_migration: Avoid writing to freed memory (rhbz#1593137)
  - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
  - tests: rename hugepages to hugepages-default (rhbz#1591235)
  - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
  - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
  - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
  - tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
  - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
  - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
  - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
  - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
  - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
  - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
  - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
  - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
  - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
  - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
  - tests: introduce hugepages-nodeset (rhbz#1591235)
  - conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
  - conf: Move hugepages validation out of XML parser (rhbz#1591235)
  - conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
  - tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
  - qemu: Fix probing of AMD SEV support (rhbz#1612009)
  - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-8
changelog:
  - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
  - access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
  - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-9
changelog:
  - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
  - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
  - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.1
changelog:
  - security: dac: also label listen UNIX sockets (rhbz#1635228)
  - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
  - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.2
changelog:
  - virfile: fix cast-align error (rhbz#1635705)
  - virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
  - virfiletst: Test virFileIsSharedFS (rhbz#1635705)
  - virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
  - virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.3
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
  - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
  - qemu: Report more appropriate running reasons (rhbz#1634759)
  - qemu: Pass running reason to RESUME event handler (rhbz#1634759)
  - qemu: Map running reason to resume event detail (rhbz#1634759)
  - qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
  - qemu: Don't ignore resume events (rhbz#1634759)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-107.el7a]
changelog:
  - [tools] power: cpupower : Fix header name to read idle state name (Steve Best) [1619598]
  - [arm64] kpti: Use early_param for kpti= command-line option (Xiaojun Tan) [1611957]
  - [powerpc] eeh: avoid misleading message "eeh: no capable adapters found" (Steve Best) [1619377]
  - [s390] uprobes: implement arch_uretprobe_is_alive() (Steve Best) [1615977]
  - [powerpc] topology: Get topology for shared processors at boot (Steve Best) [1620038]
  - [powerpc] fadump: cleanup crash memory ranges support (Steve Best) [1622084]
  - [powerpc] fadump: merge adjacent memory ranges to reduce PT_LOAD segements (Steve Best) [1622084]
  - [powerpc] fadump: handle crash memory ranges array index overflow (Steve Best) [1622084]
  - [powerpc] fadump: Unregister fadump on kexec down path (Steve Best) [1622084]
  - [powerpc] fadump: Do not use hugepages when fadump is active (Steve Best) [1622084]
  - [powerpc] fadump: exclude memory holes while reserving memory in second kernel (Steve Best) [1622084]
  - [powerpc] fadump: use kstrtoint to handle sysfs store (Steve Best) [1622084]
  - [powerpc] powernv/pci: Work around races in PCI bridge enabling (Steve Best) [1619735]
  - [powerpc] pci: Add wrappers for dev_printk() (Steve Best) [1619735]
  - [s390] kvm: add etoken support for guests (Thomas Huth) [1622956]
  - [s390] kvm: implement CPU model only facilities (Thomas Huth) [1622956]
  - [s390] detect etoken facility (Thomas Huth) [1622956]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-108.el7a]
changelog:
  - [net] sched: Fix missing res info when create new tc_index filter (Hangbin Liu) [1614741]
  - [net] sched: fix NULL pointer dereference when delete tcindex filter (Hangbin Liu) [1614741]
  - [redhat] configs: Enable CONFIG_IP_SET_HASH_IPMAC as module (Stefano Brivio) [1608662]
  - [net] ipv6: send netlink notifications for manually configured addresses (Florian Westphal) [1605088]
  - [netdrv] hns3: modify variable type in hns3_nic_reuse_page (Xiaojun Tan) [1622022]
  - [netdrv] hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES (Xiaojun Tan) [1622022]
  - [netdrv] hns: use eth_get_headlen interface instead of hns_nic_get_headlen (Xiaojun Tan) [1622022]
  - [netdrv] hns: fix skb->truesize underestimation (Xiaojun Tan) [1622022]
  - [netdrv] hns: modify variable type in hns_nic_reuse_page (Xiaojun Tan) [1622022]
  - [netdrv] hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES (Xiaojun Tan) [1622022]
  - [netdrv] bnx2x: disable GSO where gso_size is too big for hardware (Jonathan Toppins) [1546762] {CVE-2018-1000026}
  - [net] create skb_gso_validate_mac_len() (Jonathan Toppins) [1546762] {CVE-2018-1000026}
  - [i2c] xlp9xx: Fix case where SSIF read transaction completes early (Robert Richter) [1610749]
  - [i2c] xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE (Robert Richter) [1610749]
  - [i2c] xlp9xx: Fix issue seen when updating receive length (Robert Richter) [1610749]
  - [i2c] xlp9xx: Add support for SMBAlert (Robert Richter) [1610749]
  - [ipmi] ipmi_ssif: Remove usecount handling (Robert Richter) [1610749]
  - [ipmi] ipmi_ssif: Convert over to a shutdown handler (Robert Richter) [1610749]
  - [ipmi] Add shutdown functions for users and interfaces (Robert Richter) [1610749]
  - [ipmi] Remove ACPI SPMI probing from the SSIF (I2C) driver (Robert Richter) [1610749]
  - [infiniband] iw_cxgb4: correctly enforce the max reg_mr depth (Arjun Vynipadath) [1613318]
  - [redhat] configs: enable CONFIG_VHOST_VSOCK and CONFIG_VIRTIO_VSOCKETS (David Gibson) [1619214]
  - [acpi] sbshc: remove raw pointer from printk() message (Al Stone) [1547007] {CVE-2018-5750}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-109.el7a]
changelog:
  - [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
  - [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
  - [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
  - [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
  - [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
  - [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
  - [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
  - [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
  - [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
  - [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-110.el7a]
changelog:
  - [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
  - [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
  - [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
  - [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
  - [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
  - [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
  - [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
  - [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
  - [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
  - [powerpc] mm/radix: Only need the Nest MMU workaround for R -> RW transition (Gustavo Duarte) [1625826]
  - [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-111.el7a]
changelog:
  - [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
  - [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
  - [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
  - [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
  - [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
  - [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
  - [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
  - [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
  - [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
  - [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
  - [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
  - [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
  - [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
  - [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
  - [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
  - [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
  - [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
  - [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
  - [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
  - [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
  - [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
  - [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
  - [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
  - [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
  - [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
  - [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-112.el7a]
changelog:
  - [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
  - [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
  - [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
  - [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-113.el7a]
changelog:
  - [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
  - [kernel] posix-timer: Properly check sigevent->sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
  - [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
  - [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
  - [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
  - [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
  - [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
  - [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
  - [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
  - [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
  - [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
  - [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
  - [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
  - [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
  - [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
  - [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
  - [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
  - [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
  - [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
  - [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
  - [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
  - [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
  - [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
  - [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
  - [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-114.el7a]
changelog:
  - [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
  - [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
  - [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
  - [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
  - [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
  - [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
  - [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
  - [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.el7a]
changelog:
  - [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
  - [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
  - [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
  - [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]


author: Peter Jones <pjones@redhat.com> - 12-2
changelog:
  - Fix /boot/efi/... permissions to match the filesystem's requirements
    Related: rhbz#1512749
  - Minor .spec cleanups
    Related: rhbz#1512749


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.1.1.el7a]
changelog:
  - [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
  - [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.2.1.el7a]
changelog:
  - [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
  - [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
  - [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
  - [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
  - [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
  - [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
  - [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
  - [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
  - [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
  - [char] ipmi:ssif: Add support for multi-part transmit messages > 2 parts (Tony Camuso) [1639298]
  - [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
  - [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
  - [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
  - [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
  - [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
  - [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
  - [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
  - [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
  - [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
  - [block] elevator: allow name aliases (Ming Lei) [1611133]
  - [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
  - [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
  - [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
  - [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
  - [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
  - [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
  - [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
  - [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
  - [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
  - [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
  - [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
  - [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
  - [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
  - [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
  - [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
  - [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
  - [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
  - [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.2.2.el7a]
changelog:
  - [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
  - [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
  - [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
  - [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
  - [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
  - [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
  - [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
  - [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
  - [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
  - [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
  - [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
  - [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
  - [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
  - [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
  - [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
  - [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
  - [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
  - [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
  - [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
  - [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
  - [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
  - [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
  - [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
  - [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
  - [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
  - [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
  - [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
  - [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
  - [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
  - [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
  - [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
  - [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
  - Rebase to 3.10.0
  - Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
  - Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
  - Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Petr Machata <pmachata@redhat.com> - 0.7.91-12
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-13
changelog:
  - Fix system_call_params.exp and system_calls.exp for aarch64.
    (#1225550)
  - xfail part of trace-irelative.exp for aarch64, fix trace-clone
    for aarch64 (#1225568)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - rebase to v4.1.1
  - IPaddr2: add "monitor_retries" parameter

    Resolves: rhbz#1596139
    Resolves: rhbz#1484920


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-3
changelog:
  - gcp-vpc-move-vip: new resource agent for Google Cloud
  - vdo-vol: new resource agent
  - LVM-activate: fix issue with dashes
  - dont use attribute_target for metadata

    Resolves: rhbz#1568588
    Resolves: rhbz#1538689
    Resolves: rhbz#1513957
    Resolves: rhbz#1602783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-8
changelog:
  - lvmlockd: add cmirrord support
  - LVM-activate: warn about incorrect vg_access_mode

    Resolves: rhbz#1606316
    Resolves: rhbz#1619428


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-10
changelog:
  - aws-vpc-move-ip: avoid false positive monitor result on initial probe
  - timeout/interval add "s"-suffix

    Resolves: rhbz#1624741
    Resolves: rhbz#1523318


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-11
changelog:
  - Make building of libmpi wrapper explicit (#1530219)
  - Add valgrind-3.13.0-debug-alt-file.patch
    and valgrind-3.13.0-build-id-phdrs.patch (#1589844)
  - Add valgrind-3.13.0-s390-cgijnl.patch (#1589848)
  - Add valgrind-3.13.0-ppc64-mtfprwa-constraint.patch (#1589852)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-13
changelog:
  - Improved valgrind-3.13.0-arm64-hwcap.patch (#1593686)
  - Add valgrind-3.13.0-arm64-ptrace.patch (#1593682)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-9.20170227git
changelog:
  - make ECPoint behavior standards compliant by default (#1562572)
  - allow mechanism to be specified in hexadecimal (#1562572)
  - Disable pinpad by default (#1547117, #1547744)


author: Martin Pitt <mpitt@redhat.com> - 0.7.1-7
changelog:
  - resolves: #1637182 - Add SHA256 fingerprint support
  - Fix regression with keyboard interactive authentication introduced in
    previous update


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4
changelog:
  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5
changelog:
  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6
changelog:
  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7
changelog:
  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8
changelog:
  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10
changelog:
  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12
changelog:
  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13
changelog:
  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing


author: Peter Jones <pjones@redhat.com> - 8.28-24
changelog:
  - Ensure "grubby --default-title" takes the bootloader selection into
    account
    Resolves: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 8.28-25
changelog:
  - Ensure /etc/sysconfig/kernel has a stable mode, now that rpm handles ghost
    files differently.
    Resolves: rhbz#1584313


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-1
changelog:
  - RHEL 7.6 erratum
    - Replaced asciidoctor dependency with asciidoc
    Resolves: rhbz#1508878 - Rebase USBGuard to latest upstream
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values
    Resolves: rhbz#1487233 - invalid path for AuditFilePath in usbguard-daemon.conf is ignored


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-2
changelog:
  - RHEL 7.6 erratum
    - Restore old behavior for loading IPC access control files
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values


author: Josef Ridky <jridky@redhat.com> - 5.13-12
changelog:
  - Resolves: #1092523 - add PIE and RELRO check 
  - Resolves: #1133135 - add ipmi.service dependency to watchdog.service file
  - Resolves: #1259816 - remove deprecated stanza in unit files


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Florian Müllner <fmuellner@redhat.com> - 3.28.2-2
changelog:
  - Update rebased downstream patches
    Related: #1568624
  - Revert port to python3 of some utility tools
    Resolves: #1493526
  - Add tooltips to app names in overview
    Resolves: #1541180


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
  - xfs_db: fix the source command when passed as -c option (#1510279)
  - xfs_metadump: allow much larger extent counts (#1502927)
  - xfs_db: fix crash when field list selector has garbage (#1532271)
  - mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
  - Update project URLs throughout the pkg, code and docs (#1550798)


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-1
changelog:
  - Rebased to libvirt-4.5.0 (rhbz#1563169)
  - The rebase also fixes the following bugs:
      rhbz#1291851, rhbz#1393106, rhbz#1468422, rhbz#1469338, rhbz#1526382
      rhbz#1529059, rhbz#1541921, rhbz#1544869, rhbz#1552092, rhbz#1568407
      rhbz#1583623, rhbz#1584091, rhbz#1585108, rhbz#1586027, rhbz#1588295
      rhbz#1588336, rhbz#1589730, rhbz#1590214, rhbz#1591017, rhbz#1591561
      rhbz#1591628, rhbz#1591645, rhbz#1593549


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-2
changelog:
  - qemu: Add capability for the HTM pSeries feature (rhbz#1525599)
  - conf: Parse and format the HTM pSeries feature (rhbz#1525599)
  - qemu: Format the HTM pSeries feature (rhbz#1525599)
  - qemu: hotplug: Don't access srcPriv when it's not allocated (rhbz#1597550)
  - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE (rhbz#1598084)
  - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs (rhbz#1598087)
  - virsh.pod: Drop --persistent for detach-device-alias (rhbz#1598087)
  - qemu: don't use chardev FD passing with standalone args (rhbz#1598281)
  - qemu: remove chardevStdioLogd param from vhostuser code path (rhbz#1597940)
  - qemu: consolidate parameters of qemuBuildChrChardevStr into flags (rhbz#1597940)
  - qemu: don't use chardev FD passing for vhostuser backend (rhbz#1597940)
  - qemu: fix UNIX socket chardevs operating in client mode (rhbz#1598440)
  - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set (rhbz#1515533)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-3
changelog:
  - qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
  - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
  - spec: Explicitly require matching libvirt-libs (rhbz#1600122)
  - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
  - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
  - qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
  - virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
  - qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
  - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
  - qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
  - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
  - virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
  - docs: schema: Add missing <alias> to vsock device (rhbz#1600345)
  - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-13
changelog:
  - Pull latest upstream 1.1 branch fixes
  - Resolves: rhbz#1478451
  - Resolves: rhbz#1501505
  - Resolves: rhbz#1514492
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1564536
  - Resolves: rhbz#1576148
  - Resolves: rhbz#1577300


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-1
changelog:
  - Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
  - Allow crm_node to work on Pacemaker Remote nodes
  - Implement new --validate option to stonith_admin
  - Support .path, .mount, and .timer systemd unit files as resources
  - Handle INFINITY fail count correctly in crm_failcount
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1434936
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1590483
  - Resolves: rhbz#1591045


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-2
changelog:
  - Ensure resource agent meta-data actions can get local node name
  - Do not record pending clone notifications in CIB
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-4
changelog:
  - Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
  - Resolves: rhbz#1478451


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-7
changelog:
  - Shutdown corosync locally if fenced
  - Count start failure once
  - Resolves: rhbz#1448221
  - Resolves: rhbz#1549576


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.1
changelog:
  - Route remote clone notifications through correct cluster node
  - Allow clean-up of managed guest nodes and bundle nodes
  - Allow use of guest nodes and bundles in clusters with sbd fencing
  - Resolves: rhbz#1646347
  - Resolves: rhbz#1646350
  - Resolves: rhbz#1646872


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Remove unused booleans.py file
  - src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
  - Check for the existence of setroubleshoot group separately (#1478118)
  - Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
  - Fix allowed_target_types (#1460642, #1460648)


author: Christopher Snyder <csnyder@redhat.com> 1.21.5-1
changelog:
  - Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
  - 1568609: Updated man page for --after list option (aparadka@redhat.com)
  - Get Initial Setup Addon to run during installation in Vagrant
    (jhnidek@redhat.com)
  - ENT-447 Create .desktop file that opens web page with our cockpit plugin
    (jhnidek@redhat.com)
  - ENT-481 service-level command & options now update syspurpose metadata
    (nmoumoul@redhat.com)
  - 1560727: Search for proxy auth message in whole error string
    (aria.paradkar@gmail.com)
  - 1555384: get_libexecdir now returns a string instead of bytes
    (aria.paradkar@gmail.com)
  - Added generic set/unset and add/remove commands to syspurpose
    (crog@redhat.com)
  - ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
  - 1574706: Create python2-subscription-manager-rhsm properly
    (jhnidek@redhat.com)
  - Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
  - 1574529: Fix rhsmcertd integer overflow on i386 & i686 (csnyder@redhat.com)
  - Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)


author: Christopher Snyder <csnyder@redhat.com> 1.22.1-1
changelog:
  - 1571998: Ignore HTB repos (nmoumoul@redhat.com)
  - 1589296: subman list option --after now named --afterdate
    (aparadka@redhat.com)
  - 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
    (csnyder@redhat.com)
  - Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
  - 1553266: When d-bus methods are unavailable, show appropriate message. *
    Added a "safe call" mechanism that makes the initial dbus calls
    (entitlementService, configService, productsService) only if the service is
    available, tries to restart the rhsm service if possible, and otherwise
    failing gracefully. * Added new UI curtain that provides a meaningful message
    and advice to the end user. * Re-added utility method statusUpdateFailed that
    was accidentally deleted. (nmoumoul@redhat.com)
  - 1580996: Fix comparision of objects in Python 3 (ENT-578)
    (jhnidek@redhat.com)
  - Make xauth Idempotent again (csnyder@redhat.com)
  - Fixes missing locale issues while running nosetests (csnyder@redhat.com)
  - Remove freezegun (khowell@redhat.com)
  - 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
    (jhnidek@redhat.com)
  - ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
  - Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
  - 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
  - ENT-447 Add icons to RPM package for subman cockpit plugin
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.1-1
changelog:
  - Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
  - Change usage_type to usage (csnyder@redhat.com)
  - ENT-715 Sync syspurpose with server (csnyder@redhat.com)
  - 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
  - 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
  - Improve test setup for syspurpose tests. (awood@redhat.com)
  - Two simple fixes for syspurpose (jhnidek@redhat.com)
  - Raise ioerr when necessary during sp read (csnyder@redhat.com)
  - ENT-720 Adds the addons subcommand (csnyder@redhat.com)
  - 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
  - Replace lsb-release in spec and Makefile (khowell@redhat.com)
  - Mock out syspurpose code from being executed in subman tests
    (csnyder@redhat.com)
  - ENT-584 syspurpose UTF-8 support & better formatting - All syspurpose
    operations now support UTF-8 - syspurpose.json now has user-friendly
    indentation (nmoumoul@redhat.com)
  - ENT-446 Report systempurpose on registration (csnyder@redhat.com)
  - 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
  - ENT-721: Usage command (wpoteat@redhat.com)
  - ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
    override an existing value that was added by the 'set' command, but it will
    be maintained and added in a list along with the newly added value. - 'add'
    will now not add an element to a list if the list already contains it (no
    duplicates). - 'remove' will now unset the current value, if that turns out
    to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
  - Move syspurpose out of packages directory. (awood@redhat.com)
  - Correct small problems in syspurpose. (awood@redhat.com)
  - ansible vagrant QOL fixes (khowell@redhat.com)
  - ENT-723: Add System Purpose Status to System Status output
    (wpoteat@redhat.com)
  - Improve debug logging for release listing (khowell@redhat.com)
  - Remove other references to python-kitchen. (awood@redhat.com)
  - Make build_ext a proper dependency. (awood@redhat.com)
  - Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
  - Move clean command to common build_ext module. (awood@redhat.com)
  - Only gather optparse strings in subscription-manager. (awood@redhat.com)
  - Move syspurpose source files to be under package directory.
    (awood@redhat.com)
  - Look for source files based on package directory locations.
    (awood@redhat.com)
  - Add gettext calls to syspurpose. (awood@redhat.com)
  - Load build_ext i18n commands in setup.py (awood@redhat.com)
  - Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
  - Do not install subman-gui from setup.py by default (khowell@redhat.com)
  - ENT-591 Handle when syspurpose.json is missing & create it.
    (nmoumoul@redhat.com)
  - Fix indeterminate unit test failure. (awood@redhat.com)
  - Removal of python-kitchen (wpoteat@redhat.com)
  - ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
    commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
    commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
  - ENT-589 Intentctl -> syspurpose (csnyder@redhat.com)
  - ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
  - ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
  - ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
  - 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
    (jhnidek@redhat.com)
  - Make vagrant setup more flexible (khowell@redhat.com)
  - ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
  - 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
  - Replace curly quote with straight quote (khowell@redhat.com)
  - Add implementation of filesystem watcher (aparadka@redhat.com)
  - 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
    (adarshvritant@gmail.com)
  - ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
  - 1576423: Polished changes provided in #1816 and added unit test.
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.3-1
changelog:
  - 1606435: Rename the async module for compatibility with python 3.7; ENT-737
    (csnyder@redhat.com)
  - Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
  - Display both new and old value in syspurpose diff message
    (csnyder@redhat.com)
  - Fix sending single value of addons. (jhnidek@redhat.com)
  - Fix synchronization of usage with candlepin (jhnidek@redhat.com)
  - 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
  - Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
  - ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
  - 1609048: Replacement of imp module with importlib; ENT-758
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.21.10-1
changelog:
  - Updated translations (csnyder@redhat.com)
  - 1623262: Make automatic enablement of yum plugins working again; ENT-820
    (jhnidek@redhat.com)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo"
  - Resolves: rhbz#1582032


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails"
  - Resolves: rhbz#1568033


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1597825


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04
changelog:
  - Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage"
  - Resolves: rhbz#1463098


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate
    Resolves: #1584245


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Than Ngo <than@redhat.com> - 2:2012-39.20130427_r30134
changelog:
  - Resolves: #1320337 - dependiency on texlive-xetex-def
  - Resolves: #1350485 - updmap from texlive-tetex-bin cannot be executed
  - Resolves: #1337925 - scriptlet errors
  - Resolves: #1186825 - add coreutils for post/unpost


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-2
changelog:
  - Fix typed parameter memory handling (rhbz#1613227)
  - Fix missing NWFilterBinding module (rhbz#1608755)


author: Milan Crha <mcrha@redhat.com> - 3.22.6-2
changelog:
  - Add patch for RH bug #1520936 (Unable to authenticate using Kerberos without krb5-auth-dialog package)


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-10
changelog:
  - Fix a regression imsettings can't detect GNOME running caused by GNOME rebase. (#1533772)
  - Fix unbound variable issue (#1533050)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Ray Strode <rstrode@redhat.com> - 3.28.1-5
changelog:
  - Fix gnome-disk-utility timeout at startup
    Resolves: #1593215
  - add back session properties icons
    Related: #1568620


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.2-2
changelog:
  - Backport fix for client-side memory error (GNOME/gnome-terminal#1)
  - Bump BuildRequires versions
  - Drop the dark theme override
  - Rebase and restore the scroll speed patches
  - Rebase and restore the patch to allow old ISO 8895 charsets
  - Restore the GConf migration tool
  - Resolves: #1568632


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.179-3
changelog:
  - Add convenient conversions between stripe and linear.
  - Fix snapshot hanging on shutdown.
  - Fix internal error in lvs while pvmove in progress.
  - Fix more coverity issues.
  - Improve message for pvresize.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-1
changelog:
  - Never send any discard ioctl with test mode.
  - Fix thin-pool alloc which needs same PV for data and metadata.
  - Enhance vgcfgrestore to check for active LVs in restored VG.
  - Cache can use metadata format 2 with cleaner policy.
  - Fix lvmetad hanging on shutdown.
  - Fix check if resized PV can also fit metadata area.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-2
changelog:
  - Add vdo plugin for monitoring VDO devices.
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-3
changelog:
  - Fix lvconvert --splitmirror for mirror type (2.02.178).
  - Do not pair cache policy and cache metadata format.
  - Fix mirrors honoring read_only_volume_list.
  - Fix vgcreate with sanlock when PVs are created automatically.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-7
changelog:
  - Fix ordering of lvm2 activation and rbdmap services.
  - Fix to avoid locking collisions when monitoring thin-pools.


author: Kalev Lember <klember@redhat.com> - 3.28.3-1
changelog:
  - Update to 3.28.3
  - Apply HW cursor on-demand patches
  - Apply monitor transform regression patch
  - Resolves: #1569736


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Carlos O'Donell <carlos@redhat.com> 2.17-256
changelog:
  - CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
  - Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-258
changelog:
  - Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
  - Additional robust mutex fixes (#1401665)


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-260
changelog:
  - Update glibc-rh1560641.patch to initialize pad outside
    the conditional eliminating an uninitialized byte warning from
    valgrind. (#1560641)


author: Nick Clifton <nickc@redhat.com> 2.27-28.base
changelog:
  - Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section.
    (#1557346)
  - Stop strip from replacing unknown relocs with null relocs.
    (#1545386)


author: Nick Clifton <nickc@redhat.com> 2.27-30.base
changelog:
  - Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.


author: Nick Clifton <nickc@redhat.com> 2.27-32.base
changelog:
  - Fix seg-fault parsing DWARF-1 information.  (#1569580)
  - Fix seg-fault parsing DWARF-2 information.  (#1569891)
  - Fix seg-fault parsing COFF files.  (#1571917)


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
  - Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
    changelog (galt@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
  - Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification1415742 - rhn-search traceback - immediateTrigger-
    server exists with certain identification (eherget@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
  - Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists with certain identification" (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
  - Resolves: #1430298 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
  - Related: #1494389 - detect if action has been picked up for 2nd time
    (tkasparek@redhat.com)
  - Resolves: #1494389 - revert previous reboot loop changes
    (tkasparek@redhat.com)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-4
changelog:
  - fix various testsuite failures
  - fix exception propagation from private key passphrase callback (#1227505)
  - add optional digest parameter to CRL.export method (#1523772)


author: Peter Robinson <pbrobinson@fedoraproject.org> 2018.09-0.4.rc3
changelog:
  - 2018.09 RC3
  - Enable nanopi_neo_plus2, pine_h64, rock960-rk3399, a64-olinuxino
  - Build against new upstream AllWinner ATF support
  - Use firmware provided DT on Raspberry Pi
  - Support for Pine64-LTS


author: Pablo Greco <pablo@fliagreco.com.ar>
changelog:
  - Added conditional to enable devtoolset-7-gcc for .el7 build (Arrfab)
  - Added conditional BR, python2-pyelftools is python-pyelftools in .el7 (Arrfab)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


