# changelog

author: Aristeu Rozanski <arozansk@redhat.com> 20061222-3
changelog:
  - Updated initrd script to start after syslogd, otherwise if the board isn't
    supported, the user will never know.


author: Stu Tomlinson <stu@nosnilmot.com> 2.10.5-1
changelog:
  - Update to 2.10.5, CVE-2012-3374
  - Allow building only libraries (#831364)
  - Revive FT crash prevention patch


author: Jon Ciesla <limburgher@gmail.com> - 2.10.4-1
changelog:
  - Update to 2.10.4, CVE-2012-2214, CVE-2012-2318, BZ 806839, 819454.
  - Port to farstream patch upstreamed.


author: Jon Ciesla <limburgher@gmail.com> - 2.10.2-1
changelog:
  - Update to 2.10.2, BZ 803293, 803299.
  - Dropping MSN patches.  Protocol patch not needed, won't connect
  - to 16 by default.  Crash patch was upstreamed.
  - Dropped nm09 patch, upstreamed.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.3-2
changelog:
  - use _isa in explicit Requires on libpurple to prevent yum from trying to 
    jump architectures to resolve dependency


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-5
changelog:
  - Rebuild against newer libedataserver
  - spec file cleanup:
      replace %define with %global
      replace tabs with spaces for consistency
      mark prefs.xml as a config file


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-1
changelog:
  - 2.7.1
  - Adds Direct Connection support for MSN
  - Numerous bug fixes
  - Evolution support moved to pidgin-evolution for F13+ (#581144)


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.0-2
changelog:
  - Upstream backports:
      3c30f64efedafc379b6536852bbb3b6ef5f1f6c9 - fix for receiving HTML on ICQ
      13fbe0815f84d5b3c001947559f5818c10275f4c - prevent null deref on disconnecting account (#592750)
      c4a874926d07b8597db4b78a181a89cf720a8418 - fix blinking tray icon on new message (#592691)
      cfe0e649dda34d9252d40d8f67e445336a247998 - prevent race condition on Yahoo! login
      e3dd36706068f3b8eabd630ff71d270c145cce42 - fix crash in Oscar (#548128)
      13fbe0815f84d5b3c001947559f5818c10275f4c - fix crash during network disconnect (#592750)


author: Stu Tomlinson <stu@nosnilmot.com> - 2.7.0-1
changelog:
  - 2.7.0 with features, bug fixes and a security fix: CVE-2010-1624 (#591806)
  - Use System SSL Certificates (#576721)
  - Add additional dependencies for Voice + Video (#581343)
  - Upstream backport:
      87ada76abf90c44e615679efc5f8128bb941bba1 Reduce MSN traffic


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Tony Rodriguez <tony.rodriguez@oracle.com> - 31.6.0-2.0.2.el7_1
changelog:
  - Resolves Orabug: 27681115 unique for arm64
  - Patch 1000-xulrunner-sql-uninitialized-variable.patch
  - Patch 1001-xulrunner-missing-struct-element-bin-unused.patch 
  - Patch 1002-xulrunner-jemalloc.c.47bit.patch 
  - Patch 1003-xulrunner-js-xpcshell-segfault.patch 
  - Patch 1004-xulrunner-jemalloc-TaggedAnonymousMemory.patch 
  - Patch 1005-xulrunner-js-TaggedAnonymousMemory.patch 
  - Added missing dbus-glib-devel within this spec file
  - Major modifications to jemalloc.c to support 47bit mmap addressing
  - Fixed Java Script segfault within xpcshell, issue is with memory mapping Memory.cpp during build the process.
  - Added missing size_t bin_unused element to jemalloc_stats_t structure within jemalloc_types.h 
  - Fixed sqlite3.c un-initialized variable error that causes build to fail.
  - Added missing TaggedAnonymousMemory.h header needed for jemalloc.c


author: Tianyue Lan <tianyue.lan@oracle.com> - 31.6.0-2.0.1.el7_1
changelog:
  - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
  - Removed XULRUNNER_VERSION from SOURCE21


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 17.0.4-1
changelog:
  - Update to 17.0.4 ESR
  - Added fix for mozbz#239254 - [Linux] Support disk cache on a local path
  - Use an official firefox tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-16.el7
changelog:
  - libvirt: Add single node vNUMA forced configuration enhancement (Wim ten Have)  [Orabug: 30380799] 
  - libvirt: vNUMA auto partitioning can't downscale vcpus/vcpu sets. (Wim ten Have)  [Orabug: 29995967] 
  - qemuxml2argvdata: Adjust numa-interleave test. (Wim ten Have)  [Orabug: 30258966] 
  - qemu: Fix CPU topology less vNUMA rendered guests. (Wim ten Have)  [Orabug: 30258966] 
  - libvirt: Fix vNUMA online and hotplug render detail. (Wim ten Have)  [Orabug: 30258966]


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-15.el7
changelog:
  - qemu: ensure whole cores during hot(un)plug on Exadata (Menno Lageman)  [Orabug: 30239774] 
  - qemu: exadata KVM set vcpu granularity must be number of CPUs in core (Menno Lageman)  [Orabug: 30224846]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-14.el7
changelog:
  - qemuxml2argvdata: Adjust a test for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 30189275] 
  - qemu: Fix vNUMA hotplug request checking the node mapped cores. (Wim ten Have)  [Orabug: 30189275] 
  - libvirt: Add vNUMA online and hotplug rendered detail (Wim ten Have)  [Orabug: 30189275]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-12.el7
changelog:
  - qemu: Driver change to support vNUMA setvcpus config change request (Wim ten Have)  [Orabug: 30030162] 
  - domain: Add vNUMA auto partition support for persistent domains (Wim ten Have)  [Orabug: 30030162]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-11.el7
changelog:
  - qemu: Add hotplug support for vNUMA node topology (Wim ten Have)  
  - domain: correct vNUMA autopartition validation check (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-10.el7
changelog:
  - qemuxml2argvdata: Fix tests for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 29826947] 
  - qemu: Add SMT support to CPU packing (Wim ten Have)  [Orabug: 29826947] 
  - domain: Add support for SMT to auto vNUMA feature (Wim ten Have)  [Orabug: 29826947]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-9.el7
changelog:
  - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten
    Have)  [Orabug: 29956508]


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-8.el7
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10161}
  - domain: Define explicit flags for saved image xml (Eric Blake)  [Orabug: 29955742] 
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10166}
  - api: disallow virConnectGetDomainCapabilities on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10167}
  - api: disallow virConnect*HypervisorCPU on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10168}


author: Mark Kanda <mark.kanda@oracle.com> - 5.0.0-7.el7
changelog:
  - cpu_map: Define md-clear CPUID bit (Jiri Denemark)  [Orabug: 29874181]
    {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-6.el7
changelog:
  - qemu: Driver change adding private lock to auto-tune hugepages (Wim ten Have)
    [Orabug: 29809943]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-5.el7
changelog:
  - qemu: disable setmem change requests for vNUMA targets (Wim ten Have)  [Orabug: 29797366] 
  - domain: Disable memballoon memory configuration support for vNUMA guests (Wim ten Have)  [Orabug: 29797366] 
  - qemu: Driver change to target for vNUMA setmaxmem change request (Wim ten Have)  [Orabug: 29749852] 
  - domain: Add domain memory config support for vNUMA guests (Wim ten Have)  [Orabug: 29749852] 
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-3.el7
changelog:
  - BUILDINFO: commit=b335d6fa26d61fc28159d39b0644240b4733ef4b
  - qemu: Fix nr_hugepages host auto-tuning computation (Wim ten Have)  [Orabug: 29625524] 
  - qemu: fix driver SEGV reaping existing guests (Wim ten Have)  [Orabug: 29655677]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-2.el7
changelog:
  - BUILDINFO: commit=568af469d4e54975e0ffdf61a8f7063c57cb77eb
  - domain: fix vNUMA auto partition pinning on imbalanced configurations (Wim ten Have)  [Orabug: 29503554] 
  - qemu: fix driver initialization SEGV under initial bootstrap (Wim ten Have)  [Orabug: 29502935]


author: Todd Zullinger <tmz@pobox.com> - 0.11.3-5
changelog:
  - put the python scripts in sitelib, not sitearch
  - remove autoconf, automake, and intltool BRs
  - don't run autoconf/automake in %build
  - BR perl(XML::Parser)
  - remove smeg Obsoletes and Provides
  - minor rpmlint cleanups


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Chess Griffin <chess@chessgriffin.com> 0.9-1
changelog:
  - Update to version 0.9.
  - Remove sed invocation as this was adopted upstream.
  - Remove optflags patch since upstream source now uses ./configure and
    detects the flags when passed to make.


author: Chess Griffin <chess@chessgriffin.com> 0.8-5
changelog:
  - Note that souce is mostly ISC licensed with some 2 and 3 clause BSD in
    compat/.
  - Remove fixiquote.patch and instead use a sed invocation in setup.


author: Chess Griffin <chess@chessgriffin.com> 0.8-4
changelog:
  - Add optimization flags by patching GNUmakefile and passing LDFLAGS
    to make command.
  - Use consistent macro format.
  - Change examples/* to examples/ and add TODO to docs.


author: Chess Griffin <chess@chessgriffin.com> 0.8-2
changelog:
  - Fix Source0 URL to point to correct upstream source.
  - Modify fixperms.patch to set 644 permissions on the tmux.1.gz man page.
  - Remove wildcards from 'files' section and replace with specific paths and
    filenames.


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Naveen Kumar <nkumar@redhat.com> - 4.4.4
changelog:
  - rectify error to directly install fonts in fontdir instead of subdir in fontdir
  - Resolves bug #653608


author: Naveen Kumar <nkumar@redhat.com> - 4.4.2
changelog:
  - apply patch smc-fonts_616324.patch created from Pravin S' src Modification 
  - resolves bug #616324


author: Naveen Kumar <nkumar@redhat.com> - 4.4.1
changelog:
  - new release from upstream
  - changes in spec file to incorporate new build from sfd source
  - remove patch bug-523454.patch
  - reolves bug #586283
  - reolves bug #586286


author: Naveen Kumar <nkumar@redhat.com> - 04.2.9
changelog:
  - oops! forgot to rename 66-smc-meera.conf to 65-0-smc-meera.conf in INSTALL in spec file
  - oops! forgot to remove 66-smc-meera.conf
  - resolves Bug #586288


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 04.1-4
changelog:
  - change descriptions
  - fix bug in kalyani font's obsoleting version number
  - move _font_pkg macros next to corresponding packages


author: Pravin Satpute <psatpute@redhat.com> 04.1-1
changelog:
  - new upstream release
  - fontconfig rule for size adjustment of Meera is added
  - two new fonts kalyani and anjalioldlipi
  - bugfix 448078


author: Pravin Satpute <psatpute@redhat.com> 04-4
changelog:
  - added comment about sharing directory in spec file
  - fontdir will be 'smc' only instead of 'smc-fonts' earlier


author: Pravin Satpute <psatpute@redhat.com> 04-3
changelog:
  - defattr now comes after files
  - s/malayalam/Malayalam in description
  - removed '-fonts' from fontdir variable value


author: Pravin Satpute <psatpute@redhat.com> 04-2
changelog:
  - done changes in spec file as suggested in review request
  - changed variable name from xfontdir to fontdir


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-8
changelog:
  - update the patch for the non-existent 'm4' directory issue to the one already
    committed in upstream repository


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-5
changelog:
  - Do not fail in aclocal when the first include directory does not exist
    (#901333)
  - do not require texlive-latex-fonts (rawhide texinfo repaired)
  - use macros in Patch statements


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-3
changelog:
  - re-enable AM_CONFIG_HEADER macro in Fedora distribution (#896442)
  - disable testing for non-existence of this macros (join with vala)


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-1
changelog:
  - update to recent automake-1.13.1
  - minimum required autoconf is 2.65 (based on upstream suggestion)
  - make check is run now parallel (based on 't/README' it helps also on
    single-thread machines)
  - drop old sleep-patch and better disable vala tests (requires autoreconf)
  - add temporary BR dependency on texlive-latex-fonts for rawhide (f19 only)
    (should be implicitly pulled by texlive-dvips probably)


author: Pavel Raiskup <praiskup@redhat.com> - 1.12.2-6
changelog:
  - fedora-review -> s/define/global/, s/RPM_BUILD_ROOT/buildroot/,
    remove defattr() from %files section


author: Pavel Raiskup <praiskup@redhat.com> - 1.12.2-3
changelog:
  - Thanks to Ralf Corsépius <corsepiu@fedoraproject.org> - these fixes are
    slightly reworked changes (due to rebase of automake) from his patch attached
    to bug #823766
  - Include COPYING.
  - Add rpm-4.9 perl-filters %__provides_exclude, %__requires_exclude.
    Remove rpm-4.8 perl-filters (Address RHBZ 823766).
  - Remove utf-8 conversion of NEWS (Already utf-8 encoded).
  - Add BR: perl-macros, Remove BR: perl-devel.
  - Add support for --with/out=check.
  - Append --disable-silent-rules to configure.
  - remove trailing white spaces


author: Karsten Hopp <karsten@redhat.com> 1.11.1-5
changelog:
  - removed redundant text about installing autoconf from package
    description (#225302)
  - don't create /usr/share/aclocal as it is owned be the filesystem
    package (#570744, #225302)


author: Karsten Hopp <karsten@redhat.com> 1.11.1-2
changelog:
  - better method of fixing the perl requires/provides (Paul Howarth, #225302)
  - fix variable usage in spec file (#225302)
  - use pregenerated manpages from automake-1.11 (#225302)
  - update URL (#225302)


author: Karsten Hopp <karsten@redhat.com> 1.10-4
changelog:
  - bz 225302:
  - make install DESTDIR=...
  - fix BuildRoot
  - fix post/preun requirements
  - define all directories on ./configure line
  - filter perl(Automake*) dependencies
  - replace all tabs with spaces
  - remove trailing dot from summary


author: Daniel Reed <djr@redhat.com> 1.9.4-1
changelog:
  - version bump
    - Portability nits in install-sh and mdata-sh.
    - Don't let `make install' fails if a _JAVA primary becomes empty
      because of conditionals.
    - Do not confuse CHANGELOG with ChangeLog on case-insensitive
      case-preserving file systems (likewise for all automatically
      distributed files).
    - Do not embed $DESTDIR in Python's byte-code files.
    - Work around programs that read stdin when checking for --version
      and --help options (when the `std-options' is used).
    - Fix AM_PATH_PYTHON to correctly define PYTHON as `:' when no minimum
      version was supplied and no interpreter is found.


author: Daniel Reed <djr@redhat.com> 1.9.3-1
changelog:
  - version bump
    - Dependency tracking using mode "dashmstdout" or "dashXmstdout" did not work for libtool objects compiled with --tag (i.e., compiled with Libtool 1.5 or later). The compilation would succeed, but `depcomp' would emit a warning and not output any dependency information.
    - Ignore comments from augmented variables ...
    - `install-sh -d a/b/' failed to create `a/b/' because of the trailing `/'.
    - _PROGRAMS now always create programs. Before 1.9 it would mistakenly create a libtool library if the name of the program ended in `.la'.
    - `compile' now handles `*.obj' objects.
    - `aclocal' recognizes AC_DEFUN_ONCE.


author: Daniel Reed <djr@redhat.com> - 1.9.2-1
changelog:
  - version bump
    - Sort rm commands output for mostlyclean-generic, clean-generic, distclean-generic and maintainer-clean-generic, so that the produced Makefile is not sensitive to the way Perl sorts its hashes.
    - Support `+' in the name of directories given to `include'.
    - Preserve spaces in the arguments of `compile'.
    - `missing' will no longer try to emulate a tool that is run with `--version' or `--help' as argument.
    - There is a new chapter about the history of Automake.


author: Daniel Reed <djr@redhat.com> - 1.9.1-1
changelog:
  - version bump
    - Adjust #line directives in `parser.h' (when ylwrap is not used). (PR/432)
    - Fix definition of YLWRAP when ylwrap is installed in a default aux directory found in a parent package.
    - Properly recognize AC_CANONICAL_BUILD and AC_CANONICAL_TARGET.


author: Jens Petersen <petersen@redhat.com> - 1.8-1
changelog:
  - update to 1.8 release
  - require autoconf 2.58 or later
  - don't use %configure for now to prevent very recent configure from running
    "config.sub noarch-redhat-linux"


author: Jens Petersen <petersen@redhat.com> 1.6.3-2
changelog:
  - add "--without check" rpmbuild option to switch "make check" off
  - exclude info dir file
  - don't gzip info files explicitly


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.5-4
changelog:
  - Completely back out the fix for #56624 for now, it causes more problems
    than it fixes in either form.


author: Jens Petersen <petersen@redhat.com> - 1.4p5-2
changelog:
  - dont raise error when there is source in a subdirectory (bug #35156).
    This was preventing automake from working in binutuls/gas
    [patch from HJ Lu <hjl@gnu.org>]
  - format long lines of output properly with backslash + newlines as in 1.4
    (bug #35259) [patch from HJ Lu <hjl@gnu.org>]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-5
changelog:
  - Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                             OIDCAuthNHeader not skipped in an "AuthType oauth20"
                             configuration [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-4
changelog:
  - Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                             user-supplied content on error pages [rhel-7]


author: John Dennis <jdennis@redhat.com> - 1.8.8-3
changelog:
  - fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
    failing to null terminate decrypted string
    Resolves: bug#1292561 New package: mod_auth_openidc


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-10
changelog:
  - Add ibus-m17n-fix-data-location.patch
  - Fix bug 962144 [abrt] ibus-m17n-1.3.4-9.fc19:
    setup_dialog_load_config: Process /usr/libexec/ibus-setup-m17n was
    killed by signal 11 (SIGSEGV)


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-9
changelog:
  - Update ibus-m17n-xkb-options.patch to set XKB option for Inscript2
  - Fix bug 957993 - ibus-m17n doesn't automatically map Alt_R to AltGr
    when Inscript2 maps are used


author: Daiki Ueno <deno@redhat.com> - 1.3.4-8
changelog:
  - Update ibus-m17n-HEAD.patch to the latest upstream master
  - Remove unnecessary and not upstreamable patches
  - Use gtk3 always
  - Fix bug 912592 - ibus-m17n should use default keyboard in most cases


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-6
changelog:
  - Add ibus-m17n-desktop-file.patch
    Fix bug 860955 - ibus-m17n setup is not enabled in
    gnome-control-center region, .desktop file is missing


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-4
changelog:
  - Add ibus-m17n-translit-layout.patch
  - Fix bug 847495 - For non-US keyboard layout Ibus-m17n adds English
    (US) to the list of input methods and other input methods use US
    layout
  - Require eekboard-service instead of eekboard
  - Fix bug 847500 - Don't install Eekboard by default in the desktop spin


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-3
changelog:
  - Add ibus-m17n-fix-mtext-config.patch
  - Fix bug 836397 - [abrt] ibus-m17n-1.3.3-11.fc17: mtext_data: Process
    /usr/libexec/ibus-setup-m17n was killed by signal 11 (SIGSEGV)


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-12
changelog:
  - Check %{rhel} version in addition to %{fedora}
  - Remove unnecessary %defattr(-,root,root,-) from %files
  - Drop libxklavier-devel from BR


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-11
changelog:
  - Revive m17n:zh:pinyin with a different label ("hanyu pinyin (m17n)")
  - Rebase ibus-m17n-virtkbd.patch


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-7
changelog:
  - Add ibus-m17n-custom-setup-element.patch
  - Fix bug 760427 - engine preferences button in ibus-setup doesn't
    work for ibus-m17n


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-6
changelog:
  - Add ibus-m17n-blacklist-engines.patch
    https://lists.fedoraproject.org/pipermail/i18n/2011-October/001194.html


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-5
changelog:
  - Add ibus-m17n-hide-title-status.patch.
  - Fix bug 741157 - ibus-m17n: m17n "title" variable appears as a
    dormant button on the language panel


author: Daiki Ueno <dueno@redhat.com> - 1.3.3-1
changelog:
  - New upstream release.
  - Add ibus-m17n-default-xml-override.patch.
  - Add ibus-m17n-virtkbd.patch, instead of ibus-m17n-iok.patch.


author: Daiki Ueno <dueno@redhat.com> - 1.3.2-8
changelog:
  - Update ibus-m17n-xx-icon-symbol.patch.
  - Fix bug 727024 - ibus compose file needs a symbol tag for gnome-shell
  - Update ibus-m17n-xkb-options.patch.


author: Daiki Ueno <dueno@redhat.com> - 1.3.2-6
changelog:
  - Add ibus-m17n-xkb-options.patch.
  - Add ibus-m17n-xx-icon-symbol.patch.
  - Drop surrounding-text patches since they are included in the HEAD patch.


author: Daiki Ueno <dueno@redhat.com> - 1.3.2-5
changelog:
  - Add ibus-m17n-stsreq.patch.
  - Fix bug 711126 - ibus: surrounding text support fails for the first
    syllable upon activation


author: Daiki Ueno <dueno@redhat.com> - 1.3.2-4
changelog:
  - Add ibus-m17n-stscap.patch.
  - Fix bug 711126 - ibus: surrounding text support fails for the first
    syllable upon activation


author: Daiki Ueno <dueno@redhat.com> - 1.3.2-2
changelog:
  - Bump the release to fix upgrade path.
  - Fix bug 706602 - ibus-m17n-1.3.2-2.fc14 > ibus-m17n-1.3.2-1.fc15
  - Drop preparing/cleaning buildroot.


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-15
changelog:
  - Update iok patch.
  - Fix bug 669128 - [abrt] ibus-m17n-1.3.1-14.fc15:
    Process /usr/libexec/ibus-engine-m17n was killed by signal 6 (SIGABRT)


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-10
changelog:
  - Update ibus-m17n-HEAD.patch.
  - Fix bug 658336 - ibus-m17n: define the IM ranks in a config file and
    not in a compiled binary


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-7
changelog:
  - Rename ibus-m17n-fedora.patch to ibus-m17n-HEAD.patch since the
    changes are merged into upstream.
  - Update ibus-m17n-HEAD.patch with upstream fix 08e06310
  - Fix bug 649230 - [si] last input character is committed late in
    wijesekara input method


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-5
changelog:
  - put several Fedora patches into one.
  - Fix bug 640896 - Ibus does not load all the keymaps for a language
    that is used for logging in.


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-4
changelog:
  - Remove Shift+AltGr patch; apply a simplified AltGr patch.
  - Fix bug 639963 - SHIFT switch is not working in layouts as expected.


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-3
changelog:
  - Apply a patch to handle Shift+AltGr.
  - Update surrounding-text patch.
  - Fix bug 634829 - [abrt] ibus-m17n-1.3.1-1.fc14: shift_state: Process
    /usr/libexec/ibus-engine-m17n was killed by signal 11 (SIGSEGV).


author: Daiki Ueno <dueno@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1.
  - Fix bug 615158 - Do not change the background colour of the pre-edit buffer
  - Add gtk2-devel to BR
  - Install ibus-setup-m17n in %{_libexecdir}


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-m17n-HEAD.patch.
  - Fix regression with the previous update.  See comment 7 of bug 614867.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Update ibus-m17n-HEAD.patch.
  - Fix bug 614867 - Invisible pre-edit buffer when using m17n Wijesekera keyboard layout
  - Update iok patch.


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0.
  - Update iok patch.
  - Fix bug 577148 - IOK screen appears with all keyboard layouts on ibus language panel


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090211-2
changelog:
  - Add patch ibus-m17n-HEAD.patch from upstream git tree.
  - Make Control + Alt + ... available. (#482789)


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.3-16
changelog:
  - Added patch declaring explicit libm linking dependency (RHBZ #564899)
  - Updated source and URL tags


author: Francois Aucamp <faucamp@csir.co.za> - 1.3-7
changelog:
  - Modified alsa support patch file to patch "configure.in" instead of "configure"
  - Added "autoconf" step to %build
  - Added BuildRequires: autoconf
  - Fixed patch backup file suffixes
  - Renamed patch files to a more standard format
  - Moved header files from /usr/include to /usr/include/flite
  - Added -p option to all cp operations (to preserve timestamps)


author: Francois Aucamp <faucamp@csir.co.za> - 1.3-6
changelog:
  - Recreated patch to allow shared libraries to build correctly (sharedlibs.patch)
  - "flite" and "flite_time" binaries now link to flite shared libraries (sharedlibs.patch)
  - Simplified the documentation patch filename
  - Modified patch steps in %prep to create backup files with different suffixes
  - Removed "_smp_flags" macro from %build for all archs


author: Francois Aucamp <faucamp@csir.co.za> - 1.3-3
changelog:
  - Added README-ALSA.txt (Source1)
  - Removed subpackage: flite-devel-static
  - Modified shared libraries patch (Patch0) to prevent building static libraries
  - Renamed patch files: Patch0, Patch1


author: Francois Aucamp <faucamp@csir.co.za> - 1.3-2
changelog:
  - Added flite 1.3 ALSA patch (Patch2) by Lukas Loehrer - thanks Anthony Green for pointing it out
  - Added configure option: --with-audio=alsa
  - Added BuildRequires: alsa-lib-devel


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Jiri Skala <jskala@redhat.com> - 2.0.7-1
changelog:
  - update to latest upstream
  - fixes #660459 - Should be able to set options with /etc/sysconfig/acpi


author: Jiri Skala <jskala@redhat.com> - 2.0.5-5
changelog:
  - fixes #648221 - SELinux is preventing /sbin/iwconfig access to a leaked /dev/input/event0 file descriptor


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.8-1
changelog:
  - Updated to version 1.0.8
  - power.sh works with ConsoleKit >= 0.3.0 (#470752)
  - Fixed conditions in power.sh, which look for power-managers (#470752)
  - Added check to init script


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-5.fc9
changelog:
  - Fixed managing of power button (#361501)
  - Fixed power script to check for KDE power manager (#419331)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-4.fc9
changelog:
  - Removed old logrotate file
  - Fixed socket leak (#394431)
  - Fixed dumping useless info to log (#389581)


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-4
changelog:
  - Made a better fix for the powerdown button which checks if g-p-m is running
  - Don't install sample.conf anymore, not needed


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-3
changelog:
  - Disable the automatic shutdown -h via powerdown button by default due to
    conflicts with gnome-power-manager


author: Miloslav Trmac <mitr@redhat.com> - 1.0.3-2
changelog:
  - Update to 1.0.3 (fixes #128834)
  - s/Copyright/License/
  - Add logrotate config file (#110677, from Michal Jaegermann)
  - Don't verify contents of /var/log/acpid (#125862)
  - Use $RPM_OPT_FLAGS
  - Fix and cleanup acpid-1.0.1-pm1.patch
  - Add condrestart to %postun


author: Tim Hockin <thockin@sun.com>
changelog:
  - Updated RPM spec with patch from sun for chkconfig on/off
    - Add Changelog, make 'make rpm' use it.


author: Tim Hockin <thockin@sun.com>
changelog:
  - Fixed logging bug - not appending to log (O_APPEND needed)
    - Fix 'make install' to not need root access
    - Fix RPM spec to not need root


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.6-1
changelog:
  - Fixed IBus Google issue 1126: An error in ChineseTableLicenseAuditing
  - Complete LICENSE tag for all of the tables.


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.5-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files
  - Fixed Google issue 1507: Add CJKV Extension C/D support for Array30
  - Merge GitHub Pull request 3: Added the inter punct
  - Merge GitHub Pull request 4: Give Cangjie and Quick users 9 candidates per page


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.0-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.4-1
changelog:
  - Fixed Bug 715707 - FTBFS ibus-table-chinese-1.3.0.20110114-2.fc15
  - Fixed Bug 629212 - bad candidate orders in ibus-table-quick
  - Merged patch from sagara @ github, which address IBus issue 787
  - Make it compatible with cmake-fedora-0.7.994
  - Move the cmake policies to the front
  - Suppress the misleading warning from rpm -V


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.0.20110114-1
changelog:
  - Fix Bug 667877: ibus-table-yinma and ibus-table-xingma have been obsoleted.
  - Now depends on cmake-fedora


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.0.20101206-1
changelog:
  - New tables which was not include in original:
    + array30, array30-big, wubi-haifeng
  - Table removed from original version because of license issues:
    + zhengma, ziranma
  - Add package review ID
  - Add build tag for el6


author: Caius 'kaio' Chance <k at kaio.me> - 1.3.0.20100527-3
changelog:
  - Added Quick 3, 5, Classic tables and icons.
  - Added Easy (big) table and icon.
  - Updated AUTHORS, COPYING, license and its declarations.


author: Dan Walsh <dwalsh@redhat.com> - 3.3.7-24
changelog:
  - Revert setools current patch

  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Use selinux_current_policy_path to read by default policy


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Rakesh Pandit <rakesh@fedoraproject.org> - 1.0.0-1
changelog:
  - Updated to 1.0.0
     * AO returned to active development
     * Added surround channel mapping API and capability
     * Updated all drivers on modern installs
     * New config file options
     * Driver options may be specified in config file
     * Support for MacOSX updated to 10.5 and later
     * Build in WMM driver rather than using dlopen()
     * Added Roar Audio driver
     * Added OpenBSD SNDIO driver
     * Workaround for ESD non-4096 byte write bug
     * Workaround aRts server crash bug
     * Workaround for VIA82xx click/crackle bugs under ALSA
     * Remove dead/unused drivers (solaris, alasa05, mmsound)
     * Numerous patches from multiple downstreams
  - Patch from upstream: libao-1.0.0 Pulse Audio Fix


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.8.8-10
changelog:
  - Replace the broken/expensive file dependency in release -8/-9 with
    an arch-specific base package dependency if %_isa is defined.


author: Julian Sikorski <belegdol[at]gmail[dot]com> - 0.8.8-1
changelog:
  - Updated to 0.8.8 (bz 316731)
  - Cleaned up the SPEC
  - Added PulseAudio support
  - Made build parallel
  - Killed rpaths
  - Changed the kludges to use sed


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-32
changelog:
  - Update to latest HEAD.
  - Fix traceback when entering single-connection mode with DEBUG off
  - Fix traceback when limit==None and DEBUG is on
  - Fix the condition to enter single-connection mode


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-31
changelog:
  - Update to latest HEAD.
  - Switch to max_connections=1 after refused connect. BZ 853432
  - Never display negative downloading speed. BZ 1001767
  - clamp timestamps from the future.  BZ 894630, 1013733


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-30
changelog:
  - Update to latest HEAD.
  - add ftp_disable_epsv option. BZ 849177
  - Spelling fixes.
  - docs: throttling is per-connection, suggest max_connections=1. BZ 998263
  - More robust "Content-Length" parsing. BZ 1000841


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-29
changelog:
  - Update to latest HEAD.
  - Fix parsing of FTP 213 responses
  - Switch to max_connections=1 after timing out.  BZ 853432
  - max_connections=0 should imply the default limit.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-28
changelog:
  - Update to latest HEAD.
  - Add the "minrate" option. BZ 964298
  - Workaround progress "!!!" end for file:// repos.
  - add URLGrabError.code to the external downloader API
  - Disable GSSNEGOTIATE to work around a curl bug.  BZ 960163


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-26
changelog:
  - Update to latest HEAD.
  - Handle HTTP 200 response to range requests correctly.  BZ 919076
  - Reset curl_obj to clear CURLOPT_RANGE from previous requests.  BZ 923951


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.9.1-25
changelog:
  - Update to latest HEAD.
  - fix some test cases that were failing.  BZ 918658
  - exit(1) or /bin/urlgrabber failures.  BZ 918613
  - clamp timestamps from the future.  BZ 894630
  - enable GSSNEGOTIATE if implemented correctly.
  - make error messages more verbose.


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.9.1-15
changelog:
  - Update to latest head, misc bugfixes: BZ 832028, 831904, 831291.
  - Disable Kerberos auth.  BZ 769254
  - copy_local bugfix. BZ 837018
  - send 'tries' counter to mirror failure callback


author: James Antill <james@fedoraproject.org> 3.0.0-8
changelog:
  - Tweak progress output so it's hopefully less confusing
  - Add dynamic resizing ability to progress bar
  - Resolves: bug#437197


author: James Antill <james@fedoraproject.org> 3.0.0-7
changelog:
  - Fix reget's against servers that don't allow Range requests, also tweaks
  - reget == check_timestamp, if anyone/thing uses that.
  - Resolves: bug#435156
  - Fix minor typo in progress for single instance.


author: James Antill <james@fedoraproject.org> 3.0.0-6
changelog:
  - Fix the ftp byterange port problem:
  - Resolves: bug#419241
  - Fixup the progress UI:
  -   add function for total progress
  -   add total progress percentagee current download line
  -   add rate to current download line
  -   use dead space when finished downloading
  -   don't confuse download rate on regets.


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-7
changelog:
  - Add window-grouper extension
    Resolves: #1355845

  - Add disable-screenshield extension
    Resolves: #1643501


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-3
changelog:
  - Fix a couple of regressions from the rebase:
    - add back classic overview style
    - update dash-to-dock to a compatible version
    Related: #1569717


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-2
changelog:
  - Fix notification legibility in classic mode
    Resolves: #1507457
  - Fix stray icon shadows in classic mode
    Resolves: #1530654


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-2
changelog:
  - Backport some classic-mode improvements from 3.10 cycle:
    - context menu in window list (close, minimize, maximize)
    - use same order for favorites in applications menu as in dash


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.8.3-1
changelog:
  - Update to 3.8.3
  - Drop mini-extensions default-min-max and static-workspaces, no longer
    available (see https://bugzilla.gnome.org/show_bug.cgi?id=701717)


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.5.1-1
changelog:
  - Update to 3.7.5
  - Enable new launch-new-instance and window-list extensions, and add them in the
    classic-mode extension set
  - Re-add places-menu in the classic-mode extension set


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Enable new default-min-max and static-workspaces extensions
  - Provide new subpackage gnome-classic-session
  - Revamp summaries and descriptions


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.1.91-3.20111001gite102c0c6
changelog:
  - Update to a newer git snapshot
  - Fix GNOME Shell version to work with GS 3.2.0
  - Add Requires on GS 3.2.0 or above to gnome-shell-common


author: Michel Salim <salimma@fedoraproject.org> - 3.1.4-1
changelog:
  - Update to 3.1.4
  - Enable systemMonitor extension
  - Prepare xrandr-indicator, commenting out since it does not seem to work yet
  - Rename subpackages in line with new guidelines (# 715367)
  - Sort subpackages in alphabetical order


author: Timur Kristóf <venemo@fedoraproject.org> - 3.0.2-1.g63dd27cgit
changelog:
  - Update to a newer git snapshot
  - Fix RHBZ bug #708230
  - Enabled systemMonitor extension, but commented out since the requirements are not available


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193506)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Touch XvMCConfig during install phase, and add to file manifest as a ghost
    file, so that it is owned by the package if the user creates it. (#192254)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXvMC to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-18
changelog:
  - Add fedora-dmraid-activation script and dmraid-activation.service systemd unit.
    This replaces dmraid activation part of the former fedora-storage-init
    script that was included in the initscripts package before.
  - Add 'Requires: systemd' to dmraid package.


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-12
changelog:
  - Create symlink from full versioned libdmraid dso file to libdmraid.so.1
    (ie. soname we use for linking)
  - Resolves: bz#557276


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - return full internal library name as a combination of library
    major, minor, subminor and suffix numbers on calls to libdmraid_version()
  - Related: bz#556863


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-9
changelog:
  - bz554754: switch to using /var/cache/logwatch/dmeventd/syslogpattern.txt;
    explicitly claim logwatch files in dmraid-events-logwatch


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-4
changelog:
  - bz505562: ddf1 metadata format handler LSI persistent name fix
  - bz524168: fix pdc metadata format handler to report the correct number
    of devices in a RAID10 subset
  - bz528097: move libraries to /lib* in order to avoid catch22
    with unmountable u/usr


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc16-3
changelog:
  - Add Obsoletes for dmraid-libs packages (merged into the main pkg, #524261)
  - Make -devel Require the main package now the dmraid-libs package is gone


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-7
changelog:
  - Fix activation of isw raid sets when the disks have serialnumber longer
    then 16 characters (#490121)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-5
changelog:
  - Make --rm_partitions work with older kernels which return EINVAL when trying
    to remove a partition with a number > 16
  - Document --rm_partitions in the man page


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-8
changelog:
  - Move library into libs subpackage.
  - Fix summary and licence tags.
  - Replace static build with symlink.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-6
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
    - add "DMRAID-" prefix to dmraid UUID string.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-5
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
  - Bug 379951: dmraid needs to activate device-mapper mirror resynchronization error handling


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-2
changelog:
  - Add build dependency on new device-mapper-devel package.
  - Add dependency on device-mapper.
  - Add post and postun ldconfig.
  - Update BuildRoot and Summary.


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc14-1
changelog:
  - asr.c: fixed Adaptec HostRAID DDF1 metadata discovery (bz#211016)
  - ddf1_crc.c: added crc() routine to avoid linking to zlib alltogether,
                because Ubuntu had problems with this
  - dropped zlib build requirement


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-1
changelog:
  - metadata.c: fixed bug returning wrang unified RAID type (bz#210085)
  - pdc.c: fixed magic number check


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc12-1
changelog:
  - sil.c: quorate() OBO fix
  - activate.c: handler() OBO fix
  - added SNIA DDF1 support
  - added reload functionality to devmapper.c
  - added log_zero_sectors() to various metadata format handlers
  - sil.[ch]: added JBOD support


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc11-FC6.2
changelog:
  - Fix bounds checking on hpt37x error log
  - Only build the .so, not the .a
  - Fix asc.c duplication in makefile rule


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc11-FC5_7.1
changelog:
  - jm.c: checksum() calculation
  - misc.c: support "%d" in p_fmt and fix segfault with wrong format identifier
  - nv.c: size fix in setup_rd()
  - activate.c:
          o striped devices could end on non-chunk boundaries
          o calc_region_size() calculated too small sizes causing large
            dirty logs in memory
  - isw.c: set raid5 type to left asymmetric
  - toollib.c: fixed 'No RAID...' message
  - support selection of RAID5 allocation algorithm in metadata format handlers
  - build


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc10-FC5_6
changelog:
  - add doc/dmraid_design.txt to %doc (#181885)
  - add --enable-libselinux --enable-libsepol to configure
  - rebuilt


author: Peter Jones <pjones@redhat.com> 1.0.0.rc9-FC5_2
changelog:
  - update to 1.0.0.rc9
  - make "make install" do the right thing with the DSO
  - eliminate duplicate definitions in the headers
  - export more symbols in the DSO
  - add api calls to retrieve dm tables
  - fix DESTDIR for 'make install' 
  - add api calls to identify degraded devices
  - remove several arch excludes


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc8-FC4_1
changelog:
  - nv.c: fixed stripe size
  - sil.c: avoid incarnation_no in name creation, because the Windows
           driver changes it every time
  - added --ignorelocking option to avoid taking out locks in early boot
    where no read/write access to /var is given


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc6.1-4_FC4
changelog:
  - VIA metadata format handler
  - added RAID10 to lsi metadata format handler
  - "dmraid -rD": file device size into {devicename}_{formatname}.size
  - "dmraid -tay": pretty print multi-line tables ala "dmsetup table"
  - "dmraid -l": display supported RAID levels + manual update
  - _sil_read() used LOG_NOTICE rather than LOG_INFO in order to
    avoid messages about valid metadata areas being displayed
    during "dmraid -vay".
  - isw, sil filed metadata offset on "-r -D" in sectors rather than in bytes.
  - isw needed dev_sort() to sort RAID devices in sets correctly.
  - pdc metadata format handler name creation. Lead to
    wrong RAID set grouping logic in some configurations.
  - pdc RAID1 size calculation fixed (rc6.1)
  - dos.c: partition table code fixes by Paul Moore
  - _free_dev_pointers(): fixed potential OOB error
  - hpt37x_check: deal with raid_disks = 1 in mirror sets
  - pdc_check: status & 0x80 doesn't always show a failed device;
    removed that check for now. Status definitions needed.
  - sil addition of RAID sets to global list of sets
  - sil spare device memory leak
  - group_set(): removal of RAID set in case of error
  - hpt37x: handle total_secs > device size
  - allow -p with -f
  - enhanced error message by checking target type against list of
    registered target types


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 0.1.33-1
changelog:
  - New upstream version
  - Add some translated profile descriptions for the CMYK profiles
  - Add the FOGRA45L and FOGRA47L CMYK and eciRGBv1 profiles
  - Check the generated CCMX matrix for invalid data
  - Do not print a warning if the DBus property does not exist
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'
  - Always write C-locale floating point values in IT8 files
  - Initialize the value of the CCMX matrix
  - Never promote localized v2 ICC profiles to v4
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint


author: Richard Hughes <richard@hughsie.com> 0.1.32-1
changelog:
  - New upstream version
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles
  - Add translated descriptions to the ICC profiles


author: Richard Hughes <richard@hughsie.com> 0.1.31-1
changelog:
  - New upstream version
  - Calculate the display calibration based on the Lab and target display gamma
  - Interpolate the gamma data to the VCGT size using Akima
  - Add some more display vendor names to the display fixup table
  - Fix the argyll sensor driver when using the ColorMunki Smile
  - Fix the gamut warning to check primaries wider than CIERGB and ProPhoto
  - Move the private sensor libraries out of the pure lib space


author: Richard Hughes <richard@hughsie.com> 0.1.30-1
changelog:
  - New upstream version
  - Append -private to the driver libraries as they have no headers installed
  - Do not show duplicate profiles when icc-profiles-openicc is installed
  - Speed up the daemon loading and use less I/O at startup


author: Richard Hughes <richard@hughsie.com> 0.1.29-1
changelog:
  - New upstream version
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Allow profiles to have a 'score' which affects the standard space
  - Change the Adobe RGB description to be 'Compatible with Adobe RGB (1998)'
  - Detect profiles from adobe.com and color.org and add metadata
  - Do not auto-add profiles due to device-id metadata if they have been removed
  - Ensure profiles with MAPPING_device_id get auto-added to devices
  - Install various helper libraries for access to hardware
  - Set the additional 'OwnerCmdline' metadata on each device


author: Richard Hughes <richard@hughsie.com> 0.1.28-1
changelog:
  - New upstream version
  - Add some default GSetting schema values for the calibration helper
  - Add the sensor images as metadata on the D-Bus interface
  - Quit the session helper if the device or sensor was not found


author: Richard Hughes <richard@hughsie.com> 0.1.27-4
changelog:
  - Add BR systemd-devel so the seat tracking stuff works
  - Build with full compiler output
  - Do not build the profiles in parallel, backported from upstream
  - Limit the memory allocation to 2GiB when building profiles
  - Do not attempt to build the print profiles on ARM or PPC hardware


author: Kalev Lember <kalevlember@gmail.com> 0.1.27-2
changelog:
  - Split out libcolord to colord-libs subpackage, so that the daemon package
    doesn't get multilibbed


author: Richard Hughes <richard@hughsie.com> 0.1.27-1
changelog:
  - New upstream version
  - Add some more calibration attach images
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version
  - Add a session helper that can be used to calibrate the screen
  - Add some defines for the Spyder4 display colorimeter
  - Add support for reading and writing .cal files to CdIt8
  - Add the ability to 'disable' a device from a color POV
  - Create ICCv2 profiles when using cd-create-profile
  - Use enumerated error values in the client library
  - Use spotread when there is no native sensor driver


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version
  - Add a create-standard-space sub-command to cd-create-profile
  - Add a profile metadata key of 'License'
  - Add a set-version command to the cd-fix-profile command line tool
  - Create linear vcgt tables when using create-x11-gamma
  - Fix GetStandardSpace so it can actually work
  - Move the named color examples to shared-color-profiles


author: Richard Hughes <richard@hughsie.com> 0.1.24-1
changelog:
  - New upstream version
  - Fix a critical warning when user tries to dump a non-icc file
  - Remove libsane support and rely only on udev for scanner information
  - Set the seat for devices created in the session and from udev


author: Richard Hughes <richard@hughsie.com> 0.1.22-1
changelog:
  - New upstream version
  - Split out colord-gtk to a new sub-project to prevent a dep loop
  - Add many generic introspection type arguments
  - Check any files in /usr/share/color/icc have the content type
  - Do not create the same object paths if two sensors are plugged in
  - Fix the udev rules entry for the i1Display3


author: Richard Hughes <richard@hughsie.com> 0.1.21-1
changelog:
  - New upstream version
  - Do not install any parts of colord-sane if --disable-sane is specified
  - Fix InstallSystemWide() by not writing a private file
  - Save the CCMX and ITx files to be compatible with argyllcms
  - The ColorHug has a new VID and PID


author: Richard Hughes <richard@hughsie.com> 0.1.20-1
changelog:
  - New upstream version
  - Add a sensor-set-options command to the colormgr tool
  - Add the concept of 'options' on each color sensor device
  - Enable gtk-doc in the default distro build


author: Richard Hughes <richard@hughsie.com> 0.1.18-1
changelog:
  - New upstream version
  - Add a Manager.CreateProfileWithFd() method for QtDBus
  - Split out the SANE support into it's own process
  - Fix a small leak when creating devices and profiles in clients
  - Fix cd-fix-profile to add and remove metadata entries
  - Install per-machine profiles in /var/lib/colord/icc


author: Richard Hughes <richard@hughsie.com> 0.1.17-1
changelog:
  - New upstream version
  - Add an LED sample type
  - Add PrivateNetwork and PrivateTmp to the systemd service file
  - Fix InstallSystemWide() when running as the colord user


author: Richard Hughes <richard@hughsie.com> 0.1.16-1
changelog:
  - New upstream version
  - Now runs as a colord user rather than as root.
  - Support more ICC metadata keys
  - Install a systemd service file
  - Support 2nd generation Huey hardware


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream version
  - This release fixes an important security bug: CVE-2011-4349.
  - Do not crash the daemon if adding the device to the db failed
  - Fix a memory leak when getting properties from a device


author: Richard Hughes <richard@hughsie.com> 0.1.13-1
changelog:
  - New upstream version
  - Ensure uid 0 can always create devices and profiles
  - Reduce the CPU load of clients when assigning profiles


author: Richard Hughes <richard@hughsie.com> 0.1.11-2
changelog:
  - Remove the sedding libtool's internals as it breaks
    generation of the GObject Introspection data.


author: Richard Hughes <richard@hughsie.com> 0.1.8-1
changelog:
  - New upstream version
  - Add a webcam device kind
  - Add a timestamp when making profiles default
  - Add support for reading and writing ICC profile metadata
  - Allow the client to pass file descriptors out of band to CreateProfile
  - Prettify the device vendor and model names
  - Split out the sensors into runtime-loadable shared objects
  - Provide some GIO async variants for the methods in CdClient
  - Ensure GPhoto2 devices get added to the device list


author: Richard Hughes <richard@hughsie.com> 0.1.7-1
changelog:
  - New upstream version.
  - Create /var/lib/colord at buildtime not runtime for SELinux
  - Ensure profiles with embedded profile checksums are parsed correctly
  - Move the colorimeter rules to be run before 70-acl.rules
  - Stop watching the client when the sensor is finalized
  - Ensure the source is destroyed when we unref CdUsb to prevent a crash
  - Only enable the volume mount tracking when searching volumes


author: Ville Skyttä <ville.skytta@iki.fi> - 0.9.94-4
changelog:
  - Patch delete to actually behave as delete instead of backspace, include
    keybindings.properties in docs (#720170).
  - Drop executable bit from jar.
  - Crosslink with local javadocs.
  - Include LICENSE.txt in -javadoc.


author: Mat Booth <fedora@matbooth.co.uk> - 0.9.94-2
changelog:
  - Remove pre-built Windows-only binary artifacts.
  - Demo package was defined but never built for some reason.
  - Don't also package jar in the javadoc package!
  - Drop versioned java and javadocs.


author: Mat Booth <fedora@matbooth.co.uk> - 0.9.94-1
changelog:
  - Remove bundled jars in %prep phase.
  - Tidy up spec file, fix some rpmlint warnings.
  - Add pom and depmaps.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-6
changelog:
  - Fix bogus dates in the %changelog
  - Backport better SSL protocol support and documentation
    Resolves: #1273016
  - Minor fixes in options, usage message and man page
    Resolves: #949013


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.8-8
changelog:
  - Rediff all patches to work with patch --fuzz=0
  - Replace server(smtp) requires by procmail
    Resolves: #66396


author: Miloslav Trmac <mitr@redhat.com> - 6.3.3-2
changelog:
  - Fix some type mismatches on 64-bit architectures
  - Fix checking for res_* on architectures with newer glibc ABI


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to Robert Scheck's fix for capa probing endless loop on pop servers
    which don't support capa (#115474)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split the use-correct-service-name and check-for-gssapi-in-pop portions of
    gssapi+pop fix into pieces
  - only trigger pop capa probe if authentication method != password


author: Nalin Dahyabhai <nalin@redhat.com> 6.2.0-8
changelog:
  - add patch to not truncate headers which have been munged to include a
    hostname where one didn't exist before (CAN-2003-0792), backport from fix
    for 6.2.4 included in 6.2.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to reject bogusly large message counts, backported from 5.9.10
  - build for RHL 6.2 errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "any" authentication (#32527)
  - accept more arguments to --auth
  - parse "auth password" correctly in the configuration file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 5.7.2
  - call AC_PROG_MAKE_SET in configure.in
  - fix various things which cause it to not compile if gssapi is enabled


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.2.7
  - add patch so that fetchmailconf will not output ssl configure statements
    is no ssl is configured


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-84
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704362 and rhbz#1703530


author: Victor Stinner <vstinner@redhat.com> - 2.7.5-80
changelog:
  - Security fix for CVE-2019-5010: crash on parsing a specially crafted X509 certificate
    (resolves: rhbz#1666788)


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-79
changelog:
  - Moved the macros.python/2 files into their own packages python/2-rpm-macros
  Resolves: rhbz#1679221


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-74
changelog:
  - Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
    a one-to-one Pid -> process mapping
  Resolves: rhbz#1579432


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-72
changelog:
  - Fix CVE-2018-1060 and CVE-2018-1061
  Resolves: rhbz#1563454 and rhbz#1549192
  - Provide python2-libs from the python-libs subpackage
  Resolves: rhbz#1557460


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-71
changelog:
  - Limit the number of CPU cores when building the package on power architectures
  Resolves: rhbz#1568974


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-68
changelog:
  - Add Conflicts tag with old virtualenv versions due to new behaviour of
    httplib (patch 295)
  Resolves: rhbz#1483438


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-65
changelog:
  - Fix hanging of all threads when trying to access an inaccessible NFS server.
  Resolves: rhbz#1520068


author: Petr Viktorin <pviktori@redhat.com> - 2.7.5-63
changelog:
  - Make it more likely for the system allocator to release free()d memory arenas
  Resolves: rhbz#1468410


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-57
changelog:
  - Fix implicit declaration warnings of functions added by patches 147 and 265
  Resolves: rhbz#1441237


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-52
changelog:
  - Workaround Python's threading library issue with non returning wait, for signals with timeout
  Resolves: rhbz#1368076


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-49
changelog:
  - Fix ssl module's parsing of GEN_RID subject alternative name fields in X.509 certs
  Resolves: rhbz#1364444


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-47
changelog:
  - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.get_data()
  Resolves: rhbz#1356364


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-46
changelog:
  - Drop patch 221 that backported sslwrap function since it was introducing regressions
  - Refactor patch 227
  Resolves: rhbz#1331425


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-45
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346357


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-39
changelog:
  - Removal of the '$Date$' placeholder on the python(1) man page footer,
  which does not expand during build
  Resolves: rhbz#1268310


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-38
changelog:
  - Fix hashlib algorithms breaking by initializing OpenSSL_add_all_digests
  function in _hashlib library
  Resolves: rhbz#1295459


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-32
changelog:
  - Backport SSLSocket.version function
  - Temporary disable test_gdb on ppc64le rhbz#1260558
  Resolves: rhbz#1259421


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-23
changelog:
  - Fixed CVE-2013-1753, CVE-2013-1752, CVE-2014-4616, CVE-2014-4650, CVE-2014-7185
  Resolves: rhbz#1206574


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-2
changelog:
  - Pulled patch fixing build with libffi containing multilib wrapper for ffi.h
      from Fedora (rhbz#979696)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-1
changelog:
  - Updated to Python 2.7.5.
  - Refreshed patches: 0 (config), 102 (lib64), 121 (add Modules to build path),
  153 (gdb test noise)
  - Dropped patches: 126, 127 (big endian issues, both fixed upstream),
  175 (configure -Wformat, fixed upstream)
  - Synced patch numbers with python3.spec.


author: Kalev Lember <kalevlember@gmail.com> - 2.7.4-2
changelog:
  - Build with libdb 5.3 instead of libdb4
  - Refreshed patches: 0 (config), 102 (lib64)
  - Dropped patches: 54 (db4 version), 159 (db4 include path adjustment)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-1
changelog:
  - Updated to Python 2.7.4.
  - Refreshed patches: 0 (config), 7 (sqlite encoding), 16 (rpath in config),
  55 (systemtap), 111 (no static lib), 112 (debug build), 113 (more
  configuration flags), 130 (add extension to python config), 134 (fix
  COUNT_ALLOCS in test_sys), 146 (haslib FIPS), 147 (add debug malloc stats),
  153 (fix gdb test noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests), 165 (crypt module salt backport),
  175 (fix configure Wformat), 5000 (regenerated autotooling patch)
  - Dropped patches: 101 (lib64 regex; merged upstream), 171 (exception on
  missing /dev/urandom; merged upstream), 172 (poll for multiprocessing socket
  connection; merged upstream)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-34
changelog:
  - restrict scope of workaround for cmpi-bindings issue to avoid breaking
  in-tree running of test_sys and test_subprocess (rhbz#817554)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-27
changelog:
  - port _multiprocessing.Connection.poll() to use the "poll" syscall, rather
  than "select", allowing large numbers of subprocesses (patch 172;
  rhbz#849992)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-25
changelog:
  - in debug builds, try to print repr() when a C-level assert fails in the
  garbage collector (typically indicating a reference-counting error somewhere
  else e.g in an extension module) (patch 170; rhbz#850013)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-23
changelog:
  - use SHA-256 rather than implicitly using MD5 within the challenge handling
  in multiprocessing.connection (patch 169; rhbz#879695)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-22
changelog:
  - fix a problem with distutils.sysconfig when CFLAGS is defined in the
  environment (patch 168; rhbz#849994)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-19
changelog:
  - bulletproof the gdb debugging hooks against a failure seen in ARM builds
  (patch 166; rhbz#912025)
  - re-enable make check on ARM (rhbz#912025)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-17
changelog:
  - remove "_default_patch_fuzz" directive to avoid patches being silently
  misapplied (refresh patch 1, patch 101, patch 102, patch 111, patch 121,
  patch 158; rename patch 1, patch 101, patch 121; apply patch 54 before the
  lib64 patches to avoid fuzz problems caused by the conditional application
  of the lib64 patches)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.3-11
changelog:
  - fix memory leak in module _hashlib (patch 158, rhbz#836285)
  - fix db4 include path for libdb4 package (f18 and above) (patch 159)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-8
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures (patch 157; rhbz#697470)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-4
changelog:
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when embedding
  Python within httpd (patch 155; rhbz#814391)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-1
changelog:
  - 2.7.3: refresh patch 102 (lib64); drop upstream patches 11 (ascii-to-lower),
  115 (pydoc robustness), 145 (linux2), 148 (gdbm magic values), 151 (deadlock
  in fork); refresh patch 112 (debug build); revise patch 127
  (test_structmember); fix test_gdb (patch 153); refresh patch 137 (distutils
  tests); add python2.pc to python-devel; regenerate the autotool intermediates
  patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-14
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib, and thus within md5 etc
  (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-11
changelog:
  - rename and renumber patches for consistency with python3.spec (55, 111, 113,
  114, 125, 131, 129 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-10
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before (patches 104, 133-142)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-7
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 129; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-3
changelog:
  - reorganize test exclusions (test_openpty and test_pty seem to be failing on
  every arch, not just the explicitly-listed ones)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-1
changelog:
  - 2.7.2; drop upstreamed patches: patch 122 (parallel make fix), patch 124
  (test_commands and SELinux), patch 130 (ppc preprocessor macro in debug
  build); patch 131 (decimal in Turkish locale); regenerate the autotool
  intermediates patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-4
changelog:
  - for now, drop "obsoletes" of python-argparse, since it interracts badly with
  multilib (rhbz#667984)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-1
changelog:
  - 2.7.1, reworking patch 0 (config), patch 102 (lib64); drop upstream
  patch 56 (cfgparse), patch 110 (ctypes/SELinux/noexecmem), patch 119 (expat
  compat), patch 123 (2to3 on "from itertools import *")
  - fix test_abc's test_cache_leak in the debug build (patch 128)
  - drop _weakref.so from manifest (_weakref became a core module in r84230)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-9
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 2.7-8
changelog:
  - add %check section
  - update lib64 patch (patch 102) to fix expected output in test_site.py on
  64-bit systems
  - patch test_commands.py to work with SELinux (patch 124)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-6
changelog:
  - re-enable systemtap
  - cherrypick upstream patch to 2to3 for "from itertools import *"
  traceback (patch 123)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-5
changelog:
  - disable systemtap for now (dtrace is failing on startup due to the bug
  mentioned in 2.7-4)
  - provide relative path to python binary when running pathfix.py
  - fix parallel make (patch 122)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-4
changelog:
  - fix reference to pyconfig.h in sysconfig that led to failure on startup if
  python-devel was not installed


author: David Malcolm <dmalcolm@redhat.com> - 2.7-2
changelog:
  - add machinery for regenerating the "configure" script in the face of
  mismatching autoconf versions (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-1
changelog:
  - 2.7 final; drop alphatag
  - drop patch 117 (upstream), patch 120 (upstreamed)
  - fix the commented-out __python_ver from 26 to 27


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc2
changelog:
  - 2.7rc2
  - revert r79310 (patch 121)
  - remove modulator: upstream removed it in r78338
  - rename mathmodule(_d).so to math(_d).so in manifests (appears to be changed
  by r76861)
  - _bytesio(_d).so and _filesio(_d).so were consolidated into _io(_d).so in
  r73394 (upstream issue 6215)
  - use the gdb hooks from the upstream tarball, rather than keeping our own
  copy. The upstream version has some whitespace changes, a new write_repr for
  unicode objects, and various bulletproofings for being run on older gdbs


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc1
changelog:
  - 2.7rc1:
    - rework patches to apply against 2.7 (which among other changes has had a
  whitespace cleanup of the .c code): .rhconfig (patch0), .binutils-no-dep
  (patch10), .ascii-tolower (patch11), .socketmodule (patch13), .socketmodule2
  (patch14), .systemtap (patch55), .lib64 (patch102), .selinux (patch110),
  .no-static-lib (patch111), .debug-build (patch112), .statvfs-f-flag-constants
  (patch114), ..CVE-2010-2089 (patch117)
    - drop upstream patches: .expat (patch3), .brprpm (patch51), .valgrind
  (patch52), .db48 (patch53), .CVE-2010-1634 (patch 116), .CVE-2008-5983 (patch
  118)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-17
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 120, upstream issue 9058)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-16
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 119; upstream issue 9054)


author: Dan Horák <dan[at]danny.cz> - 2.6.5-14
changelog:
  - reading the timestamp counter is available only on some arches (see Python/ceval.c)
  - disable --with-valgrind on s390(x) arches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-13
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 116)
  - CVE-2010-2089: further checks within the audioop module (patch 117)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 118)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-10
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 113); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-9
changelog:
  - build and install two different configurations of Python: debug and standard,
  packaging the debug build in a new "python-debug" subpackage (patch 112)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-6
changelog:
  - move the "bdist_wininst" command's template .exe files from the core package
  to the devel subpackage, to save space (rhbz:525469)
  - fix stray doublelisting of config directory wildcard in devel subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-4
changelog:
  - update python-gdb.py from v3 to v4 (fixing infinite recursion on reference
  cycles and tracebacks on bytes 0x80-0xff in strings, adding handlers for sets
  and exceptions)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - update to 2.6.5: http://www.python.org/download/releases/2.6.5/
  - replace our patch to compile against db4.8 with a patch from
  upstream (patch 53, from r78974); update patch 54 since part of it is now in
  that upstream patch
  - update patch 110 so that it still applies in the face of upstream r78380


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-23
changelog:
  - fixup distutils/unixccompiler.py to remove standard library path from
  rpath (patch 17)
  - delete DOS batch files


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-22
changelog:
  - add pyfuntop.stp; allow systemtap support to be disabled
  - remove trailing period from tkinter summary
  - don't own /usr/bin/python-config if you're not the main python


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-20
changelog:
  - avoid having the "test" subdirectory and the files within it that are in the
  core subpackage also be owned by the test subpackage (rhbz:467588)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-19
changelog:
  - revise the systemtap patch (patch 55:python-2.6.4-dtrace.patch) to the
  new version by mjw in attachment 390110 of rhbz:545179, as this should
  eliminate the performance penalty for the case where the probes aren't in
  use, and eliminate all architecture-specific code (rhbz:563541; except on
  sparc)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-18
changelog:
  - add a systemtap tapset defining "python.function.entry" and
  "python.function.return" to make it easy to use the static probepoint within
  Python; add an example of using the tapset to the docs


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-17
changelog:
  - add systemtap static probes (wcohen; patch 55; rh bug #545179)
  - update some comments in specfile relating to gdb work
  - manually byte-compile the gdb.py file with the freshly-built python to ensure
  that .pyx and .pyo files make it into the debuginfo manifest if they are later
  byte-compiled after find-debuginfo.sh is run


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-16
changelog:
  - move the -gdb.py file from %{_libdir}/INSTSONAME-gdb.py to
  %{_prefix}/lib/debug/%{_libdir}/INSTSONAME.debug-gdb.py to avoid noise from
  ldconfig (bug 562980), and which should also ensure it becomes part of the
  debuginfo subpackage, rather than the libs subpackage
  - introduce %{py_SOVERSION} and %{py_INSTSONAME} to reflect the upstream
  configure script, and to avoid fragile scripts that try to figure this out
  dynamically (e.g. for the -gdb.py change)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-15
changelog:
  - work around bug 562906 by supplying a fixed version of pythondeps.sh
  - set %{_python_bytecompile_errors_terminate_build} to 0 to prevent the broken
  test files from killing the build on buildroots where python is installed


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-12
changelog:
  - Address some of the issues identified in package review (bug 226342):
    - update libs requirement on base package to use %{name} for consistency's
  sake
    - convert from backticks to $() syntax throughout
    - wrap value of LD_LIBRARY_PATH in quotes
    - convert "/usr/bin/find" requirement to "findutils"
    - remove trailing periods from summaries of -devel and -tools subpackages
    - fix spelling mistake in description of -test subpackage
    - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  stylistic consistency
    - supply dirmode arguments to defattr directives


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-11
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-10
changelog:
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files
  - remove embedded copy of zlib from source tree before building


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-9
changelog:
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-6
changelog:
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - split up the "configure" invocation flags onto individual lines


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-5
changelog:
  - replace usage of %define with %global
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-4
changelog:
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - add patch from Josh Boyer containing diff against upstream PyBSDDB to make
  the bsddb module compile against db-4.8 (patch 53, #544275); bump the necessary
  version of db4-devel to 4.8
  - patch setup.py so that it searches for db-4.8, and enable debug output for
  said search; make Setup.dist use db-4.8 (patch 54)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-3
changelog:
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-2
changelog:
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than 
    having them silently fall out of the package


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps 
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't 
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's 
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-4
changelog:
  - Remove docs from -devel package
  - Upgrade cmake requirement to 2.8.0
  - Add cmake to -devel requires


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5
changelog:
  - Append python-botocore and python-jmespath bundled directory to
    search path where needed

    Resolves: rhbz#1509434


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 1.9.21-1
changelog:
  - Update to current upstream version
  - Don't fix documentation permissions any more (pull request merged)


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 1.9.19-1
changelog:
  - Update to current upstream version
  - Don't substitue the text of bin/aws_bash_completer anymore (pull request merged)
  - Don't remove the shabang from awscli/paramfile.py anymore (pull request merged)


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 1.9.18-1
changelog:
  - Update to current upstream version
  - Fix completion for bash
  - Remove bcdoc dependency that is not used anymore


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 1.9.16-1
changelog:
  - Update to current upstream version
  - Add dir /usr/share/zsh
  - Add dir /usr/share/zsh/site-functions
  - Add MIT license (topictags.py is MIT licensed)
  - Move dependency from python-devel to python2-devel
  - Add Recommends lines for zsh and bsah-completion for Fedora
  - Remove BuildReuires: bash-completion
  - Remove the macros py2_build and py2_install to prefer the extended form
  - Force non-executable bit for documentation
  - Remove shabang from awscli/paramfile.py
  - Fix bash completion
  - Fix zsh completion
  - Remove aws.cmd


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-4
changelog:
  - disable X fonts.dir generation
  - remove obsolete -compat subpackage
  - remove %defattr from %files
  - add missing "make" in %build


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-2
changelog:
  - fix <test> usage in fontconfig files (Closes: #837538)
  - refresh fontconfig files with the latest upstream version


author: Daiki Ueno <dueno@redhat.com> - 0.4.14-1
changelog:
  - update to 0.4.14
  - drop buildroot, %clean and cleaning of buildroot in %install
  - use only macro style %buildroot


author: Jens Petersen <petersen@redhat.com> - 0.4.11-1
changelog:
  - update to 0.4.11
  - repackage and subpackage for new fontpackages-devel:
  - split 90-ttf-thai-tlwg-synthetic.conf per subpackage
  - 65-ttf-thai-tlwg.conf is covered by fontconfig 65-nonlatin.conf
  - moves docs to common subpackage
  - add compat subpackage for upgrades and legacy fonts.*


author: Behdad Esfahbod <besfahbo@redhat.com> 0.4.4-1
changelog:
  - Initial package based on package by Theppitak Karoonboonyanan
    and Kamthorn Krairaksa for the OLPC.


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Nathan Scott <nathans@redhat.com> - 0.4.0-3
changelog:
  - Add in parfait wrapper shell script and man page.
  - Rename the agent package to pcp-parfait-agent.
  - Add in demo applications jars and parfait-examples package.


author: Nathan Scott <nathans@redhat.com> - 0.4.0-2
changelog:
  - Addition of the standalone parfait-agent package.
  - Add in proxy mode from upstream parfait code too.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 3.3.3-3
changelog:
  - After consultation with upstream, enable SSE2 also on x86, altivec on ppc
    and ppc64 and NEON on arm.


author: Rex Dieter <rdieter@fedoraproject.org> 3.3-3
changelog:
  - -devel: Provides: fftw3-devel (#744758)
  - -static: Provides: fftw3-static
  - drop %_isa from Obsoletes


author: Jussi Lehtola <jussilehtola@fedoraproject.org> - 3.2.2-2
changelog:
  - Add check phase.
  - Cosmetic changes to spec file (unified changelog format, removed unnecessary
    space).
  - Use rm instead of find -delete, as latter is not present on EPEL-4.
  - Generalize obsoletes of fftw3 packages. Add Obsoletes: fftw3-static.


author: Orion Poplawski <orion@cora.nwra.com> - 1.4.01-5
changelog:
  - Add missing packages to manifest - javax.xml.stream, javax.xml.stream.events,
    javax.xml.stream.util, javax.xml.transform.stax (bug #743360)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4.01-4
changelog:
  - Add maven metadata
  - Few guidelines tweaks (buildroot, clean, defattr)
  - Versionless jars & javadocs


author: Gary Benson <gbenson@redhat.com> - 0:1.0-0.b2.7jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles the which jar).


author: Gary Benson <gbenson@redhat.com> - 0:1.0-0.b2.7jpp_1fc
changelog:
  - Upgrade to 1.0-0.b2.7jpp.
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-21
changelog:
  - Add systemd_contexts support
  - Do substitutions on a local sub followed by a dist sub
  Resolves: #971425


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use /usr/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws
    lead to arbitrary code execution (CERT VU#887409) (#765660)
  - Fixed problems found by static analysis of code (#761440)
  - spec file modernized


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.900.1-4
changelog:
  - -libs subpkg to be multilib friendlier
  - -utils subpkg for non-essential binaries jiv, tmrdemo (#244153)


author: Petr Machata <pmachata@redhat.com> - 4.1-6.20130314
changelog:
  - Drop ExclusiveArch altogether. TBB has a fallback code that works
    irrespective of the architecture.


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Petr Machata <pmachata@redhat.com> - 4.0-4.20120408
changelog:
  - Rebase to 4.0 update 4
  - Refresh Getting_Started.pdf, Reference.pdf, Tutorial.pdf
  - Provide pkg-config files
  - Resolves: #825402


author: Petr Machata <pmachata@redhat.com> - 3.0-1.20110419
changelog:
  - Rebase to 3.0-r6
    - Port both patches
    - Package Design_Patterns.pdf
    - Thanks to Richard Shaw for initial rebase patch
  - Resolves: #723043


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Peter Hutterer <peter.hutterer@redhat.com> 2.3.0-1
changelog:
  - evdev 2.3.0
  - BuildRequires xorg-x11-util-macros 1.3.0
  - Fix tab/spaces mix in spec file.
  - Use global instead of define.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.0.99-1
changelog:
  - Today's git snapshot.
  - Require xkeyboard-config 1.4 and higher for evdev ruleset.
  - Provide devel subpackage for evdev header files.


author: Adam Jackson <ajax@redhat.com> 2.0.4-3
changelog:
  - evdev-2.0.4-reopen-device.patch: When arming the reopen timer, stash it in
    the driver private, and explicitly cancel it if the server decides to
    close the device for real.
  - evdev-2.0.4-cache-info.patch: Rebase to account for same.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.0.4-2
changelog:
  - evdev-2.0.4-reopen-device.patch: try to reopen devices if a read error
    occurs on the fd.
  - evdev-2.0.4-cache-info.patch: cache device info to ensure reopened device
    isn't different to previous one.


author: Adam Jackson <ajax@redhat.com> 1.99.1-0.4
changelog:
  - Today's snapshot.  Fixes mouse button repeat bug, and therefore Apple
    Mighty Mice are usable.  Props to jkeating for the hardware.


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-evdev to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for evdev input driver generated automatically
    by my xorg-driverspecgen script.


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699413 authentication bypass with an invalid curve attack


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-9
changelog:
  - Fix double free in rlm_sql acct_redundant
    Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                          unknown value" when using module sql rlm_sql


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Do not fail logrotate if radiusd is not running.
    Resolves: Bug#1365226 error running non-shared postrotate script for
                          /var/log/radius/radius.log of
                          '/var/log/radius/radius.log '
  - Fix output to log file specified with -l option.
    Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                          option
  - Fix long hostnames interpreted as IP addresses.
    Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                          name as a domain name
  - Avoid clashes with libtool library symbols.
    Resolves: Bug#1391960 undefined symbol: get_vtable in
                          /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
  - Remove mentions of Auth-Type = System from docs.
    Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
  - Improve ip/v4/v6/addr documentation.
    Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                          and AAAA entries


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                          detail file
    Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
    Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
    Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                          load
    Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
changelog:
  - Upgrade to upstream v3.0.11 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1197551
    Resolves: Bug#1179745
    Resolves: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1289849 FreeRadius should start after ldap, ipa and krb5kdc
    Resolves: Bug#1208886 Add the latest Mikrotik dictionary into Freeradius
    Resolves: Bug#1198620 radutmp should not rotate
    Resolves: Bug#1180979 Freeradius is installing files under /etc/tmpfiles.d/
    Resolves: Bug#1187904 radiusd logrotate config file contains old style
                          "/sbin/service radius reload" reload call
    Resolves: Bug#1167846 radiusd fails to load clients from ldap
    Resolves: Bug#1422018 /usr/lib/systemd/system/radiusd.service is marked
                          executable. Please remove executable permission bits
    Resolves: Bug#1167843 support for older style generic attributes in
                          rlm_ldap doesn't work
    Resolves: Bug#1354234 home servers are marked as dead by radiusd


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751
    Resolves: Bug#1340334 freeradius: Decryption of very long Tunnel-Passwords
                          can cause buffer overflow
  - Remove rlm_eap_tnc support as the required package "tncfhh" was retired.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.9-1
changelog:
  - Upgrade to upstream v3.0.9 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.8-1
changelog:
  - Upgrade to upstream v3.0.8 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.7-1
changelog:
  - Upgrade to upstream v3.0.7 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-6
changelog:
  - Don't remove backslash from unknown escape sequences in LDAP values.
    Resolves: Bug#1173526
  - Improve dhcpclient and rad_counter online help.
    Resolves: Bug#1146966
  - raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
    to trigger variables from module configurations.
    Resolves: Bug#1155961
  - Fix ipaddr option fallback onto ipv6.
    Resolves: Bug#1168868
  - raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
    Resolves: Bug#1168247


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-5
changelog:
  - Disable rlm_rest building explicitly to avoid unintended builds on some
    architectures breaking RPM build.
    Resolves: Bug#1162156
  - Add -D option support to dhcpclient.
    Related: Bug#1146939
  - Don't install rbmonkey - a test tool only useful to developers.
    Related: Bug#1146966
  - Update clients(5) man page
    Resolves: Bug#1147464


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-4
changelog:
  - Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
  - Fix file configuration item parsing.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
changelog:
  - Fix a number of trigger issues.
    Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
                          files'"
    Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
                          opened,closed or fail
    Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
                          fails/opens/closes
    Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
                          and incomplete
  - Fix two omissions from radtest manpage.
    Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
                          of radtest man page
    Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
    confirm heartbleed is fixed.
    Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
                          OpenSSL version check


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
changelog:
  - Fix abort on home server triggers.
    Resolves: Bug#1113509 radiusd aborts when it has no proxy response with active
                          snmp traps
  - Fix segfault upon example.pl read failure.
    Resolves: Bug#1146403 radiusd segfaults when file for perl module has
                          wrong permissions
  - Fix example.pl permissions.
    Resolves: Bug#1146406 /etc/raddb/mods-config/perl/example.pl has wrong
                          permissions and radiusd fails to start
  - Fix integer handling in various cases.
    Resolves: Bug#1146441 upstream test suite fails
  - Fix dhcpclient's dictionary.dhcp loading.
    Resolves: Bug#1146939 dhcpclient lookups dictionary.dhcp file in wrong
                          location


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
changelog:
  - Upgrade to upstream 3.0.4 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
changelog:
  - Upgrade to upstream 3.0.4-rc2 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Add installation of SNMP MIB files.
  - Resolves: Bug#1036562 Missing doc page for kerberos module
  - Resolves: Bug#1099625 Default message digest defaults to sha1
  - Resolves: Bug#1109159 missing mib files in freeradius package
  - Resolves: Bug#1113010 radiusd doesn't send snmp trap when max_threads value
                          is reached
  - Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Resolves: Bug#1115128 radisud can't start if proto = udp is specified
  - Resolves: Bug#1115134 radiusd aborts after 'Access-Request' when listens on
                          TCP port
  - Resolves: Bug#1115137 radiusd listens on udp port even if proto = tcp is
                          specified
  - Resolves: Bug#1126725 radiusd silently fails when start_servers is higher
                          than max_servers
  - Resolves: Bug#1135446 Radeapclient is not available


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-6
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: John Dennis <jdennis@redhat.com> - 3.0.1-3
changelog:
  - resolves: bug#1055073 (fedora 1055072)
    rlm_ippool; bad config file attribute and fails to send reply attributes
  - resolves: bug#1055567 (fedora 1056227)
    bad mysql sql syntax
  - change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
    where gdb will not display source information, only <command-line>


author: John Dennis <jdennis@redhat.com> - 3.0.1-1
changelog:
  - Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
    This is a roll-up of all upstream bugs fixes found in 3.0.0
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - resolves: bug#1052450 (fedora 1053020)
  - resolves: bug#1044748 (fedora 1044747)
  - resolves: bug#1048475 (fedora 1048474)
  - resolves: bug#1043037 (fedora 1043036)


author: John Dennis <jdennis@redhat.com> - 3.0.0-4
changelog:
  - resolves: bug#1031035
    remove radeapclient man page,
    upstream no longer supports radeapclient, use eapol_test instead
  - resolves: bug#1031061
    rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
  - move man pages for utils into utils subpackage from doc subpackage
  - fix HAVE_EC_CRYPTO test to include f20
  - add new directory /var/run/radiusd/tmp
    update mods-available/eap so tls-common.verify.tmpdir to point to it


author: John Dennis <jdennis@redhat.com> - 2.2.0-3
changelog:
  - specify homedir (/var/lib/radiusd) for radiusd user in useradd,
    do not permit useradd to default the homedir.


author: John Dennis <jdennis@redhat.com> - 2.2.0-1
changelog:
  - resolves: bug#876564 - fails to start without freeradius-mysql
  - use upstream version of freeradius-exclude-config-file.patch


author: John Dennis <jdennis@redhat.com> - 2.2.0-0
changelog:
  - Add new patch to avoid reading .rpmnew, .rpmsave and other invalid
    files when loading config files
  - Upgrade to new 2.2.0 upstream release
  - Upstream changelog for 2.1.12:
    Feature improvements
    * 100% configuration file compatible with 2.1.x.
      The only fix needed is to disallow "hashsize=0" for rlm_passwd
    * Update Aruba, Alcatel Lucent, APC, BT, PaloAlto, Pureware,
      Redback, and Mikrotik dictionaries
    * Switch to using SHA1 for certificate digests instead of MD5.
      See raddb/certs/*.cnf
    * Added copyright statements to the dictionaries, so that we know
      when people are using them.
    * Better documentation for radrelay and detail file writer.
      See raddb/modules/radrelay and raddb/radrelay.conf
    * Added TLS-Cert-Subject-Alt-Name-Email from patch by Luke Howard
    * Added -F <file> to radwho
    * Added query timeouts to MySQL driver.  Patch from Brian De Wolf.
    * Add /etc/default/freeradius to debian package.
      Patch from Matthew Newton
    * Finalize DHCP and DHCP relay code.  It should now work everywhere.
      See raddb/sites-available/dhcp, src_ipaddr and src_interface.
    * DHCP capabilitiies are now compiled in by default.
      It runs as a DHCP server ONLY when manually enabled.
    * Added one letter expansions: %G - request minute and %I request
      ID.
    * Added script to convert ISC DHCP lease files to SQL pools.
      See scripts/isc2ippool.pl
    * Added rlm_cache to cache arbitrary attributes.
    * Added max_use to rlm_ldap to force connection to be re-established
      after a given number of queries.
    * Added configtest option to Debian init scripts, and automatic
      config test on restart.
    * Added cache config item to rlm_krb5. When set to "no" ticket
      caching is disabled which may increase performance.

    Bug fixes
    * Fix CVE-2012-3547.  All users of 2.1.10, 2.1.11, 2.1.12,
      and 802.1X should upgrade immediately.
    * Fix typo in detail file writer, to skip writing if the packet
      was read from this detail file.
    * Free cached replies when closing resumed SSL sessions.
    * Fix a number of issues found by Coverity.
    * Fix memory leak and race condition in the EAP-TLS session cache.
      Thanks to Phil Mayers for tracking down OpenSSL APIs.
    * Restrict ATTRIBUTE names to character sets that make sense.
    * Fix EAP-TLS session Id length so that OpenSSL doesn't get
      excited.
    * Fix SQL IPPool logic for non-timer attributes.  Closes bug #181
    * Change some informational messages to DEBUG rather than error.
    * Portability fixes for FreeBSD.  Closes bug #177
    * A much better fix for the _lt__PROGRAM__LTX_preloaded_symbols
      nonsense.
    * Safely handle extremely long lines in conf file variable expansion
    * Fix for Debian bug #606450
    * Mutex lock around rlm_perl Clone routines. Patch from Eike Dehling
    * The passwd module no longer permits "hashsize = 0".  Setting that
      is pointless for a host of reasons.  It will also break the server.
    * Fix proxied inner-tunnel packets sometimes having zero authentication
      vector.  Found by Brian Julin.
    * Added $(EXEEXT) to Makefiles for portability.  Closes bug #188.
    * Fix minor build issue which would cause rlm_eap to be built twice.
    * When using "status_check=request" for a home server, the username
      and password must be specified, or the server will not start.
    * EAP-SIM now calculates keys from the SIM identity, not from the
      EAP-Identity.  Changing the EAP type via NAK may result in
      identities changing.  Bug reported by Microsoft EAP team.
    * Use home server src_ipaddr when sending Status-Server packets
    * Decrypt encrypted ERX attributes in CoA packets.
    * Fix registration of internal xlat's so %{mschap:...} doesn't
      disappear after a HUP.
    * Can now reference tagged attributes in expansions.
      e.g. %{Tunnel-Type:1} and %{Tunnel-Type:1[0]} now work.
    * Correct calculation of Message-Authenticator for CoA and Disconnect
      replies.  Patch from Jouni Malinen
    * Install rad_counter, for managing rlm_counter files.
    * Add unique index constraint to all SQL flavours so that alternate
      queries work correctly.
    * The TTLS diameter decoder is now more lenient.  It ignores
      unknown attributes, instead of rejecting the TTLS session.
    * Use "globfree" in detail file reader.  Prevents very slow leak.
      Closes bug #207.
    * Operator =~ shouldn't copy the attribute, like :=.  It should
      instead behave more like ==.
    * Build main Debian package without SQL dependencies
    * Use max_queue_size in threading code
    * Update permissions in raddb/sql/postgresql/admin.sql
    * Added OpenSSL_add_all_algorithms() to fix issues where OpenSSL
      wouldn't use methods it knew about.
    * Add more sanity checks in dynamic_clients code so the server won't
      crash if it attempts to load a badly formated client definition.


author: John Dennis <jdennis@redhat.com> - 2.1.12-6
changelog:
  Fixing bugs in RHEL6 rebase, applying fixes here as well
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#781877 (from RHEL5) rlm_dbm_parse man page misspelled
  - resolves: bug#760193 (from RHEL5) radtest PPPhint option is not parsed properly


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#781744
    systemd service file incorrectly listed pid file as
    /var/run/radiusd/radiusd which it should have been
    /var/run/radiusd/radiusd.pid


author: John Dennis <jdennis@redhat.com> - 2.1.12-2
changelog:
  - rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf
    remove config(noreplace) because it must match files section and
    permissions differ between versions.
  - fixup macro usage for /var/run & /var/lib


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.11-1
changelog:
  - Upgrade to latest upstream release: 2.1.11
  - Remove the following two patches as upstream has incorporated them:
      freeradius-radtest-ipv6.patch
      freeradius-lt-dladvise.patch
  - Upstream changelog for 2.1.11:
    Feature improvements
    * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
      All vendors need to read it and follow its directions.
    * Microsoft SoH support for PEAP from Phil Mayers.
      See doc/SoH.txt
    * Certificate "bootstrap" script now checks for certificate expiry.
      See comments in raddb/eap.conf, and then "make_cert_command".
    * Support for dynamic expansion of EAP-GTC challenges.
      Patch from Alexander Clouter.
    * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
      section.
    * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
    * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
    * Experimental redis support from Gabriel Blanchard.
      See raddb/modules/redis and raddb/modules/rediswho
    * Add "key" to rlm_fastusers.  Closes bug #126.
    * Added scripts/radtee from original software at
      http://horde.net/~jwm/software/misc/comparison-tee
    * Updated radmin "man" page for new commands.
    * radsniff now prints the hex decoding of the packet (-x -x -x)
    * mschap module now reloads its configuration on HUP
    * Added experimental "replicate" module.  See raddb/modules/replicate
    * Policy "foo" can now refer to module "foo".  This lets you
      over-ride the behavior of a module.
    * Policy "foo.authorize" can now over-ride the behavior of module
      "foo", "authorize" method.
    * Produce errors in more situations when the configuration files
      have invalid syntax.

    Bug fixes
    * Ignore pre/post-proxy sections if proxying is disabled
    * Add configure checks for pcap_fopen*.
    * Fix call to otp_write in rlm_otp
    * Fix issue with Access-Challenge checking from 2.1.10, when the
      debug flag was set after server startup.  Closes #116 and #117.
    * Fix typo in zombie period start time.
    * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
    * Allow radtest to use spaces in shared secret.
      Patch from Cedric Carree.
    * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
      Patch from James Ballantine.
    * Remove MN-FA key generation.  The NAS does this, not AAA.
      Patch from Ben Weichman.
    * Include dictionary.mikrotik by default.  Closes bug #121.
    * Add group membership query to MS-SQL examples.  Closes bug #120.
    * Don't cast NAS-Port to integer in Postgresql queries.
      Closes bug #112.
    * Fixes for libtool and autoconf from Sam Hartman.
    * radsniff should read the dictionaries in more situations.
    * Use fnmatch to check for detail file reader==writer.
      Closes bug #128.
    * Check for short writes (i.e. disk full) in rlm_detail.
      Closes bug #130.  Patches and testing from John Morrissey.
    * Fix typo in src/lib/token.c.  Closes bug #124
    * Allow workstation trust accounts to use MS-CHAP.
      Closes bug #123.
    * Assigning foo=`/bin/echo hello` now produces a syntax error
      if it is done outside of an "update" section.
    * Fix "too many open file descriptors" problem when using
      "verify client" in eap.conf.
    * Many fixes to dialup_admin for PHP5, by Stefan Winter.
    * Allow preprocess module to have "hints = " and "huntgroups =",
      which allows them to be empty or non-existent.
    * Renamed "php3" files to "php" in dialup_admin/
    * Produce error when sub-TLVs are used in a dictionary.  They are
      supported only in the "master" branch, and not in 2.1.x.
    * Minor fix in dictionary.redback.  Closes bug #138.
    * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
    * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
      Closes bug #118.
    * DHCP fixes to send unicast packets in more situations.
    * Fix to udpfromto, to enable it to work on IPv6 networks.
    * Fixes to the Oracle accounting_onoff_query.
    * When using both IPv4 and IPv6 home servers, ensure that we use the
      correct local socket for proxying.  Closes bug #143.
    * Suppress messages when thread pool is nearly full, all threads
      are busy, and we can't create new threads.
    * IPv6 is now enabled for udpfromto.  Closes bug #141
    * Make sqlippool query buffer the same size as sql module.
      Closes bug #139.
    * Make Coa / Disconnect proxying work again.
    * Configure scripts for rlm_caching from Nathaniel McCallum
    * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
    * Updated password routines to use time-insensitive comparisons.
      This prevents timing attacks (though none are known).
    * Allow sqlite module to do normal SELECT queries.
    * rlm_wimax now has a configure script
    * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
      files.  See share/dictionary for explanations.
    * Check for duplicate module definitions in the modules{} section,
      and refuse to start if duplicates are found.
    * Check for duplicate virtual servers, and refuse to start if
      duplicates are found.
    * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
    * Check pre-conditions before running radmin "inject file".
    * Don't over-ride "no match" with "match" for regexes.
      Closes bug #152.
    * Make retry and error message configurable in mschap.
      See raddb/modules/mschap
    * Allow EAP-MSCHAPv2 to send error message to client.  This change
      allows some clients to prompt the user for a new password.
      See raddb/eap.conf, mschapv2 section, "send_error".
    * Load the default virtual server before any others.
      This matches what users expect, and reduces confusion.
    * Fix configure checks for udpfromto.  Fixes Debian bug #606866
    * Definitive fix for bug #35, where the server could crash under
      certain loads.  Changes src/lib/packet.c to use RB trees.
    * Updated "configure" checks to allow IPv6 udpfromto on Linux.
    * SQL module now returns NOOP if the accounting start/interim/stop
      queries don't do anything.
    * Allow %{outer.control: ... } in string expansions
    * home_server coa config now matches raddb/proxy.conf
    * Never send a reply to a DHCP Release.


author: John Dennis <jdennis@redhat.com> - 2.1.10-7
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - bug 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - resolves: bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-3
changelog:
  - resolves: bug #522111 non-conformant initscript
    also change permission of /var/run/radiusd from 0700 to 0755
    so that "service radiusd status" can be run as non-root


author: John Dennis <jdennis@redhat.com> - 2.1.7-1
changelog:
  - enable building of the rlm_wimax module
  - pcap wire analysis support is enabled and available in utils subpackage
  - Resolves bug #523053 radtest manpage in wrong package
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * Full support for CoA and Disconnect packets as per RFC 3576
        and RFC 5176.  Both receiving and proxying CoA is supported.
      * Added "src_ipaddr" configuration to "home_server".  See
        proxy.conf for details.
      * radsniff now accepts -I, to read from a filename instead of
        a device.
      * radsniff also prints matching requests and any responses to those
        requests when '-r' is used.
      * Added example of attr_filter for Access-Challenge packets
      * Added support for udpfromto in DHCP code
      * radmin can now selectively mark modules alive/dead.
        See "set module state".
      * Added customizable messages on login success/fail.
        See msg_goodpass && msg_badpass in log{} section of radiusd.conf
      * Document "chase_referrals" and "rebind" in raddb/modules/ldap
      * Preliminary implementation of DHCP relay.
      * Made thread pool section optional.  If it doesn't exist,
        the server will run single-threaded.
      * Added sample radrelay.conf for people upgrading from 1.x
      * Made proxying more stable by failing over, rather than
        rejecting the first request.  See "response_window" in proxy.conf
      * Allow home_server_pools to exist without realms.
      * Add dictionary.iea (closes bug #7)
      * Added support for RFC 5580
      * Added experimental sql_freetds module from Gabriel Blanchard.
      * Updated dictionary.foundry
      * Added sample configuration for MySQL cluster in raddb/sql/ndb
        See the README file for explanations.
    Bug fixes
      * Fixed corner case where proxied packets could have extra
        character in User-Password attribute.  Fix from Niko Tyni.
      * Extended size of "attribute" field in SQL to 64.
      * Fixes to ruby module to be more careful about when it builds.
      * Updated Perl module "configure" script to check for broken
        Perl installations.
      * Fix "status_check = none".  It would still send packets
        in some cases.
      * Set recursive flag on the proxy mutex, which enables safer
        cleanup on some platforms.
      * Copy the EAP username verbatim, rather than escaping it.
      * Update handling so that robust-proxy-accounting works when
        all home servers are down for extended periods of time.
      * Look for DHCP option 53 anywhere in the packet, not just
        at the start.
      * Fix processing of proxy fail handler with virtual servers.
      * DHCP code now prints out correct src/dst IP addresses
        when sending packets.
      * Removed requirement for DHCP to have clients
      * Fixed handling of DHCP packets with message-type buried in the packet
      * Fixed corner case with negation in unlang.
      * Minor fixes to default MySQL & PostgreSQL schemas
      * Suppress MSCHAP complaints in debugging mode.
      * Fix SQL module for multiple instance, and possible crash on HUP
      * Fix permissions for radius.log for sites that change user/group,
        but which don't create the file before starting radiusd.
      * Fix double counting of packets when proxying
      * Make %l work
      * Fix pthread keys in rlm_perl
      * Log reasons for EAP failure (closes bug #8)
      * Load home servers and pools that aren't referenced from a realm.
      * Handle return codes from virtual attributes in "unlang"
        (e.g. LDAP-Group).  This makes "!(expr)" work for them.
      * Enable VMPS to see contents of virtual server again
      * Fix WiMAX module to be consistent with examples.  (closes bug #10)
      * Fixed crash with policies dependent on NAS-Port comparisons
      * Allowed vendor IDs to be be higher than 32767.
      * Fix crash on startup with certain regexes in "hints" file.
      * Fix crash in attr_filter module when packets don't exist
      * Allow detail file reader to be faster when "load_factor = 100"
      * Add work-around for build failures with errors related to
        lt__PROGRAM__LTX_preloaded_symbols.  libltdl / libtool are horrible.
      * Made ldap module "rebind" option aware of older, incompatible
        versions of OpenLDAP.
      * Check value of Fall-Through in attr_filter module.


author: John Dennis <jdennis@redhat.com> - 2.1.6-1
changelog:
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * radclient exits with 0 on successful (accept / ack), and 1
        otherwise (no response / reject)
      * Added support for %{sql:UPDATE ..}, and insert/delete
        Patch from Arran Cudbard-Bell
      * Added sample "do not respond" policy.  See raddb/policy.conf
        and raddb/sites-available/do_not_respond
      * Cleanups to Suse spec file from Norbert Wegener
      * New VSAs for Juniper from Bjorn Mork
      * Include more RFC dictionaries in the default install
      * More documentation for the WiMAX module
      * Added "chase_referrals" and "rebind" configuration to rlm_ldap.
        This helps with Active Directory.  See raddb/modules/ldap
      * Don't load pre/post-proxy if proxying is disabled.
      * Added %{md5:...}, which returns MD5 hash in hex.
      * Added configurable "retry_interval" and "poll_interval"
        for "detail" listeners.
      * Added "delete_mppe_keys" configuration option to rlm_wimax.
        Apparently some WiMAX clients misbehave when they see those keys.
      * Added experimental rlm_ruby from
        http://github.com/Antti/freeradius-server/tree/master
      * Add Tunnel attributes to ldap.attrmap
      * Enable virtual servers to be reloaded on HUP.  For now, only
        the "authorize", "authenticate", etc. processing sections are
        reloaded.  Clients and "listen" sections are NOT reloaded.
      * Updated "radwatch" script to be more robust.  See scripts/radwatch
      * Added certificate compatibility notes in raddb/certs/README,
        for compatibility with different operating systems. (i.e. Windows)
      * Permit multiple "-e" in radmin.
      * Add support for originating CoA-Request and Disconnect-Request.
        See raddb/sites-available/originate-coa.
      * Added "lifetime" and "max_queries" to raddb/sql.conf.
        This helps address the problem of hung SQL sockets.
      * Allow packets to be injected via radmin.  See "inject help"
        in radmin.
      * Answer VMPS reconfirmation request.  Patch from Hermann Lauer.
      * Sample logrotate script in scripts/logrotate.freeradius
      * Add configurable poll interval for "detail" listeners
      * New "raddebug" command.  This prints debugging information from
        a running server.  See "man raddebug.
      * Add "require_message_authenticator" configuration to home_server
        configuration.  This makes the server add Message-Authenticator
        to all outgoing Access-Request packets.
      * Added smsotp module, as contributed by Siemens.
      * Enabled the administration socket in the default install.
        See raddb/sites-available/control-socket, and "man radmin"
      * Handle duplicate clients, such as with replicated or
        load-balanced SQL servers and "readclients = yes"
    Bug fixes
      * Minor changes to allow building without VQP.
      * Minor fixes from John Center
      * Fixed raddebug example
      * Don't crash when deleting attributes via unlang
      * Be friendlier to very fast clients
      * Updated the "detail" listener so that it only polls once,
        and not many times in a row, leaking memory each time...
      * Update comparison for Packet-Src-IP-Address (etc.) so that
        the operators other than '==' work.
      * Did autoconf magic to work around weird libtool bug
      * Make rlm_perl keep tags for tagged attributes in more situations
      * Update UID checking for radmin
      * Added "include_length" field for TTLS.  It's needed for RFC
        compliance, but not (apparently) for interoperability.
      * Clean up control sockets when they are closed, so that we don't
        leak memory.
      * Define SUN_LEN for systems that don't have it.
      * Correct some boundary conditions in the conditional checker ("if")
        in "unlang".  Bug noted by Arran Cudbard-Bell.
      * Work around minor building issues in gmake.  This should only
        have affected developers.
      * Change how we manage unprivileged user/group, so that we do not
        create control sockets owned by root.
      * Fixed more minor issues found by Coverity.
      * Allow raddb/certs/bootstrap to run when there is no "make"
        command installed.
      * In radiusd.conf, run_dir depends on the name of the program,
        and isn't hard-coded to "..../radiusd"
      * Check for EOF in more places in the "detail" file reader.
      * Added Freeswitch dictionary.
      * Chop ethernet frames in VMPS, rather than droppping packets.
      * Fix EAP-TLS bug.  Patch from Arnaud Ebalard
      * Don't lose string for regex-compares in the "users" file.
      * Expose more functions in rlm_sql to rlm_sqlippool, which
        helps on systems where RTLD_GLOBAL is off.
      * Fix typos in MySQL schemas for ippools.
      * Remove macro that was causing build issues on some platforms.
      * Fixed issues with dead home servers.  Bug noted by Chris Moules.
      * Fixed "access after free" with some dynamic clients.

  - fix packaging bug, some directories missing execute permission
    /etc/raddb/dictionary now readable by all.


author: John Dennis <jdennis@redhat.com> - 2.1.3-1
changelog:
  - upgrade to latest upstream release, upstream summary follows:
    The focus of this release is stability.
    Feature Improvements:
      * Allow running with "user=radiusd" and binding to secure sockets.
      * Start sending Status-Server "are you alive" messages earlier, which
        helps with proxying multiple realms to a home server.
      * Removed thread pool code from rlm_perl.  It's not necessary.
      * Added example Perl configuration to raddb/modules/perl
      * Force OpenSSL to support certificates with SHA256. This seems to be
        necessary for WiMAX certs.
    Bug fixes:
      * Fix Debian patch to allow it to build.
      * Fix potential NULL dereference in debugging mode on certain
        platforms for TTLS and PEAP inner tunnels.
      * Fix uninitialized memory in handling of vendor definitions
      * Fix parsing of quoted (but non-string) attributes in the "users" file.
      * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
      * use SUN_LEN in control socket, to avoid truncation on some platforms.
      * Correct internal handling of "debug condition" to prevent it from
        being over-written.
      * Check return code of regcomp in "unlang", so that invalid regular
        expressions are caught rather than mishandled.
      * Make rlm_sql use <ltdl.h>.  Addresses bug #610.
      * Document list "type = status" better.  Closes bug #580.
      * Set "default days" for certificates, because OpenSSL won't do it.
        This closes bug #615.
      * Reference correct list in example raddb/modules/ldap. Closes #596.
      * Increase default schema size for Acct-Session-Id to 64. Closes #540.
      * Fix use of temporary files in dialup-admin.  Closes #605 and
        addresses CVE-2008-4474.
      * Addressed a number of minor issues found by Coverity.
      * Added DHCP option 150 to the dictionary.  Closes #618.


author: John Dennis <jdennis@redhat.com> - 2.1.1-8
changelog:
  - add --with-system-libtool to configure as a workaround for
  undefined reference to lt__PROGRAM__LTX_preloaded_symbols


author: John Dennis <jdennis@redhat.com> - 2.1.1-3
changelog:
  - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
  - remove diaupadmin packages, it's not well supported and there are problems with it.


author: John Dennis <jdennis@redhat.com> - 2.1.1-1
changelog:
  - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
    permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolves: bug #453761: FreeRADIUS %post should not include chown -R
    specify file attributes for /etc/raddb/ldap.attrmap
    fix consistent use of tabs/spaces (rpmlint warning)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - upgrade to latest upstream, see Changelog for details,
    upstream now has more complete fix for bug #447545, local patch removed


author: John Dennis <jdennis@redhat.com> - 2.0.4-1
changelog:
  - upgrade to latest upstream, see Changelog for details
  - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel


author: John Dennis <jdennis@redhat.com> - 2.0.3-2
changelog:
  - remove support for radrelay, it's different now
  - turn off default inclusion of SQL config files in radiusd.conf since SQL
    is an optional RPM install
  - remove mssql config files


author: John Dennis <jdennis@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to current upstream 2.0.3 release
  - Many thanks to Enrico Scholz for his spec file suggestions incorporated here
  - Resolve: bug #438665: Contains files owned by buildsystem
  - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
    to further partition external dependencies.
  - Clean up some unnecessary requires dependencies
  - Add versioned requires between subpackages


author: <jdennis@redhat.com> - 1.1.7-3.3.ipa
changelog:
  - add support in rlm_ldap for reading clients from ldap
  - fix TLS parameter controling if a cert which fails to validate
    will be accepted (i.e. self-signed),
    rlm_ldap config parameter=tls_require_cert
    ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
    ldap_set_option() when it should have been ldap_int_tls_config()


author: Thomas Woerner <twoerner@redhat.com> 1.1.7-1
changelog:
  - new versin 1.1.7
  - install snmp MIB files
  - dropped LDAP_DEPRECATED flag, it is upstream
  - marked config files for sub packages as config (rhbz#240400)
  - moved db files to /var/lib/raddb (rhbz#199082)


author: Thomas Woerner <twoerner@redhat.com> 1.1.6-2
changelog:
  - radiusd expects /etc/raddb to not be world readable or writable
    /etc/raddb now belongs to radiusd, post script sets permissions


author: Thomas Woerner <twoerner@redhat.com> 1.1.5-1
changelog:
  - new version 1.1.5
    - no /etc/raddb/otppasswd.sample anymore
    - build is pie by default, dropped pie patch
  - fixed build requirement for perl (perl-devel)


author: Karsten Hopp <karsten@redhat.com> 1.1.3-3
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/preun requirements
  - use rpm macros


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.2.0-1
changelog:
  - Only match on specific device types, don't match on joysticks or tablets
  - libinput 0.2.0
  - switch to new fdo host


author: Peter Jones <pjones@redhat.com> - 17-2
changelog:
  - Try to make covscan actually complete the scan...
    Related: rhbz#1570032
    Related: rhbz#1558937
    Related: rhbz#1520533


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Ondrej Mular <omular@redhat.com> - 0.9.168-4
changelog:
  - Added command 'pcs resource relations'
  - Added command 'pcs resource safe-disable'
  - Resolves: rhbz#1770975 rhbz#1770973


author: Ivan Devat <idevat@redhat.com> - 0.9.168-3
changelog:
  - More fixes for the case when PATH environment variable is not set
  - Pcsd no longer sends Server HTTP header
  - Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
  - Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174


author: Ivan Devat <idevat@redhat.com> - 0.9.168-2
changelog:
  - Do not generate custom DH key if it was not requested by setting its custom length
  - Resolves: rhbz#1760434


author: Ivan Devat <idevat@redhat.com> - 0.9.168-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.1
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
  - Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
  - Resolves: rhbz#1557253


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5
changelog:
  - Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
  - Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
  - Resolves: rhbz#1415197


author: Ivan Devat <idevat@redhat.com> - 0.9.162-3
changelog:
  - Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
  - Fixed a crash in the pcs booth sync command
  - Resolves: rhbz#1464781 rhbz#1527530


author: Ivan Devat <idevat@redhat.com> - 0.9.162-2
changelog:
  - Changed snmp agent logfile path
  - It is now possible to set the `action` option of stonith devices in GUI by using force
  - Do not crash when `--wait` is used in `pcs stonith create`
  - A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
  - Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378


author: Ondrej Mular <omular@redhat.com> - 0.9.162-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749


author: Ivan Devat <idevat@redhat.com> - 0.9.161-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110


author: Ivan Devat <idevat@redhat.com> - 0.9.160-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6
changelog:
  - It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
  - Fixed timeout when cluster setup takes long time in web UI
  - It is now mandatory to specify container type in the "resource bundle create" command
  - Resolves: rhbz#1447910 rhbz#1284404


author: Ivan Devat <idevat@redhat.com> - 0.9.158-5
changelog:
  - `pcs cluster setup` uses existing pacemaker authkey if it exists
  - `pcs resource create` shows only warning when case of remote node is detected
  - Resolves: rhbz#1459503


author: Ivan Devat <idevat@redhat.com> - 0.9.158-4
changelog:
  - Added support for enable and disable in bundles
  - New clusters are created with corosync encryption disabled by default
  - Flag `--master` is backward compatible in `pcs resource create`
  - Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153


author: Ivan Devat <idevat@redhat.com> - 0.9.158-3
changelog:
  - Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
  - Added option to create not hardened cluster from web UI
  - Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
  - Fixed creating a new cluster from the web UI
  - `pcs cluster node add-guest` now works with the flag `--skipp-offline`
  - `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
  - Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
  - Binary data are stored in corosync authkey
  - Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.158-2
changelog:
  - Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
  - Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
  - Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
  - Fixed "Error: unable to get cib" when adding a node to a stopped cluster
  - Resolves: rhbz#1176018


author: Ivan Devat <idevat@redhat.com> - 0.9.158-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984


author: Ivan Devat <idevat@redhat.com> - 0.9.157-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958


author: Ivan Devat <idevat@redhat.com> - 0.9.156-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10
changelog:
  - Fixed error when stopping qdevice if is not running
  - Fixed removing qdevice from a cluster
  - Fixed documentation regarding booth
  - Fixed return code when no matching ticket constraint found during remove
  - Resolves: rhbz#1158805 rhbz#1305049


author: Ivan Devat <idevat@redhat.com> - 0.9.152-9
changelog:
  - Added warning when stopping/destroying qdevice instance which is being used
  - Fiexed removing qdevice from a cluster which uses sbd
  - Fixed re-running "pcs cluster node add" if it failed due to qdevice
  - Fixed documentation regarding booth
  - Added warning when using unknown booth ticket option
  - Added constraint ticket remove command
  - Fixed return code and message when displaying node utilization for nonexistent node
  - Fixed setting utilization attributes in web UI
  - Fixed support for node utilization on remote node
  - Fixed updating of selected group when displaying new resource dialog
  - Fixed group list when managing cluster running older pcs in web UI
  - Fixed displaying unmanaged status for resources for older pcs in web UI
  - Fixed clone/master/unclone group/ungroup buttons for older pcs in web UI
  - Fixed node standby/unstandby for older pcs in web UI
  - Resolves: rhbz#1158805 rhbz#1308514 rhbz#1305049 rhbz#1158500 rhbz#1231858


author: Ivan Devat <idevat@redhat.com> - 0.9.152-8
changelog:
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed missing line at the end of booth config
  - Fixed documentation regarding booth
  - Fixed remove multiple booth resources with "--force" flag
  - Fixed cleanup of ip resource if it fails to create booth resource
  - Added bash completion for booth
  - Fixed display full booth configuration
  - Added ability to display booth config from remote node
  - Added support for ticket options during adding booth ticket
  - Fixed adding node to cluster when booth is not installed
  - Added restart command for booth
  - Fixed check if auto_tie_breaker is required when enabling sbd
  - Improved way of displaying status of unmanaged primitive resources in web UI
  - Resolves: rhbz#1247088 rhbz#1308514 rhbz#1164402 rhbz#1264360


author: Ivan Devat <idevat@redhat.com> - 0.9.152-7
changelog:
  - Added possibility to hide inactive resources in "pcs resource show" command
  - Fixed exceptions handling when waiting for response from user in command line
  - Fixed nonexisting resource detection in pcsd
  - Fixed SBD_WATCHDOG_TIMEOUT option value validation
  - Removed possibility to change SBD_PACEMAKER
  - Fixed exception when disabling service on systemd systems
  - Added automatic auto_tie_breaker quorum option set whenever it is needed for SBD to work
  - Fixed setting sbd watchdog in config
  - Fixed error handling when upgrading cib schema
  - Improved consistency of syntax 'pcs alert recipient add' command
  - Resolves: rhbz#1298585 rhbz#1354498 rhbz#1346852 rhbz#1164402 rhbz#1315371 rhbz#1366307


author: Ivan Devat <idevat@redhat.com> - 0.9.152-6
changelog:
  - Fixed documentation regarding clufter
  - Added possibility to change order of resources in a group in web UI
  - Added support for unmanaged resources in web UI
  - Added support for booth (cluster ticket manager)
  - Resolves: rhbz#1357945 rhbz#1281391 rhbz#1264360 rhbz#1308514


author: Ivan Devat <idevat@redhat.com> - 0.9.152-5
changelog:
  - Fixed traceback when stopping pcsd shortly after start
  - Fixed removing a dead node from a cluster
  - Added support for clufter's 'dist' parameter
  - Fixed filtering by property name in "pcs property show"
  - Fixed an error in web UI when removing resources takes a long time
  - Fixed occasional missing optional arguments of resources in web UI
  - Improved help for alerts
  - Fixed recreating a remote node resource
  - Fixed exceptions when authenticating cluster nodes
  - Fixed permissions for bash completion file
  - Resolves: rhbz#1348579 rhbz#1225423 rhbz#1357945 rhbz#1302010 rhbz#1301993 rhbz#1346852 rhbz#1231858 rhbz#1315371 rhbz#1303136 rhbz#1329472 rhbz#1359154 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-4
changelog:
  - Added colocation constraint support in web UI
  - Fixed displaying cluster config when cib is provided as a file
  - Removed side effect on /etc/hosts during build
  - Recipient id is used as identifier in alarms
  - Improved quorum device commands syntax
  - Fixed pcs client for running on a remote node
  - Resolves: rhbz#1281364 rhbz#1269242 rhbz#1353607 rhbz#1315371 rhbz#1158805 rhbz#1289418


author: Ivan Devat <idevat@redhat.com> - 0.9.152-3
changelog:
  - Added support for pacemaker alerts
  - Added support for qdevice/qnetd provided by corosync
  - Fixed sbd calls on python3
  - Fixed bad request when resource removal takes longer than pcs expects
  - Added support for set expected votes on a live cluster
  - Added a wrapper for holding SELinux context when pcsd is started by systemd
  - Resolves: rhbz#1315371 rhbz#1158805 rhbz#1164402 rhbz#1346852 rhbz#1327739 rhbz#1348579 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-1
changelog:
  - Rebased to latest upstream sources
  - Added support for sbd configuration
  - Added support for constraint tickets in web UI
  - Added warning to pcs quorum unblock command
  - Fixes in manpage and built-in help
  - Config files marked as config
  - Resolves: rhbz#1299847 rhbz#1164402 rhbz#1305049 rhbz#1264566 rhbz#1225946 rhbz#1231858 rhbz#1328066 rhbz#1341114


author: Ivan Devat <idevat@redhat.com> - 0.9.151-1
changelog:
  - Rebased to latest upstream sources
  - Added support for utilization attributes
  - Optimized pcs status command
  - Fixes in manpage and built-in help
  - Improved resource cleanups
  - Added --wait support for cluster start and node standby commands
  - Improved resource and fence agent options in web UI
  - Added ability to put a node into maintenance mode
  - Fixed adding acl permission when targed id does not exists
  - Fixed deleting resource when referenced in acl
  - Improved pcsd launch script
  - Added automatically setting provides=unfencing meta attribute for stonith device
  - Improved Cluster Properties page in web UI
  - Fixed page update after adding group in web UI
  - Fixed deleting group (clones) when managing older cluster in web UI
  - Fixed stonith update command when fence agents fails to get metadata
  - Added support for putting Pacemaker Remote nodes into standby
  - Added support for omission stopped resources in status command
  - Added login input sanitization in web UI
  - Added config settings for SSL options and ciphers
  - Improved resource update command to inform user about missused op settings
  - Spec file fixes
  - Added support for constraint tickets from command line
  - Fixed CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI
  - Fixed CVE-2016-0721 pcs: cookies are not invalidated upon logout
  - Resolves: rhbz#1299847 rhbz#1158500 rhbz#1207405 rhbz#1219581 rhbz#1225946 rhbz#1220512 rhbz#1229822 rhbz#1231858 rhbz#1247088 rhbz#1248990 rhbz#1249085 rhbz#1252050 rhbz#1262773 rhbz#1281371 rhbz#1283562 rhbz#1286664 rhbz#1287320 rhbz#1290512 rhbz#1298585 rhbz#1305786 rhbz#1315652 rhbz#1321021 rhbz#1315743 rhbz#1315357 rhbz#1305049 rhbz#1335779 rhbz#1330884


author: Chris Feist <cfeist@redhat.com> - 0.9.143-14
changelog:
  - Fixed remaining issues when managing resources/groups/etc. that were
    previously unmanaged
  - Resolves: rhbz#1268801


author: Chris Feist <cfeist@redhat.com> - 0.9.143-12
changelog:
  - Fixed issue managing resources that were clones and had the unmanaged
    meta attribute set under the clone/master
  - Resolves: rhbz#1268801


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-10
changelog:
  - Web UI fixes
  - Added more detailed warnings for 'pcs stonith confirm'
  - Resolves: rhbz#1189857 rhbz#1245264


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-9
changelog:
  - Multiple fixes in web UI (dashboard, nodes, resources, fence devices)
  - Fixed an authentication issue in web UI
  - Port parameter of fence agents is now considered optional
  - Resolves: rhbz#1158566 rhbz#1188361 rhbz#1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-8
changelog:
  - Fixes in loading cluster status for web UI
  - Fixed checking user/group membership
  - Fixed a typo in an error message
  - Resolves: #rhbz1158566 #rhbz1158569 #rhbz1158571


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-7
changelog:
  - Multiple fixes in web UI
  - Fixed crash on missing nagios agents metadata
  - Check user/group membership on each request
  - Print output of crm_resource in pcs resource cleanup
  - Resolves: #rhbz1158571 #rhbz1189857 #rhbz1235022 #rhbz1257369


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-5
changelog:
  - Fixed pcsd certificates synchronization
  - Multiple fixes in web UI
  - Resolves: #rhbz1158566 #rhbz1158577 #rhbz1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-3
changelog:
  - Fixed relocation of remote nodes to their optimal node
  - Fixed pcs/pcsd path detection
  - Fixed command injection vulnerability
  - Resolves: #rhbz1122818 #rhbz1253294 #rhbz1253491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-2
changelog:
  - Fixed relocation of unique clone resources to their optimal node
  - Improved logging of node to node communication
  - Fixed 'Add resource' form in web UI
  - Fixed support for nagios agents
  - Resolves: rhbz#1122818 rhbz#1158577 rhbz#1189857 rhbz#1235022


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-1
changelog:
  - Added support for setting permissions for users and groups to clusters managed by web UI
  - Resources are now displayed in a tree (clone, master/slave, group, primitive) in web UI
  - Renamed 'pcs resource relocate clean' command to 'pcs resource relocate clear'
  - Improved logging of config files synchronization
  - Various fixes in Resources tab in web UI
  - Added missing dependecy on initscripts to the spec file
  - Fixed traceback when running 'pcs resource enable clvmd --wait'
  - Resolves: rhbz#1122818 rhbz#1158571 rhbz#1158577 rhbz#1182119 rhbz#1189857 rhbz#1198640 rhbz#1219574 rhbz#1243579 rhbz#1247818 rhbz#1250720


author: Chris Feist <cfeist@redhat.com> - 0.9.142-1
changelog:
  - Rebase to latest upstream sources
  - Added ability to set hostname when using IP address to create a cluster
  - Added ability to clear out tokens with pcs pcsd clear-auth
  - Added ability to use nagios agents
  - Fixed issue with orphaned resources causing GUI to fail to work properly
  - More dashboard fixes
  - Synchronize files between pcsd instances in a cluster to allow for HA pcsd
  - ACL role fixes for pcs/pcsd
  - Resolves: rhbz#118310 rhbz#1207805 rhbz#1235022 rhbz#1198222 rhbz#1158566 rhbz#1158577 rhbz#1166160


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.141-1
changelog:
  - Rebased to latest upstream packages
  - Added a command to relocate resources to their preferred host
  - Fixed the dashboard in web UI
  - Configure corosync to log to a file
  - Added warning when creating a duplicate resource operation
  - Added support for debugging resource agents
  - Do not automatically use --force when removing a resource using web UI
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Updated ruby gems
  - Spec file fixes
  - Resolves: rhbz#1198265 rhbz#1122818 rhbz#1158566 rhbz#1163671 rhbz#1175400 rhbz#1185096 rhbz#1198274 rhbz#1213429 rhbz#1231987 rhbz#1232644 rhbz#1233574


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.140-1
changelog:
  - Rebased to latest upstream packages
  - Added a note to man page and help poiting to cluster properties description
  - Fixed parsing of the corosync.conf file
  - Fixed diferences between the 'pcs cluster status' and 'pcs status cluster' commands as one is documented to be an alias of the other
  - Do not remove constraints referencing a group when removing a resource from the group
  - Added dashboard showing status of clusters to web UI
  - Added node authentication dialog to web UI
  - Added synchronization of web UI configuration files across cluster nodes
  - Fixed node authentication when one of the nodes is unreachable
  - Fixed an error message in the 'pcs config restore' command if a node is not authenticated
  - Fixed parsing of 'pcs acl role create' command's parameters
  - Properly overwrite a tokens file if its contents is unparsable
  - The 'pcs config' command now displays resources defaults and operations defaults
  - Show a useful error message when attempting to add a duplicate fence level in web UI
  - Added the require-all parameter to ordering constraints listing
  - Fixed VirtualDomain resource removal when there are constraints for the resource
  - Added a warning when removing a cluster node may cause a loss of the quorum
  - Fixed an error when uncloning a non-cloned resource
  - Fixed an error when removing a resource from a cloned group
  - Fixed waiting for resource commands to finish
  - Fixed 'pcs cluster start' and similar commands when run under a non-root account
  - Fixed parsing of 'pcs constraint order set' command's parameters
  - Fixed an error when creating a resource with an id which already exists
  - Improved man page and help for the 'pcs resource move' and 'pcs resource ban' commands
  - Fixed an error when referencing a non-existing acl role in 'pcs acl' commands
  - Fixed an error when adding an invalid stonith level
  - Fixed constraints removal and node standby / unstandby using remote web UI
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - The 'pcs status --full' command now displays node attributes and migration summary
  - Clufter moved to a standalone package
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Fixed a timeout value in the fence_xvm agent form
  - Fixed the 'pcs resource enable' command when working with clones and multi-state resources
  - Resolves: rhbz#1198265 rhbz#1121791 rhbz#1134426 rhbz#1158491 rhbz#1158537 rhbz#1158566 rhbz#1158569 rhbz#1158577 rhbz#1163682 rhbz#1165803 rhbz#1166160 rhbz#1170205 rhbz#1176687 rhbz#1182793 rhbz#1182986 rhbz#1183752 rhbz#1186692 rhbz#1187320 rhbz#1187571 rhbz#1188571 rhbz#1196412 rhbz#1197758 rhbz#1199073 rhbz#1201452 rhbz#1202457 rhbz#1204880 rhbz#1205653 rhbz#1206214 rhbz#1206219 rhbz#1206223 rhbz#1212904 rhbz#1213429 rhbz#1215198 rhbz#1218979


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-11
changelog:
  - Stop cluster nodes in parallel and keep cluster quorate during pacemaker
    shutdown
  - Resolves: rhbz#1180506


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-9
changelog:
  - Added acl enable and disable commands
  - Display whether acls are enabled in the 'pcs acl' output
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.cmo> 0.9.137-8
changelog:
  - Configuration of resource-discovery is now available on advanced location
    constraint rules
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-7
changelog:
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-6
changelog:
  - Allowed configuration of resource-discovery option on location constraint
    rules
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-5
changelog:
  - Fixed error message when creating a user with the same name as a role
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-4
changelog:
  - Fixed displaying globally-unique clones in GUI
  - Added latest version of clufter package
  - Resolves: rhbz#1170150 rhbz#1133897


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-2
changelog:
  - Improved error messages for scoped cib operations
  - Fixed waiting for resource commands to finish
  - Resolves: rhbz#1115537 rhbz#1156311


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-1
changelog:
  - Added support for score-attribute in location rules in GUI
  - Added ability to wait for resource commands to finish
  - Fix clufter doc files installed with executable flag
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1073075 rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.136-1
changelog:
  - Added support for 'pcs resource restart'
  - Added ability to wait for a resource to start after creation
  - Fixed issue with backports and ruby 2.0.0p576
  - Fix for deleting a resource with a large number of options
  - Fix warning when unpacking a pcs config tarball
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1156597


author: Chris Feist <cfeist@redhat.com> - 0.9.135-1
changelog:
  - Added new clufter package
  - Rebased to latest upstream sources
  - Constraints tables are collapsed properly
  - Resolves: rhbz#1111368 rhbz#1145560


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.131-1
changelog:
  - Rebased to latest upstream packages
  - Resolves: rhbz#1111368
  - Added python-clufter subpackage (configuration conversion tool)
  - Related:  rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.115-30
changelog:
  - Fix traceback with bad arguments to location rules
  - Fix results code when attempting to remove an order that doesn't exist


author: Chris Feist <cfeist@redhat.com> - 0.9.115-29
changelog:
  - Don't allow users to clone groups that have already been cloned
  - Fix order remove <resource> to remove resources from sets
  - Don't allow a user to force-start a group, clone or master/slave
  - When using debug-start use proper return code
  - Added cluster properties hover text
  - Fixed issue with stripping a nil value
  - HTML escape resource descriptions


author: Chris Feist <cfeist@redhat.com> - 0.9.115-28
changelog:
  - Remove leading/trailing white space in resource descriptions
  - Added tooltips for advanced cluster creation options
  - Fixed other 'Remove fence devices' button
  - When deleting a resource with pcsd use --force to prevent issues
  - Add proper tooltip for resource description info icon
  - Fix for long cluster names in menu
  - Do a better job of detecting when to send a redirect and when to notif
  - Don't silently ignore bad operation names


author: Chris Feist <cfeist@redhat.com> - 0.9.115-26
changelog:
  - Fixed dialog text when removing a fence device
  - Show tool tips for optional fence agent arguments
  - Fix bad link on resource remove sprite
  - When removing a resource or fence device, show blank info
  - Fix resource management issues when pacemaker is not running
  - If first node is down, allow other nodes to show resource/stonith forms
  - Removing all nodes, now removes cluster configuration
  - Added ability to see nodes corosync/pacemaker/pcsd startup settings
  - Added extra colspan to improve long cluster name display
  - Added ability to configure IPv6 cluster
  - Added ability to set corosync transport in GUI
  - Added ability to set advanced cluster options on creation
  - Renamed last_node_standing to last_man_standing
  - On cluster creation color unauthorized nodes in orange
  - Added proper redirect when session variable times out
  - Fixed traceback when missing authentication tokens


author: Chris Feist <cfeist@redhat.com> - 0.9.115-24
changelog:
  - Added support for meta attributes in the GUI
  - Moved pcmk_host_list/map/check to optional arguments


author: Chris Feist <cfeist@redhat.com> - 0.9.115-22
changelog:
  - Fixed selection arrow when selecting new resource on resources page
  - Fixed permissions on pcsd.service file


author: Chris Feist <cfeist@redhat.com> - 0.9.115-21
changelog:
  - Added support for resource descriptions
  - Show all nodes a resource is on for cloned resources
  - Improve visibility of dropdown menus
  - Keep last attempted login username if login fails


author: Chris Feist <cfeist@redhat.com> - 0.9.115-20
changelog:
  - Fixed issue when removing all resources or fence devices
  - Fixed duplicate id on fence device page


author: Chris Feist <cfeist@redhat.com> - 0.9.115-19
changelog:
  - Fixed issue when creating a cluster from the GUI on a node that isn't in
    the newly formed cluster
  - The GUI is now better at keeping track of nodes in the cluster


author: Chris Feist <cfeist@redhat.com> - 0.9.115-17
changelog:
  - Fixed issue with cluster properties not displaying properly when running
    pcsd on a node that was not in the cluster being managed
  - Fixed /etc/sysconfig/pcsd file for pcsd


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-1" as xcursor.pc indicates
    "damageproto >= 1.0" is required.
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1, libXfixes-devel" to devel
    package also, as per xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2.1-1
changelog:
  - Updated libXdamage to version 1.0.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libXdamage to version 1.0.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Peter Hutterer <peter.hutterer@redhat.com> 0.4.0-5
changelog:
  - fbdev-0.4.0-Make-ISA-optional.patch: to make next patch apply cleanly.
  - fbdef-0.4.0-Remove-useless-loader-symbol-lists.patch:
    fix linker error against X server >= 1.6.99.1


author: Adam Jackson <ajax@redhat.com> 0.3.1-5.20071113
changelog:
  - Update to git snapshot for pciaccess goodness.  Don't ask why a driver
    that doesn't touch PCI at all needs a PCI update.  I don't know either,
    and thinking about it makes me very sad.
  - Require xserver 1.4.99.1


author: Mike A. Harris <mharris@redhat.com> 0.1.0.4-1
changelog:
  - Updated xorg-x11-drv-fbdev to version 0.1.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.1.0-0
changelog:
  - Initial spec file for fbdev video driver generated automatically
    by my xorg-driverspecgen script.


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
  - Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
  - Resolves: #1082496 - socket activation for rsync doesn't work (added missing
    rsyncd@.service file)


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: Michal Luscon <mluscon@redhat.com> 3.0.9-4
changelog:
  - Fixed: #823088 - rsync loses track of files with different directory prefixes
  - Fixed: #495310 - rsync contains forked copy of zlib


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.22-1
changelog:
  - Updated to 1.0.22 final
  - Fix file descriptor leak in pcm_hw plugin
  - Fix sound distortions for S24_LE - softvol plugin


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.18-1.rc3
changelog:
  - updated to 1.0.18rc3
  - moved /etc/alsa configuration files back to /usr/share/alsa
  - removed pulse default patch (moved to /etc/asound.conf)
  - added /etc/asound.conf and /etc/alsa/alsactl.conf
  - disable /dev/aload device checking (obsolete for 2.6 kernels)


author: Lennart Poettering <lpoetter@redhat.com> 1.0.15-0.3.rc3
changelog:
  - Add hook to /etc/alsa/alsa.conf so that /etc/alsa/default-pulse.conf
    is loaded when it exists. This allows us to enable the pulse plugin by
    default depending on whether it is installed or not.


author: Matthias Saou <http://freshrpms.net/> 1.0.15-0.2.rc2
changelog:
  - Update License field.
  - Use configdir instead of sysconfdir hacks (cleaner).
  - Remove redundant optflags overriding.
  - Switch to using main "version", and merge "postver" since this is the right
    way of doing things (see NamingGuidelines#NonNumericRelease).
  - Remove static library.
  - Mark all of /etc/alsa as config, but not "noreplace".
  - Remove useless rpath on 64bit archs.


author: Lennart Poettering <lpoetter@redhat.com> 1.0.14-2
changelog:
  - fixed #251307 - fix plugindir directory specification
  - fix build with newer glibc where open() is a macro


author: Martin Stransky <stransky@redhat.com> 1.0.11-2.rc2
changelog:
  - fix for #169729 - Kernel update makes snd-atiixp-modem & slmodemd fail
  - new ainit (0.7) should fix some problems with root users


author: Martin Stransky <stransky@redhat.com> 1.0.9rc2-5
changelog:
  - fix for #130593
  - new ainit (dmix/dsnoop is default only for cards which really need it)
  - fix dsnoop
  - add fix for mixer (from https://bugs.gentoo.org/attachment.cgi?id=58918)


author: Colin Walters <walters@redhat.com> 1.0.7-2
changelog:
  - New patch alsa-lib-1.0.7-asym-config.patch, sets up asym
    in the default config file and makes it easy to make it
    the default via an environment variable.  Also increases the
    default dmix buffer variables.
  - Mark /etc/alsa/alsa.conf as a config file, and use sysconfdir
    variable


author: Bill Nottingham <notting@redhat.com> 1.0.6-6
changelog:
  - fix bad assertion that trips up gstreamer (fixes GNOME bug #159647)
  - undef gets in case it's a macro (#141423)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Stef Walter <stefw@redhat.com> - 0.6.31-5
changelog:
  - Don't ship ssh service by default file since openssh-server isn't
    running by default, and shouldn't be advertised without user
    confirmation.


author: Christian Krause <chkr@fedoraproject.org> - 0.6.30-6
changelog:
  - Change paths for mono assemblies according to updated packaging
    guidelines (http://fedoraproject.org/wiki/Packaging:Mono)


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-6
changelog:
  - Move avahi-discover from avahi-tools to avahi-ui-tools
  - https://bugzilla.redhat.com/show_bug.cgi?id=513768


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-6
changelog:
  - resolves #279301: fix segfault when no domains are configured in resolv.conf (pulled from upstream SVN r1525)


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-5
changelog:
  - resolves #249044: Update init script to use runlevel 96
  - resolves #251700: Fix assertion in libdns_sd-compat


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-4
changelog:
  - Ship ssh static service file by default, don't ship ssh-sftp by default
  - resolves: #269741: split off avahi-ui-tools package
  - resolves: #253734: add missing dependency on avahi-glib-devel to avahi-ui-devel


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.20-5
changelog:
  - add two patches which are important to get RR updating work properly.
    Will be part of upstream 0.6.21


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.20-1
changelog:
  - upgrade to new upstream 0.6.20
  - fix a few rpmlint warnings
  - create avahi-autoipd user
  - no longer create avahi user with a static uid, move to dynamic uids
  - drop a couple of patches merged upstream
  - Provide "howl" and "howl-devel"
  - Split off avahi-autoipd and avahi-dnsconfd
  - Introduce avahi-ui packages for the first time
  - Reload D-Bus config after installation using dbus-send
  - add a couple of missing ldconfig invocations


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.17-1
changelog:
  - upgrade to new upstream 0.6.17
  - redundant patches removal
  - removed auto* stuff from specfile since that was no longer needed
  - Resolves: #232205: 'service {avahi-dnsconfd,avahi-daemon} status'
    returns 0 when the service is stopped


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.16-1.fc7
changelog:
  - Resolves: #221763: CVE-2006-6870 Maliciously crafted packed can DoS avahi daemon
  - upgrade to new upstream
  - patch revision
  - Resolves: #218140: avahi configuration file wants a non-existent group


author: Martin Stransky <stransky@redhat.com> - 0.6.11-6
changelog:
  - added patch from #206445 - ia64: unaligned access errors seen
    during startup of avahi-daemon
  - removed unused patches


author: Martin Stransky <stransky@redhat.com> - 0.6.11-3
changelog:
  - added fix for #200767 - avahi-dnsconfd Segmentation fault
    with invalid command line argument
  - added dist tag


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.11-1.fc6
changelog:
  - Upgrade to upstream version 0.6.11
  - fix bug 195674: set 'use-ipv6=yes' in avahi-daemon.conf
  - fix bug 197414: avahi-compat-howl and avahi-compat-dns-sd symlinks
  - fix bug 198282: avahi-compat-{howl-devel,dns-sd-devel} Requires:


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.10-1.FC6
changelog:
  - Upgrade to upstream version 0.6.10
  - fix bug 192080: split avahi-compat-libdns_sd into separate package
                    (same goes for avahi-compat-howl)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.9-4
changelog:
  - fix scriptlet error introduced by last fix:
    if user has disabled avahi-daemon, do not enable it during post


author: Bill Nottingham <notting@redhat.com> - 0.6.9-2
changelog:
  - fix scriplet error during installer
  - move service-types* to the tools package (avoids multilib conflicts)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.8-1
changelog:
  - Upgrade to upstream version 0.6.8
  - fix bug 182462: +Requires(post): initscripts, chkconfig, ldconfig


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.5-1
changelog:
  - Upgrade to upstream version 0.6.5
  - Make /etc/avahi/etc and /etc/avahi/etc/localtime owned by avahi
    package; copy system localtime into chroot in post


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-2
changelog:
  - fix bug 177610: Enable mono support with new avahi-sharp package
  - fix bug 177609: add gdbm / gdbm-devel Requires for avahi-browse


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-1
changelog:
  - Upgrade to upstream version 0.6.3
  - fix bug 177148: initscript start should not fail if avahi-daemon running


author: Jason Vas Dias<jvdias@redhat.com> - 0.6-3
changelog:
  - fix bug 172047 - tools should require python-twisted
  - fix bug 173985 - docs directory permissions


author: Jason Vas Dias<jvdias@redhat.com> - 0.5.2-7
changelog:
  - fix bug 172034: fix ownership of /var/run/avahi-daemon/
  - fix bug 172772: .spec file improvements from matthias@rpmforge.net


author: Alexander Larsson <alexl@redhat.com> - 0.5.2-5
changelog:
  - Obsoletes howl, howl-libs, as we want to get rid of them on updates
  - No provides yet, as the howl compat library is in Avahi 0.6.0.


author: Mike FABIAN <mfabian@redhat.com> - 0.0.31-1
changelog:
  - Update langtable to 0.0.31
  - Resolves: rhbz#1202875
  - Revert change included in 0.0.31 which uses "eurlatgr" as the default
    consolefont for many languages because that font is not available in RHEL
  - Remove patches which are already included in 0.0.31


author: Mike FABIAN <mfabian@redhat.com> - 0.0.13-4
changelog:
  - Add Add-support-for-timezone-translations.patch (Related: rhbz#1015209)
  - Add Fix-Chinese-translation-problem.patch (Related: rhbz#1015209)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.12-1
changelog:
  - Update to 0.0.12
  - Match case insensitively in languageId() (Resolves: rhbz#1002000 (case insensitive languageId function needed))


author: Mike FABIAN <mfabian@redhat.com> - 0.0.11-1
changelog:
  - Update to 0.0.11
  - Add translations for DE and NL territories in nds (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.10-1
changelog:
  - Update to 0.0.10
  - Add translations for Belarusian and Belarus in Latin script (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.9-1
changelog:
  - Update to 0.0.9
  - Add endonyms for pa_Arab (and pa_PK) and translation of country name for Pakistan for pa_Arab
  - make languageId() return something even if a language name like "language (territory)" is given (Resolves: rhbz#986659 - some language name to its locale code failed)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.8-1
changelog:
  - Update to 0.0.8
  - Add endonym for Maithili
  - Return True by default from supports_ascii (by Vratislav Podzimek)
  - Add grc, eo, ak, GH, cop, dsb, fj, FJ, haw, hil, la, VA, ln, kg, CD, CG, AO, mos, BF, ny, MW, smj, tet, TL, tpi, PG (Resolves: rhbz#985332 - some language codes are missing)
  - Import more translations from CLDR
  - Give pa_IN.UTF-8 higher weight than pa_PK.UTF-8 (Resolves: rhbz#986658, rhbz#986155)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.7-1
changelog:
  - Update to 0.0.7
  - Add examples for list_consolefonts()
  - Add a list_timezones() function
  - Add functions languageId() and territoryId()
  - Fix some translations of language names to get unique results returned by languageId()


author: Mike FABIAN <mfabian@redhat.com> - 0.0.6-1
changelog:
  - Update to 0.0.6
  - Add RelaxNG schemas for the XML files (Vratislav Podzimek <vpodzime@redhat.com>)
  - Use SAX instead of the ElementTree (Vratislav Podzimek <vpodzime@redhat.com>)
  - Use 'trName' instead of 'name' for translated names (Vratislav Podzimek <vpodzime@redhat.com>)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.5-1
changelog:
  - Update to 0.0.5
  - Accept script names as used by glibc locales as well
  - Support reading gzipped xml files
  - Set ASCII support to “True” for cz and sk keyboard layouts


author: Mike FABIAN <mfabian@redhat.com> - 0.0.4-1
changelog:
  - Update to 0.0.4
  - Remove backwards compatibility init() function
  - Add ia (Interlingua), see https://bugzilla.redhat.com/show_bug.cgi?id=872423


author: Mike FABIAN <mfabian@redhat.com> - 0.0.3-1
changelog:
  - Update to 0.0.3
  - Move the examples from the README to the source code
  - Some tweaks for the translation of Serbian
  - Prefix all global functions and global variables which are internal with “_”
  - Rename country → territory, countries → territories in keyboards.xml
  - Add keyboard “in(eng)” and make it the default for all Indian languages
  - Add a comment stating which functions should be considered public API
  - Add a supports_ascii() function
  - Run Python’s doctest also on langtable.py, not only the extra test_cases.txt


author: Mike FABIAN <mfabian@redhat.com> - 0.0.2-1
changelog:
  - update to 0.0.2
  - Prefer values for language, script, and territory found in languageId over those found in the other parameters


author: Mark McLoughlin <markmc@redhat.com> 2.12.1-3
changelog:
  - Add patch to set the size of the IO thread stack to 256k in
    order to mitigate the apparent 10M jump in GNOME processes
    memory usage (#157297)


author: Mark McLoughlin <markmc@redhat.com> 2.10.0-4
changelog:
  - Backport alignment fix for 64 bit from 0.10.3 - fixes Nautilus crashing
    on startup (#126181). Thanks to Lamont R. Peterson <lamont@gurulabs.com>


author: Havoc Pennington <hp@redhat.com>
changelog:
  - build system somehow built against libglib-1.3.so.11
    even though pkg-config found 1.3.12? wtf?
    trying again


author: Havoc Pennington <hp@redhat.com>
changelog:
  - renaming more things
  - remove smp flags, doesn't work atm
  - fix .pc file, trying to get bonobo-activation to build


author: Pablo Saratxaga <srtxg@chanae.alphanet.ch>
changelog:
  - improved %files section, and added use of %{prefix} and install-info
    (well,... no. The info file has not dir info inside, commented out)


author: Ray Strode <rstrode@redhat.com> 1.3-5
changelog:
  - Rebuild against bluez5.  This won't work, but will
    at least prevent broken dependencies
    Related: #1174545 1219504


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.0.1-2
changelog:
  - Provides: dbus-bluez-pin-helper (keeps blueman and hal off the KDE spin)
  - fix kbluetooth Obsoletes to match 0.4.2-2.fc* properly


author: Livy Ge <livy.ge@oracle.com> - 7-13.0.1
changelog:
  - Replaced the reference from the redhat icon to the oracle linux icon [bug 18272222]
  - Updated image banner-platform-rhel.png and replaced RHEL7_720x60.png in tarball
  - Replace redhat reference in index.html
  - Updated index.html for en-US (Avi Miller)


author: Paul W. Frields <pfrields@redhat.com> - 7-9
changelog:
  - New content tarball to fix errant translation files (Resolves: rhbz1055849)
  - Remove obsolete feedback.html and unsupported locale


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
  - Changed URL to SourceForge development site.
  - Changed source to NEU site.
  - Quoted % references in macros within changelog.
  - README: Note tpm-tools only needed to take ownership of a TPM.


author: Petr Machata <pmachata@redhat.com> - 0.7.91-13
changelog:
  - Fix system_call_params.exp and system_calls.exp for aarch64.
    (#1225550)
  - xfail part of trace-irelative.exp for aarch64, fix trace-clone
    for aarch64 (#1225568)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-12
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-6
changelog:
  - Fix a problem when attempting to trace a command that hasn't been
    found (ltrace-0.7.91-cant_open.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)
  - Fix a problem in tracing across fork on PPC64
    (ltrace-0.7.91-ppc64-fork.patch)
  - Fix a couple nits in ltrace.1
    (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-3
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-5
changelog:
  - On s390, the highest bit in PC address is used to distinguish
    between 24-bit and 31-bit addressing modes.  Linux used to do this
    for us, but not anymore.
    (ltrace-0.7.2-s390-set_instruction_pointer.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-3
changelog:
  - Bring small fixes from master branch
    (ltrace-0.7.2-bits.patch; drop ltrace-0.7.2-man.patch)
  - Add a patch that implements ARM sofware singlestepping.  This mostly
    fixes test suite on ARM, though parameter passing conventions are
    still not implemented.  (ltrace-0.7.2-arm.patch)
  - Work around a new GCC warning (ltrace-0.7.2-unused-typedef.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-2
changelog:
  - Improve documentation: better correlation between ltrace(1) and
    --help, other minor improvements in ltrace(1).
    (ltrace-0.7.2-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.0-1
changelog:
  - Upstream 0.7.0
    - Drop all the patches
    - Upstream patch for missing sysdeps/linux-gnu/ppc/insn.h
      (ltrace-0.7.0-ppc-insn.h.patch)
    - Upstream patch for installing ltrace.conf.5 to man5
      (ltrace-0.7.0-man5.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-19
changelog:
  - Upstream patch for ia64 parameter passing
    (ltrace-0.6.0-abi-ia64.patch)
  - Upstream fix for a bug in computation of time spent in a syscall
    (ltrace-0.6.0-syscall-time.patch)
  - Upstream fix for a bug in passing struct(float,struct(float,float))
    on x86_64 (ltrace-0.6.0-x86_64-flatten.patch)
  - Upstream patch for support of -l option (ltrace-0.6.0-dash-l.patch)
  - Several more upstream patches with random cleanups.  Those were
    brought to Fedora to make porting of other patches easier.
    (ltrace-0.6.0-cleanups.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-16
changelog:
  - Look for __cxa_demangle in libstdc++ as well
  - Demangle test case should report it's unsupported if demangling
    support isn't compiled in (ltrace-0.6.0-demangle.patch)
  - Resolves: #827422


author: Petr Machata <pmachata@redhat.com> - 0.6.0-15
changelog:
  - Add upstream patches for parameter passing.  Apart from a couple of
    fixes, this brings in s390 support (ltrace-0.6.0-abi-s390.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-14
changelog:
  - Add upstream patch that improves parameter passing support (the
    upstream "revamp" branch) (ltrace-0.6.0-abi.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-13
changelog:
  - Check -n argument for validity (ltrace-0.6.0-dash-n.patch)
  - Resolves: #818529
  - ltrace-0.6.0-libs-fixes-1.patch
    - Fix double free when process initialization fails for some reason
    - Don't indent first level of calls


author: Petr Machata <pmachata@redhat.com> - 0.6.0-11
changelog:
  - Fix detach from sleeping process
  - Add limited support for return from tail call
  - Fix singlestep over atomic instruction sequence on PPC
  - Add extensive upstream patch that implements
    - tracing calls done from DSOs
    - better tools for filtering symbol tables
    - support for tracing PLT calls on PPC64 (not entry points read from .plt)
    - support for PPC32 old-style (BSS) PLT table
  - Drop ppc-shift patch that was superseded by the above
  - Drop demangle patch that hasn't been applied for some time now


author: Petr Machata <pmachata@redhat.com> - 0.6.0-6
changelog:
  - If we fail to attach to traced process, check whether deny_ptrace
    isn't enabled.  If yes, warn about it.
  - Resolves: #810973


author: Petr Machata <pmachata@redhat.com> - 0.6.0-5
changelog:
  - Add upstream patches for initial breakpoint insertion.  This mostly
    fixes tracing on PPC.
  - Resolves: #773050


author: Petr Machata <pmachata@redhat.com> - 0.6.0-3
changelog:
  - Add several upstream patches that fix various races in tracing
    multi-threaded processes
  - Add upstream patches for support of tracing across vfork
  - Add upstream patches for ppc: excessive shift, and fetching
    function arguments


author: Petr Machata <pmachata@redhat.com> - 0.6.0-2
changelog:
  - Add upstream patches for tracing multi-threaded processes, endian
    fixes, and a test suite fixlet


author: Petr Machata <pmachata@redhat.com> - 0.6.0-1
changelog:
  - Update to 0.6.0
    - Drop most patches
    - Port exec-stripped patch
    - Add return-string-n patch
    - Leave just the testsuite part in ia64-sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.5-17.45svn
changelog:
  - Fix demangler resolution.  Libiberty is not in the default install
    anymore, and the fallback configure check for __cxa_demangle doesn't
    take into account the possibility that the symbol might be in
    libstdc++ instead.
  - Resolves: #631069 FTBFS


author: Petr Machata <pmachata@redhat.com> - 0.5-16.45svn.1
changelog:
  - When the value of undefined symbol in PPC 32-bit binary is 0, use
    PPC-specific magic to compute the PLT slots.
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Support tracing of 31-bit binaries with 64-bit ltrace
  - Fix handling of the case where forked child is reported before
    parent's fork event
  - Patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - Patch from James M. Leddy, fixes interaction of -c and -o
  - Fix compilation by using -D_LARGEFILE64_SOURCE
  - related: #447404


author: Petr Machata <pmachata@redhat.com> - 0.5-7.45svn
changelog:
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - added ia64 sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.4
changelog:
  - turn off opd translation on ia64, GElf already gives us function
    address.
  - turn on main-internal test, it should pass now.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.2
changelog:
  - svn fix for opt_x patch
  - patches for testsuite for s390{,x}
  - turning off main-internal test. Fails on ia64, needs investigation.


author: Petr Machata <pmachata@redhat.com> - 0.4-1
changelog:
  - Upstream 0.4
  - opt_x patch: New structure for opt_x list elements, now with
    'found'.  Using it in options.c, elf.c.
  - testsuite patch: Automated testsuite for ltrace.


author: Jakub Jelinek <jakub@redhat.com> 0.3.36-2
changelog:
  - make x86_64 ltrace trace both 32-bit and 64-bit binaries (#141955,
    IT#55600)
  - fix tracing across execve
  - fix printf-style format handling on 64-bit arches


author: Jakub Jelinek <jakub@redhat.com> 0.3.32-1
changelog:
  - update to 0.3.32
    - fix dict.c assertion (#114359)
    - x86_64 support
  - rewrite elf.[ch] using libelf
  - don't rely on st_value of SHN_UNDEF symbols in binaries,
    instead walk .rel{,a}.plt and compute the addresses (#115299)
  - fix x86-64 support
  - some ltrace.conf additions
  - some format string printing fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - rebuilt for next release
  - patched Makefile.in to take a hint on mandir (patch2)
  - use %{_mandir} and %makeinstall


author: Pavel Vomacka <pvomacka@redhat.com> - 0.7.5-8
changelog:
  - Resolves: #1438668 DNS forwarder address added during IPA installation
    shouldn't add IP-Address '0.0.0.0'


author: Jakub Hrozek <jhrozek@redhat.com> - 0.7.5-3
changelog:
  - Do not traceback on invalid IPNetwork input (upstream issues #2, #6, #5, #8)
  - Remove executable bit from documentation files to make rpmlint happy


author: John Eckersberg <jeckersb@redhat.com> - 0.7.5-1
changelog:
  - New upstream release 0.7.5
  - Updated summary and description to match upstream README
  - Updated URL and source to reflect upstream move to github


author: John Eckersberg <jeckersb@redhat.com> - 0.7.1-1
changelog:
  - New upstream release 0.7.1 fixes naming conflict with 'nash' by
    renaming the netaddr shell to 'netaddr'


author: John Eckersberg <jeckersb@redhat.com> - 0.6.3-2
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce python 2.4 dependency as needed by netaddr >= 0.6.2
  - Drop BR on python-setuptool as it is not imported in setup.py
  - Drop BR on dos2unix use sed instead
  - Align description with that of delivered PKG-INFO
  - Rip out python shebangs
  - Add %check section to enable tests
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: Ondrej Vasik <ovasik@redhat.com> - 1.03ii-16.3
changelog:
  - added dist tag
  - License to GPL+
  - spec file cleanup (all things from merge review by pnemade #226278)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Jindrich Novy <jnovy@redhat.com> 1.2.12-1
changelog:
  - update to 1.2.12
  - new upstream release introduces "fruit salad" colored hexeditor ;-)
    (try --color)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man page location
  - use %makeinstall
  - use predefined RPM macros wherever possible
  - patched so that regular users can build


author: Tim Powers <timp@redhat.com>
changelog:
  - updated source
  - cleaned up %build section. Now uses make install instead of install
    blah....
  -built for 6.1


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-1
changelog:
  - update to 1.0.11, soname bump to libmemcached.so.11
  - drop broken SASL support
  - don't generate parser (bison 2.6 not supported)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Mike FABIAN <mfabian@redhat.com> - 20180508-1
changelog:
  - Update to upstream snapshot tarball (color emoji font version 2.011)
  - Add patch to build all country flags (Resolves: rhbz#1574195)


author: Peter Oliver <rpm@mavit.org.uk> - 20170928-2
changelog:
  - Prefer zopflipng to optipng, since it should yield smaller files.
  - Use the font we built, rather than the one included with the source.


author: Mike FABIAN <mfabian@redhat.com> - 20170828-1
changelog:
  - Update to upstream snapshot tarball
  - split black-and-white and color fonts into different sub-packages.


author: Mike FABIAN <mfabian@redhat.com> - 20170827-1
changelog:
  - Update to upstream snapshot tarball
  - Update color emoji font to version 2.001, new design.
  - Contains the new emoji added in Unicode 10.0.0.


author: Mike FABIAN <mfabian@redhat.com> - 20170523-1
changelog:
  - Update to upstream snapshot tarball
  - This fixes the skin tones of the light/medium light male cook emoji,
    which had been swapped.


author: Mike FABIAN <mfabian@redhat.com> - 20170426-1
changelog:
  - Update to upstream snapshot tarball
    (fixes the family emoji sequences:
    kiss: woman, man U+1F469 U+200D U+2764 U+FE0F U+200D U+1F48B U+200D U+1F468
    couple with heart: woman, man U+1F469 U+200D U+2764 U+FE0F U+200D U+1F468)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
  - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
  - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
  - fix crash in parsing of received address in ntpq (#1616250)
  - avoid reading freed memory after disabling netlink socket (#1555401)
  - don't disable netlink socket on ENOBUFS error (#1555413)
  - replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-26
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-16
changelog:
  - refresh peers on routing updates (#1048132)
  - fix calculation of root dispersion (#1045377)
  - remove unnecessary IPv6 restrict line from default ntp.conf (#1048255)
  - remove kod from default restrict in ntp.conf (#1048255)
  - update logconfig documentation for patched default (#1048252)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-13
changelog:
  - ignore duplicate servers from dhclient
  - don't use -Wstrict-overflow with -fno-strict-overflow
  - buildrequire systemd-units
  - remove pie test


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - workaround failing autogen
  - move files from /lib
  - don't own ntp-units.d directory
  - drop old systemd scriptlets
  - fix dates in changelog


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - avoid rereading /etc/services (#768804)
  - remove ntp-wait dependency from ntpd service (#906753)
  - add missing and remove unrecognized options in documentation
  - update comments in some config files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - allow selection of cipher for private key files
  - set identity modulus size in ntp-keygen
  - create sntp subpackage
  - add sntp service
  - use system libopts
  - add Wants=ntp-wait.service to ntpd service
  - don't fail when /etc/sysconfig/ntpd is missing
  - modify mlock and multiopts patches to use autogen
  - make perl subpackage noarch


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-6
changelog:
  - bind broadcast client to new interfaces (#722690)
  - decode hex encoded passwords in ntpq/ntpdc
  - remove sample MD5 keys from default keys config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - fix crash in FIPS mode (#839280)
  - use systemd macros if available (#850235)
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-4
changelog:
  - start ntpdate service after nss-lookup.target (#837486)
  - update systemd-timedated integration (#846077)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - update service file for systemd-timedated-ntp target (#816495)
  - allow service to set realtime scheduler (#810801)
  - drop comment enabling local driver in default config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-3
changelog:
  - pull in time-sync.target from ntpdate.service (Lennart Poettering)
  - link with -Wl,-z,relro,-z,now options
  - fix typo in ntpq man page (#664525)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-0.1.rc10
changelog:
  - update to 4.2.6p3-RC10
  - fix system peer unmarking when unreachable
  - fix broadcastdelay option
  - fix automatic broadcast delay calibration
  - fix ntp-keygen -V crash
  - avoid unnecessary timeout in ntpdate
  - drop nano patch
  - convert ChangeLog to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-5
changelog:
  - remove systemctl dependency for now
  - suppress chkconfig output in %post (#629285)
  - generate ntp_decode(5) man page (#632300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-2
changelog:
  - add support for systemd (#617328)
  - retry few times in ntpdate init script before giving up (#445229)
  - add fourth pool server to default ntp.conf and use iburst


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-2
changelog:
  - update ntpstat to use current system variable names (#588067)
  - print synchronization distance instead of dispersion in ntpstat
  - clarify ntpd -q description


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-0.1.rc5
changelog:
  - update to 4.2.6p1-RC5
  - support NTPSERVERARGS variable in dhclient script (#558110)
  - don't use deprecated egrep (#548182)
  - don't verify ntp.conf (#481151)
  - compile with PPS API support
  - include new sntp


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.1-6.0.1.4
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: David King <dking@redhat.com> - 2.9.1-6.4
changelog:
  - Fix CVE-2015-8035 (#1595697)
  - Fix CVE-2018-14404 (#1602817)
  - Fix CVE-2017-15412 (#1729857)
  - Fix CVE-2016-5131 (#1714050)
  - Fix CVE-2017-18258 (#1579211)
  - Fix CVE-2018-1456 (#1622715)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-2
changelog:
  - remaining cleanups from merge bug rhbz#226079
  - do not put the docs in the main package, only in -devel rhbz#864731


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-1
changelog:
  - upstream release of 2.9.0
  - A few new API entry points
  - More resilient push parser mode
  - A lot of portability improvement
  - Faster XPath evaluation
  - a lot of bug fixes and smaller improvement


author: Daniel Veillard <veillard@redhat.com> - 2.9.0-0rc1
changelog:
  - upstream release candidate 1 of 2.9.0
  - introduce a small API change, but ABI compatible, see
    https://mail.gnome.org/archives/xml/2012-August/msg00005.html
    patches for php, gcc/libjava and evolution-data-connector are upstream
    Grab me in cases of problems veillard@redhat.com
  - many bug fixes including security aspects and small improvements


author: Daniel Veillard <veillard@redhat.com> - 2.7.8-1
changelog:
  - Upstream release of 2.7.8
  - various bug fixes, including potential crashes
  - new non-destructive formatting option
  - date parsing updated to RFC 5646


author: Daniel Veillard <veillard@redhat.com> - 2.7.7-1
changelog:
  - Upstream release of 2.7.7
  - fix serious trouble with zlib >= 1.2.4
  - xmllint new option --xpath
  - various HTML parser improvements
  - includes a number of nug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
changelog:
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents


author: Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
changelog:
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups


author: Daniel Veillard <veillard@redhat.com> 2.6.27-1
changelog:
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Anton Arapov <anton@redhat.com> - 1:2.11-5
changelog:
  - Fix the wrong call of the dmi_chassis_type function call. Thus fix
    an issue on the systems with the chassis lock available, application
    doesn't fall out with the out of spec error anymore.


author: Dave Jones <davej@redhat.com>
changelog:
  - Don't try to modify areas mmap'd read-only.
  - Don't build on ia64 any more.
    (It breaks on some boxes very badly, and works on very few).


author: Axel Thimm <Axel.Thimm@ATrpms.net>
changelog:
  - Update firmware to 1.8a.
  - split package into enc/dec firmwares.
  - version acording to origin, note that the two firmwares have
    different versions, so none is really suitable for the main package.


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Thomas Woerner <twoerner@redhat.com> 1.2.28-1
changelog:
  - added firewalld check to prevent usage of s-c-fw if firewalld is running
  - fixed gtk_label_autowrap not to change alignments
  - fixed port of libvirt-tls (rhbz#565625)
  - fixed requirement for newt-python (was newt before)
  - return -2 for ports > 65535 in fw_functions.getPortID for better port error
    reporting
  - hide dialogs before going on (rhbz#643966)
  - updated translations: ca, de, he, hi, ja, nb, pa, pt, sk, sv, ta, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.26-1
changelog:
  - added libvirt services (rhbz#565625)
  - added Bakula service (rhbz#588377)
  - fixed DBUS mechanism to report complete syslog message (rhbz#604623)
  - fixed crash because of missing /etc/services file (rhbz#604726)
  - updated translations: ar, as, bn_IN, da, de, es, fi, fr, gu, he, hi, is, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, ru, ta, te, 
                          zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.25-1
changelog:
  - fixed lokkit: do not create or alter firewall in selinux only mode
    (rhbz#583986)
  - use new icons (rhbz#583715)
  - fixed treeviewtooltips to not show the tooltip if an overlapping window has
    the focus
  - updated translations: bn_IN, de, es, gu, it, kn, ml, mr, nl, or, pa, pl, pt,
                          pt_BR, ru, sk, sr, sr@latin, te


author: Thomas Woerner <twoerner@redhat.com> 1.2.24-1
changelog:
  - DBUS-mechanism: report errors to syslog and print traceback (rhbz#563354)
  - fixed minor misspellings (rhbz#566468)
  - msgmerged po files
  - added missing default values for ip*tables-config content (rhbz#566869)
  - autofoo utils update
  - fixed max length of user defined interface name in interfaceDialog
  - added missing range check to port_entry_changed_cb
  - fixed sensitiveness of protocol label in portDialog
  - fixed misuse of MARK extension in nat table, now in mangle table
  - port forwarding dialog usability fixes (rhbz#507638)
  - use new fw_functions.checkInterface function in tui and gui
  - new function to check interface names in fw_functions
  - use new checkInterface function in parser for trust, masq and forward-port
  - add wlan standard device
  - fixed build (fw_nm.py not packaged)
  - updated translations: bn_IN, cs, da, de, el, en_GB, es, fi, fr, hu, is, it,
                          ja, nb, nl, or, pl, pt, pt_BR, ru, sr, sr@latin, sv,
                          te, uk


author: Thomas Woerner <twoerner@redhat.com> 1.2.22-1
changelog:
  - using NetworkManager DBUS interface to replace NCDeviceList from
    system-config-network
  - not opening orig port for local port forwarding, only new port is open
  - added isakmp support for IPsec (rhbz#504446)
  - added amanda client support (rhbz#541679)
  - fixed requirement for setenforce: libselinux-utils instead of libselinux
  - removed unused import socket
  - added download url to Source tag in spec file
  - fixed wrong license header in src/fw_tui.py (LGPL instead of GPL)
  - update cluster-suite service: disable rgmanager and cssd
  - removed separator at the end of the Options menu (rhbz#531635)
  - removed 2049/udp from NFS4 service (rhbz#532491)


author: Thomas Woerner <twoerner@redhat.com> 1.2.21-1
changelog:
  - fixed Policykit v0 compatibility for Fedora version 10 and 11: python-slip
    for PolicyKit v0 does not provide dbus
  - updated translations: bn_IN, uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.19-1
changelog:
  - enhanced build environment to support usermode and policykit switches, new
    options for configure and spec file
  - make toplevel invisible to not show half initialized window while policykit
    dialog is shown
  - system-config-firewall.desktop.in moved to config subdir
  - disable dbus usage if gui is used as root (needed for policykit v0)
  - do not report dbus error if there is no firewall configuration (empty or
    missing /etc/sysconfig/system-config-firewall)
  - resize main window to comfortably fit in a 800x600 gnome desktop
  - moved all config files into config subdir: sysconfig, dekstop, pam and console
  - new infrastructure to enable policy translations
  - print exception if polkit authorization failes to console
  - show dbus error dialog if dbus conection can not be established
  - set title to APP_NAME for dialogs if there is no title
  - center dialogs on screen if there is no parent
  - make main app invisible at first to prevent to show an empty app while
    PolicyKit password dialog is visible
  - updated translations: as, bn_IN, ca, da, de, ca, cs, es, fi, fr, gu, hi, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk,
                          sr, sr@latin, sv, ta, te, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.18-1
changelog:
  - added support for PolicyKit
  - removed unused inconsistent flag from CellRendererToggle in serviceView (rhbz#521144)
  - made "Port/Protocol" cell resizable in "Trusted Services"-view
  - fixed hidden one line label after resize caused by fix for bgo#315462
  - fixed startup busy loops if assistive technologies is enabled (rhbz#515048)
    by moving set_model after adding the columns to a TreeView
  - fixed tui to create valid empty self.config object (rhbz#518210)
  - failing to load the icon in fw_gui.setupScreen should not be fatal
    (rhbz#508186)
  - made description column in settings dialog resizable
  - removed rhpl usage (rhbz#508991)
  - fixed not reappearing TreeViewTooltips if mouse moved in the tooltip popup
  - hide TreeViewTooltips while scrolling
  - code cleanup
  - sort ports in fw_services by protocol, id
  - updated translations: as, bn_IN, ca, da, de, es, fi, fr, gu, hi, kn, hu, it, 
                          ja, ko, ml, mr, nl, or, pa, pl, pt, pt_BR, ru, sk, sr,
  			sr@latin, ta, te, uk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.17-1
changelog:
  - Added Red Hat Cluster Suite to trusted services (rhbz#493668)
  - Fixed wrong patch for system-config-firewall-tui (rhbz#461046)
  - Fixed sysctl parser to also support ';' for comments
  - Fixed port range check for service names containing '-'
  - New column in serviceView for conntrack helper, removed from tooltip
  - New column in icmpView for protocol types, removed from tooltip
  - Added TFTP and TFTP client support (rhbz#494417)
  - Fixed sensitiveness of OK button in portDialog if editing an Port
    (rhbz#500380)
  - Added missing tooltips for buttons in mainNotebook tabs. (rhbz#493872)
  - updated po files


author: Thomas Woerner <twoerner@redhat.com> 1.2.16-1
changelog:
  - fixed build system to update desktop file from desktop.in
    fixes icon reference in desktop file (rhbz#493674)
  - updated translations: fr


author: Thomas Woerner <twoerner@redhat.com> 1.2.15-1
changelog:
  - fixed icon reference in desktop file (rhbz#493674)
  - fixed po/POTFILES.in
  - updated translations: as, bn_IN, el, fi, gu, hi, hu, it, kn, ko, mai, ml, mr, or, pa, pt, ru, sk, sv, ta, te, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new build environment using configure, autofoo and intltool
  - fixed typo in router-solicitation description (rhbz#490979)
  - new themable application icon: preferences-system-firewall (rhbz#454402)
  - make backup copies before overwriting files (rhbz#437374)
  - updated translations:


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - fixed two typos in fw_icmp (rhbz#467334)
  - added ability to sort custom rules files (rhbz#467696)
  - fixed modified test in sysctl writer: fixes rhbz#462325
    also removed quotes around values for new keys
  - some build fixes
  - updated translations for: as, de, fi, fr, he, hi, ko, hu, it, ja, ko, ml,
                              pl, pt_BR, ru, sk, sr, sr@latin, sv, ta, te, 
                              zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - only provide lang files in tui sub-package (rhbz#465572)
  - updated translations for: as, bn_IN, ca, cs, es, fr, gu, it, ja, kn, mr, nl,
                              pa, or, pl, pt_BR, sk, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - use dialogs for parser errors in tui (rhbz#457485)
  - enable to add protocol specific (IPv4, IPv6) icmp types for ICMP filtering
  - updated translations for he, ja, ko and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - lokkit: fixed path for system-config-firewall-tui (rhbz#454108)
  - updated translations for: it, fr, nl, ru, sr, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - fixed format string to silence inttool
  - new remider to check if the ip*tables services are enabled
  - use proper dialog functions in the tui
  - updated translations: cs, de, es, gu, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-1
changelog:
  - new tui interface
  - new system-config-firewall-tui
  - new client services for ipp and samba
  - lokkit: fixed disabling of firewall in force mode (rhbz#443411)
  - disabled port forwarding for IPv6
  - some minor fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.2.7-1
changelog:
  - fixed crash if encoding is not UTF-8 (rhbz#439902)
  - updated translations: bn_IN, cs, de, es, fi, fr, gu, hi, it, kn, ko, ml,
                          mr, pa, pl, pt_BR, ru, sr, sr@latin, ta, te, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-1
changelog:
  - new ICMP filter to block specified ICMP types
  - fixed minor problem in lokkit (initialize old_config)
  - set starting diretory for custom rules files to /etc/sysconfig
  - more build environment changes for git
  - use gtk.CellRendererToggle instead of own CellRendererCheck
  - several parser changes for transparent error handling and output
  - some minor enhancements
  - translation updates


author: Thomas Woerner <twoerner@redhat.com> 1.2.4-1
changelog:
  - fixed overwrite problem if IPTABLES_SAVE_ON_RESTART is set (rhbz#431961)
  - use SELECTION_NONE for trustedView


author: Thomas Woerner <twoerner@redhat.com> 1.2.3-1
changelog:
  - fixed traceback for empty configuration use in life installer (rhbz#430963)
  - use config-util for userhelper configuration (rhbz#428392)
  - mark dirty after applying new default configuration
  - do not overwrite attributes filename and converted in config
  - use new shared ChooserButton
  - fixed forward dialog and labels to use current dialog width
  - use tempfile.mkdtemp for better security
  - updated translations: fi, fr, it, ja, nl, pt_BR, sr and sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.2.2-1
changelog:
  - fixed icmp handling for ip6tables in FORWARD chain
  - do state established, related test early in FORWARD chain
  - fixed typo in address for port-forwarding
  - added IPv4 only message to masquerading and port-forwarding for lokkit
  - updated translations: es, pl


author: Thomas Woerner <twoerner@redhat.com> 1.2.1-1
changelog:
  - fixed traceback for clean selinux configuration (rhbz#430963)
  - fixed icmp handling for ip6tables
  - updated translations: as, de, it, ja, pl, pt_BR, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 1.2.0-1
changelog:
  - added port forwarding
  - using INPUT chain in table filter instead of RH-Firewall-1-INPUT
  - fixed masquerading
  - rewrite of firewall generation code
  - trusted hosts now also allowed for FORWARD
  - lots of bug fixes
  - gui enhancements


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1
changelog:
  - new fw_compat, used in config-convert and fw_sysconfig to automatically 
    convert old system-config-securitylevel configurations
  - new wizard look
  - fixed range check for user defined ports
  - some code cleanup
  - updated translations for fi, fr and ja


author: Thomas Woerner <twoerner@redhat.com> 1.1.2-1
changelog:
  - fw_gui: fixed row activation for masquerading
  - fw_gui: fixed _setInterfaces to use internal functions to correctly set
    toggles
  - fw_gui: show info dialog if no config exists and firewall gets enabled: new
    function enableFirewall
  - fw_gui, fw_tui: disable firewall if no config exists
  - fw_gui, fw_tui: do not print traceback if NCDeviceList.getDeviceList raises
    and exception
  - forward masqueraded connections
  - gtk_cellrenderercheck: fixed size calculations
  - fw_sysconfig: set config.filename to None for merged configuration in
    read_sysconfig_config if no configuration exists
  - new translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - use radio buttons for skill menu entries to show active level
  - fixed convert-config problem if there is no configuration to convert
    (rhbz#426477)
  - minor string changes
  - new it and pt_BR translations


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-1
changelog:
  - new default configurations: server, desktop
  - cleanup of wizard: dropped network connection tab
  - new option in wizard to keep configuration or load a default configuration
  - new menu entry and dialog to configure iptables and ip6tables service settings
  - some enhancements to the gtk_cellrenderercheck for better look and feel


author: Thomas Woerner <twoerner@redhat.com> 1.1.0-0
changelog:
  - ports are ports and services are services: there is a new service tag to
    enable services; a port is not enabling a service anymore
  - new conversion tool for 1.0.X to 1.1.X configuration
  - new version option for lokkit
  - wizard
    - dropped network connection selection tab
    - using keep configuration check instead of clear configuration check
    - added default configuration selection
  - gui: new menu for skill level and load default configuration
  - use choices in optparse, removed obsolete check functions


author: Thomas Woerner <twoerner@redhat.com> 1.0.12-1
changelog:
  - allow to activate checkboxes by row activation in treeviews
  - code cleanup in view_toggle_cb
  - fixed port display for IPSec
  - use system icons where possible, new wizard icons
  - added fallback for CellRendererCheck if icons are missing, size fixes
  - added tooltips for toolbar and menu entries (if needed)
  - improved more english texts (rhbz#395801)
    thanks to Paul W. Frields for the initial patch


author: Thomas Woerner <twoerner@redhat.com> 1.0.11-1
changelog:
  - fixed crash on startup for network device aliases (rhbz#384891)
    thanks to Loran Freval for the patch
  - added port entry max length in other ports dialog (rhbz#385931)
  - added version number to about dialog (rhbz#387891)
  - improved some english texts (rhbz#383741)
    thanks to Paul W. Frields for the initial patch
  - code cleanup with start speedup
  - do not allow to add custm rules for ipv6:nat
  - also translate parser error messages


author: Thomas Woerner <twoerner@redhat.com> 1.0.10-1
changelog:
  - fixed problem with network devices (rhbz#331671)
  - dropped obsolete translation no.po (rhbz#332331)


author: Thomas Woerner <twoerner@redhat.com> 1.0.9-1
changelog:
  - do not report configuration failed if ipv6 is disabled (rhbz#355561)
  - print messages if lokkit failed
  - lokkit be more verbose on restarting ipXtables in verbose mode


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-2
changelog:
  - lokkit: write new config with nostart option (rhbz#353961)
  - translation fixes for de, it, nb, sr@latin


author: Thomas Woerner <twoerner@redhat.com> 1.0.8-1
changelog:
  - use extension match for protocols (rhbz#229879)
  - use ipv6-icmp instead of icmpv6 (rhbz#291001)
  - use ':' in tui as port/proto delimiter for other ports (rhbz#292171)
  - some translation fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.7-1
changelog:
  - new translations
  - added openvpn to services (rhbz#)
  - fixed typo in description text for ipsec
  - using port numbers instead of port names for services
  - renamed some variables to be consistent
  - make tolltip better: bigger text, helper modules
  - dropped unused code: inconsistent handling
  - make port check button inactive in add_port_cb
  - new function _addDevice: code cleanup
  - allow to set variables in ipXtablesConfig, which were not set before
  - fixed os.system calls in ipXtablesClass to return proper return values
  - fixed status funciton in ipXtablesClass
  - new _append_unique function in fw_parser to prevent duplicates
  - added warning dialog for missing or unusable /etc/sysconfig/ip*tables files
  - fixed expand of the warning label in the startup dialog


author: Thomas Woerner <twoerner@redhat.com> 1.0.6-1
changelog:
  - dropped --stop option from fw_gui::genArgs
  - new translations
  - sysctl support for masquerading (net.ipv4.ip_forward will be set)
  - glade file: fixed spacings, dropped not needed containers


author: Thomas Woerner <twoerner@redhat.com> 1.0.5-4
changelog:
  - fixed problem if /etc/sysconfig/system-config-securtylevel and 
    /etc/sysconfig/system-config-firewall are not readable


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-1
changelog:
  - more translations
  - build environment changes
  - dropped build stage, because it is not needed at all


author: Thomas Woerner <twoerner@redhat.com> 1.0.3-1
changelog:
  - added missing system-config-securitylevel compatibility files
  - string and documentation fixes
  - fixed typos reported by Alain Portal
  - more translations
  - fixed buildroot
  - cleanup and changes according to review (rhbz#253232)
  - moved doc to tui sub package


author: Thomas Woerner <twoerner@redhat.com> 1.0.2-1
changelog:
  - obsolete and provide system-config-securitylevel package
  - added compat files for anaconda, firstboot and system-config-kickstart
  - lokkit fixes for nostart option:
    - only write config for iptables and ip6tables if enabled
    - stop iptables and ip6tables if disabled
    - unlink iptables and ip6tables rule files if disabled
  - lokkit: new option --update to regenerate firewall configuration if not 
    disabled
  - check for include files only when writing firewall configuration
  - clean buildroot in install
  - made system-config-securitylevel a synonym for system-config-firewall
  - ip6tables: reject with icmp6-adm-prohibited instead of icmp6-port-unreachable
    (rhbz#250915)
  - moved config files from /etc/sysconfig into tui sub package
  - removed x bit from import files


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-2
changelog:
  - fixed disabled string in fw_gui
  - set mode after copying of ip*tables-config to 0600
  - fixed categories in desktop file


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-1
changelog:
  - fixed startup and description texts
  - added missing requirement for system-config-network-tui
  - moved base python files into tui sub package
  - fixed requirements
  - made package noarch


author: Edward Leung <edward.leung@oracle.com> - 2.0.27-1.0.1
changelog:
  - IPMI SMB kernel module name is ipmi_ssif in all modern kernels. 
    openipmi-helper script fixed. [Orabug: 27093288]


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-9
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-8
changelog:
  - shorter probe interval is used in init script, making the service startup
    quicker in most situations (#475101)


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-3
changelog:
  - split ipmitool to separate package
  - added 'reload' functionality to init script
  - added seraparate -gui subpackage


author: Phil Knirsch <pknirsch@redhat.com> 2.0.6-1
changelog:
  - Fixed bug with type conversion in ipmitool (#191091)
  - Added python bindings 
  - Split off perl and python bindings in separate subpackages
  - Dropped obsolete patches
  - Added missing buildprereq on readline-devel
  - Made it install the python bindings properly on 64bit archs


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-18
changelog:
  - Updated ipmitool to latest upstream version.
  - Removed 3 patches for already fixed bugs in latest ipmitool.
  - Adapted warning message fix for ipmitool for latest version.


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-16
changelog:
  - Included FRU fix for displaying FRUs with ipmitool
  - Included patch for new option to specify a BMC password for IPMI 2.0 sessions


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-13
changelog:
  - Rebuilt to link against latest openssl libs.
  - Fixed ipmitool not setting session privilege level (#172312)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-9
changelog:
  - Another update to latest initscripts from Dell
  - Fixed some missing return statements for non-void functions (#164138)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-7
changelog:
  - Fixed the unwanted output of failed module loading of the initscript. Behaves
    now like all our other initscripts (#165476)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-2
changelog:
  - Updated to OpenIPMI-1.4.14
  - Split the main package into normal and libs package for multilib support
  - Added ipmitool-1.8.2 to OpenIPMI and put it in tools package
  - Added sysconf and initscript (#158270)
  - Fixed oob subscripts (#149142)


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.23-1
changelog:
  - New version 0.0.23
  - added autodetection for more common tools like
    gnu cp or tail
  - added option --noautosize to prevent overriding
    of user-defined or system-default paper size
  - use shell built-in 'type -t' instead of 'which'
    utility for detection of file availability


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.22-1
changelog:
  - New version 0.0.22
  - autodetection for tools/program paths, consolidated
    error code handling, build warnings cleanup


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-6
changelog:
  - fix cleaning up of temporary files with libpaper(Debian)
  - fix xmllint postvalid (added noent option), use nonet
    switch


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-3
changelog:
  - merge review(#226568):
    ship documentation files, fix license tag, use recommended
    parallel make, make install instead of macro, require libxslt
    instead of direct binary requirement


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.20-1
changelog:
  - new version 0.0.20
  - added experimental fop support(additional output formats)
  - possibility to read stylesheet from STDIN, using recursive
    cp in docbook formats, updated man pages


author: Tim Waugh <twaugh@redhat.com> 0.0.12-2
changelog:
  - Disable magic encoding detection, since the stylesheets don't handle
    it well at all (bug #80732).


author: Tim Waugh <twaugh@redhat.com> 0.0.11-1
changelog:
  - 0.0.11.
  - xmlto.mak no longer needed.
  - CVS patch no longer needed.
  - Update docbook-xsl requirement.
  - Ship xmlif.
  - Run tests.
  - No longer a noarch package.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-19
changelog:
  - Resolves:rh#886446 - system-config-language tracebacks in TUI mode
  - Resolves:rh#892560 - system-config-language only provides english in Fedora 18
  - Resolves:rh#889956 - include language Kashmiri Arabic


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-5
changelog:
  - apply patch s-c-l-634556.patch
  - resolves bug #634556
  - modifications in s-c-l to install even conditional & default packages


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-2
changelog:
  - resolves bug #624008
  - apply patch s-c-l-624008.patch
  - adds Low-German (nds_DE) to s-c-l
  - comment a redundant line in language_backend.py


author: Naveen Kumar <nkumar@redhat.com>- 1.3.4-2
changelog:
  - apply patch scl-1.3.4-devel.patch
  - contains some enhanc. reg. force. change of lang. when dep. are not installed 
  - Resolves Bug #568688


author: EL Errata <el-errata_ww@oracle.com> - 3.13.1-266.0.1
changelog:
  - Make unconfined domains part of domain_named_attribute [Orabug: 30700069]
  - Make tuned work with mls policy [Orabug: 29778485]
  - Make rpm_transition_script() a nested optional policy in init policy module [Orabug: 29661269]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Add fs_relabel_pstore_dirs() interface. [Orabug: 28260775]
  - Allow systemd running as init_t to relabel pstore directories. [Orabug: 28260775]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Allow insmod_t to load modules BZ(1544189) [Orabug: 28260775]
  - Allow chronyd_t to execute shell scripts [Orabug: 28260775]
  - SELinux support for cgroup2 filesystem. [OraBug 28127822]
  - refpolicy: Define getrlimit permission for class process [OraBug 28229492]
  - Add vhost-scsi to be vhost_device_t type [OraBug 27774921]
  - Obsolete docker-engine-selinux [OraBug 26439663]
  - Fix container selinux policy [OraBug 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
  Resolves: rhbz#1765063


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261
changelog:
  - Update sudo_role_template() to allow caller domain to read syslog pid files
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
  - Allow ganesha_t domain to read system network state and connect to cyphesis_port_t
  Resolves: rhbz#1653857
  - Label /var/log/collectd.log as collectd_log_t
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319
  - Update sbd policy to allow manage cgroups
  Resolves: rhbz#1715136
  - Allow sudo userdomain to run rpm related commands
  - Update rpm_run() interface to avoid duplicate role transition in sudo_role_template
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258
changelog:
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256
changelog:
  - Allow cupsd_t domain to manage cupsd_tmp_t temp link files
  Resolves: rhbz#1719754
  - Allow svnserve_t domain to read /dev/random
  Resolves: rhbz#1727458
  - Update sudodomains to make working confined users run sudo/su
  Resolves: rhbz#1699391


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254
changelog:
  - Rebuild selinux-policy build because of broken RHEL-7.8 buildrood
  during build of selinux-policy-3.13.1-253
  Resolves: rhbz#1727341


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253
changelog:
  - Label user cron spool file with user_cron_spool_t
  Resolves: rhbz#1727341
  - Allow svnserve_t domain to read system state
  Resolves: rhbz#1727458
  - Update svnserve_t policy to make working svnserve hooks
  Resolves: rhbz#1727458
  - Update gnome_role_template() template to allow sysadm_t confined user to login to xsession
  Resolves: rhbz#1727379
  - Update gnome_role_template() to allow _gkeyringd_t domains to chat with systemd_logind over dbus
  Resolves: rhbz#1727379
  - Allow userdomain gkeyringd domain to create stream socket with userdomain
  Resolves: rhbz#1727379
  - Allow cupsd_t to create lnk_files in /tmp. BZ(1401634)
  Resolves: rhbz#1719754
  - Allow mysqld_t domain to manage cluster pid files
  Resolves: rhbz#1715805
  - Relabel  /usr/sbin/virtlockd from virt_exec_t to virtlogd_exec_t.
  Resolves: rhbz#1714896
  - Allow systemd_hostnamed_t domain to dbus chat with sosreport_t domain
  Resolves: rhbz#1705599
  - Allow rhsmcertd_t domain to send signull to all domains
  Resolves: rhbz#1701338
  - Allow cloud_init_t domain to ccreate iptables files with correct SELinux label
  Resolves: rhbz#1699249
  - Allow dnsmasq_t domain to manage NetworkManager_var_lib_t files
  - Allow certmonger to geattr of filesystems BZ(1578755)
  - Update  tomcat_can_network_connect_db boolean to allow tomcat domains also connect to redis ports Resolves: rhbz#1687497
  - Allow lograte_t domain to manage collect_rw_content files and dirs
  Resolves: rhbz#1658319
  - Add interface collectd_manage_rw_content()
  - Allow glusterd_t domain to setpgid
  Resolves: rhbz#1653857
  - Allow sysadm_sudo_t to use SELinux tooling.
  Resolves: rhbz#1727341
  - Allow sysadm_t domain to create netlink selinux sockets
  Resolves: rhbz#1727379
  - Allow systemd_resolved_t to dbusd chat with NetworkManager_t
  Resolves: rhbz#1723877
  - Allow crack_t domain read /et/passwd files
  Resolves: rhbz#1721093
  - Allow sysadm_t domain to dbus chat with rtkit daemon
  Resolves: rhbz#1720546
  - Allow x_userdomains to nnp domain transition to thumb_t domain
  Resolves: rhbz#1712603
  - Dontaudit writing to user home dirs by gnome-keyring-daemon
  Resolves: rhbz#1703959
  - Update logging_send_audit_msgs(sudodomain() to control TTY auditing for netlink socket for audit service
  Resolves: rhbz#1699391
  - Allow systemd_tmpfiles_t domain to relabel from usermodehelper_t files
  Resolves: rhbz#1699063
  - Add interface kernel_relabelfrom_usermodehelper()


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-247
changelog:
  - Fix typo in gpg SELinux module
  - Update gpg policy to make ti working with confined users
  Resolves: rhbz#1535109
  - Alow nrpe_t to send signull to sssd domain when nagios_run_sudo boolean is turned on
  Resolves: rhbz#1653309
  - Allow nrpe_t domain to be dbus cliennt
  Resolves: rhbz#1653309
  - Add interface sssd_signull()
  Resolves: rhbz#1653309
  - Update userdomains to allow confined users to create gpg keys
  Resolves: rhbz#1535109


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-246
changelog:
  - Allow ngaios to use chown capability
  Resolves: rhbz#1653309
  - Dontaudit gpg_domain to create netlink_audit sockets
  Resolves: rhbz#1535109
  - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
  Resolves: rhbz#1558836
  - Update domain_can_mmap_files() boolean to allow also mmap lnk files


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-241
changelog:
  - Update vmtools policy Resolves: rhbz#1656814 Allow domain transition from vmtools_t to vmtools_unconfined_t when shell_exec_t is entrypoint.
  - Allow virt_qemu_ga_t domain to read udev_var_run_t files
  Resolves: rhbz#1663092
  - Update nagios_run_sudo boolean with few allow rules related to accessing sssd
  Resolves: rhbz#1653309
  - Allow nfsd_t to read nvme block devices BZ(1562554)
  Resolves: rhbz#1655493
  - Allow tangd_t domain to bind on tcp ports labeled as tangd_port_t
  Resolves: rhbz#1650909
  - Allow all domains to send dbus msgs to vmtools_unconfined_t processes
  Resolves: rhbz#1656814
  - Label /dev/pkey as crypt_device_t
  Resolves: rhbz#1623068
  - Allow sudodomains to write to systemd_logind_sessions_t pipes.
  Resolves: rhbz#1687452
  - Allow all user domains to read realmd_var_lib_t files and dirs to check if IPA is configured on the system
  Resolves: rhbz#1667962
  - Fixes: xenconsole does not start
  Resolves: rhbz#1601525
  - Label /usr/lib64/libcuda.so.XX.XX library as textrel_shlib_t.
  Resolves: rhbz#1636197
  - Create tangd_port_t with default label tcp/7406
  Resolves: rhbz#1650909


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-240
changelog:
  - named wants to access /proc/sys/net/ipv4/ip_local_port_range to get ehphemeral range.
  Resolves: rhbz#1683754
  - Allow sbd_t domain to bypass permission checks for sending signals
  Resolves: rhbz#1671132
  - Allow sbd_t domain read/write all sysctls
  Resolves: rhbz#1671132
  - Allow kpatch_t domain to communicate with policykit_t domsin over dbus
  Resolves: rhbz#1602435
  - Allow boltd_t to stream connect to sytem dbus
  Resolves: rhbz#1589086
  - Update userdom_admin_user_template() and init_prog_run_bpf() interfaces to make working bpftool for confined admin
  Resolves: rhbz#1626115
  - Update unconfined_dbus_send() interface to allow both direction communication over dbus with unconfined process.
  Resolves: rhbz#1589086


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-239
changelog:
  - Allow sbd_t domain read/write all sysctls
  Resolves: rhbz#1671132
  - Allow kpatch_t domain to communicate with policykit_t domsin over dbus
  Resolves: rhbz#1602435
  - Allow boltd_t to stream connect to sytem dbus
  Resolves: rhbz#1589086
  - Update unconfined_dbus_send() interface to allow both direction communication over dbus with unconfined process.
  Resolves: rhbz#1589086


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-238
changelog:
  - Update redis_enable_notify() boolean to fix sending e-mail by redis when this boolean is turned on
  Resolves: rhbz#1646765


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-237
changelog:
  - Allow virtd_lxc_t domains use BPF
  Resolves: rhbz#1626115
  - F29 NetworkManager implements a new code for IPv4 address conflict detection (RFC 5227) based on n-acd [1], which uses eBPF to process ARP packets from the network.
  Resolves: rhbz#1626115
  - Allow unconfined user all perms under bpf class BZ(1565738
  Resolves: rhbz#1626115
  - Allow unconfined and sysadm users to use bpftool BZ(1591440)
  Resolves: rhbz#1626115
  - Allow systemd to manage bpf dirs/files
  Resolves: rhbz#1626115
  - Create new type bpf_t and label /sys/fs/bpf with this type
  Resolves:rhbz#1626115
  - Add new interface init_prog_run_bpf()
  Resolves:rhbz#1626115
  - add definition of bpf class and systemd perms
  Resolves: rhbz#1626115


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-236
changelog:
  - Update policy with multiple allow rules to make working installing VM in MLS policy
  Resolves: rhbz#1558121
  - Allow virt domain to use interited virtlogd domains fifo_file
  Resolves: rhbz#1558121
  - Allow chonyc_t domain to rw userdomain pipes
  Resolves: rhbz#1618757
  - Add file contexts in ganesha.fc file to label logging ganesha files properly.
  Resolves: rhbz#1628247


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-235
changelog:
  - Allow sandbox_xserver_t domain write to user_tmp_t files
  Resolves: rhbz#1646521
  - Allow virt_qemu_ga_t domain to read network state
  Resolves: rhbz#1630347
  - Bolt added d-bus API for force-powering the thunderbolt controller, so system-dbusd needs acces to boltd pipes
  Resolves: rhbz#1589086
  - Add boltd policy
  Resolves: rhbz#1589086
  - Allow virt domains to read/write cephfs filesystems
  Resolves: rhbz#1558836
  - Allow gpg_t to create own tmpfs dirs and sockets
  Resolves: rhbz#1535109
  - Allow gpg_agent_t to send msgs to syslog/journal
  Resolves: rhbz#1535109
  - Allow virtual machine to write to fixed_disk_device_t
  Resolves: rhbz#1499208
  - Update kdump_manage_crash() interface to allow also manage dirs by caller domain
  Resolves: rhbz#1491585
  - Add kpatch policy
  Resolves: rhbz#1602435
  - Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t
  Resolves: rhbz#1623942
  - Allow svnserve_t domain to create in /tmp svn_0 file labeled as krb5_host_rcache_t
  Resolves: rhbz#1475271
  - Allow systemd to mount boltd_var_run_t dirs
  Resolves: rhbz#1589086
  - Allow systemd to mounont boltd lib dirs
  Resolves: rhbz#1589086
  - Allow sysadm_t,staff_t and unconfined_t domain to execute kpatch as kpatch_t domain
  Resolves: rhbz#1602435
  - Allow passwd_t domain chroot
  - Add miscfiles_filetrans_named_content_letsencrypt() to optional_block
  - Allow unconfined domains to create letsencrypt directory in /var/lib labeled as cert_t
  Resolves: rhbz#1447278
  - Allow staff_t user to systemctl iptables units.
  Resolves: rhbz#1360470


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-234
changelog:
  - Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t
  Resolves: rhbz#1623942
  - Allow svnserve_t domain to create in /tmp svn_0 file labeled as krb5_host_rcache_t
  Resolves: rhbz#1475271
  - Allow passwd_t domain chroot
  - Add miscfiles_filetrans_named_content_letsencrypt() to optional_block
  - Allow unconfined domains to create letsencrypt directory in /var/lib labeled as cert_t
  Resolves: rhbz#1447278
  - Allow staff_t user to systemctl iptables units.
  Resolves: rhbz#1360470


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-233
changelog:
  - Allow gssd_t domain to manage kernel keyrings of every domain.
  Resolves: rhbz#1487350
  - Add new interface domain_manage_all_domains_keyrings()
  Resolves: rhbz#1487350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-232
changelog:
  - Allow gssd_t domain to read/write kernel keyrings of every domain.
  Resolves: rhbz#1487350
  - Add interface domain_rw_all_domains_keyrings()
  Resolves: rhbz#1487350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-230
changelog:
  -Allow nova_t domain to use pam
  Resolves: rhbz:#1640528
  - sysstat: grant sysstat_t the search_dir_perms set
  Resolves: rhbz#1637416
  - Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
  Resolves: rhbz#1630318
  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1564470
  - Make ganesha policy active again
  Resolves: rhbz#1511489


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.5
changelog:
  - Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.4
changelog:
  - Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
  Resolves: rhbz#1638427


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-229.3
changelog:
  - Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
  Resolves: rhbz#1638257


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-228
changelog:
  - Allow tomcat_domain to read /dev/random
  Resolves: rhbz#1631666
  - Allow neutron_t domain to use pam
  Resolves: rhbz#1630318


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-227
changelog:
  - Add interface apache_read_tmp_dirs()
  - Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
  Resolves: rhbz#1622602


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-226
changelog:
  - Allow tomcat servers to manage usr_t files
  Resolves: rhbz#1625678
  - Dontaudit tomcat serves to append to /dev/random device
  Resolves: rhbz#1625678
  - Allow sys_nice capability to mysqld_t domain
  - Allow dirsrvadmin_script_t domain to read httpd tmp files
  Resolves: rhbz#1622602
  - Allow syslogd_t domain to manage cert_t files
  Resolves: rhbz#1615995


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225
changelog:
  - Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
  Resolves: rhbz#1627114
  - Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
  Resolves: rhbz#1567753


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-224
changelog:
  - Allow tomcat Tomcat to delete a temporary file used when compiling class files for JSPs.
  Resolves: rhbz#1625678
  - Allow chronyd_t domain to read virt_var_lib_t files
  - Allow virtual machines to use dri devices. This allows use openCL GPU calculations. BZ(1337333)
  Resolves: rhbz#1625613
  - Allow tomcat services create link file in /tmp
  Resolves: rhbz#1624289
  - Add boolean: domain_can_mmap_files.
  Resolves: rhbz#1460322


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-223
changelog:
  - Make working SELinux sandbox with Wayland.
  Resolves: rhbz#1624308
  - Allow svirt_t domain to mmap svirt_image_t block files
  Resolves: rhbz#1624224
  - Add caps dac_read_search and dav_override to pesign_t domain
  - Allow iscsid_t domain to mmap userio chr files
  Resolves: rhbz#1623589
  - Add boolean: domain_can_mmap_files.
  Resolves: rhbz#1460322
  - Add execute_no_trans permission to mmap_exec_file_perms pattern
  - Allow sudodomain to search caller domain proc info
  - Allow xdm_t domain to mmap and read cert_t files
  - Replace optional policy blocks to make dbus interfaces effective
  Resolves: rhbz#1624414
  - Add interface dev_map_userio_dev()


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-221
changelog:
  - Allow ovs-vswitchd labeled as openvswitch_t domain communicate with qemu-kvm via UNIX stream socket
  - Allow httpd_t domain to mmap tmp files
  Resolves: rhbz#1608355
  - Update dirsrv_read_share() interface to allow caller domain to mmap dirsrv_share_t files
  - Update dirsrvadmin_script_t policy to allow read httpd_tmp_t symlinks
  - Label /dev/tpmrm[0-9]* as tpm_device_t
  - Allow semanage_t domain mmap usr_t files
  Resolves: rhbz#1622607
  - Update dev_filetrans_all_named_dev() to allow create event22-30 character files with label event_device_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-220
changelog:
  - Allow nagios_script_t domain to mmap nagios_log_t files
  Resolves: rhbz#1620013
  - Allow nagios_script_t domain to mmap nagios_spool_t files
  Resolves: rhbz#1620013
  - Update userdom_security_admin() and userdom_security_admin_template() to allow use auditctl
  Resolves: rhbz#1622197
  - Update selinux_validate_context() interface to allow caller domain to mmap security_t files
  Resolves: rhbz#1622061


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-219
changelog:
  - Allow virtd_t domain to create netlink_socket
  - Allow rpm_t domain to write to audit
  - Allow rpm domain to mmap rpm_var_lib_t files
  Resolves: rhbz#1619785
  - Allow nagios_script_t domain to mmap nagios_etc_t files
  Resolves: rhbz#1620013
  - Update nscd_socket_use() to allow caller domain to stream connect to nscd_t
  Resolves: rhbz#1460715
  - Allow secadm_t domain to mmap audit config and log files
  - Allow insmod_t domain to read iptables pid files
  - Allow systemd to mounton /etc
  Resolves: rhbz#1619785


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-218
changelog:
  - Allow kdumpctl_t domain to getattr fixed disk device in mls
  Resolves: rhbz#1615342
  - Allow initrc_domain to mmap all binaries labeled as systemprocess_entry
  Resolves: rhbz#1615342


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-216
changelog:
  - Allow kdumpctl_t domain to manage kdumpctl_tmp_t fifo files
  Resolves: rhbz#1615342
  - Allow kdumpctl to write to files on all levels
  Resolves: rhbz#1615342
  - Fix typo in radius policy
  Resolves: rhbz#1619197
  - Allow httpd_t domain to mmap httpd_config_t files
  Resolves: rhbz#1615894
  - Add interface dbus_acquire_svc_system_dbusd()
  - Allow sanlock_t domain to connectto to unix_stream_socket
  Resolves: rhbz#1614965
  - Update nfsd_t policy because of ganesha features
  Resolves: rhbz#1511489
  - Allow conman to getattr devpts_t
  Resolves: rhbz#1377915
  - Allow tomcat_domain to connect to smtp ports
  Resolves: rhbz#1253502
  - Allow tomcat_t domain to mmap tomcat_var_lib_t files
  Resolves: rhbz#1618519
  - Allow slapd_t domain to mmap slapd_var_run_t files
  Resolves: rhbz#1615319
  - Allow nagios_t domain to mmap nagios_log_t files
  Resolves: rhbz#1618675
  - Allow nagios to exec itself and mmap nagios spool files BZ(1559683)
  - Allow nagios to mmap nagios config files BZ(1559683)
  - Allow kpropd_t domain to mmap krb5kdc_principal_t files
  Resolves: rhbz#1619252
  - Update syslogd policy to make working elasticsearch
  - Label tcp and udp ports 9200 as wap_wsp_port
  - Allow few domains to rw inherited kdumpctl tmp pipes
  Resolves: rhbz#1615342


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-215
changelog:
  - Allow systemd_dbusd_t domain read/write to nvme devices
  Resolves: rhbz#1614236
  - Allow mysqld_safe_t do execute itself
  - Allow smbd_t domain to chat via dbus with avahi daemon
  Resolves: rhbz#1600157
  - cupsd_t domain will create /etc/cupsd/ppd as cupsd_etc_rw_t
  Resolves: rhbz#1452595
  - Allow amanda_t domain to getattr on tmpfs filesystem BZ(1527645)
  Resolves: rhbz#1452444
  - Update screen_role_template to allow caller domain to have screen_exec_t as entrypoint do new domain
  Resolves: rhbz#1384769
  - Add alias httpd__script_t to _script_t to make sepolicy generate working
  Resolves: rhbz#1271324
  - Allow kprop_t domain to read network state
  Resolves: rhbz#1600705
  - Allow sysadm_t domain to accept socket
  Resolves: rhbz#1557299
  - Allow sshd_t domain to mmap user_tmp_t files
  Resolves: rhbz#1613437


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-212
changelog:
  - Allow kpropd domain to exec itself
  Resolves: rhbz#1600705
  - Allow ipmievd_t to mmap kernel modules BZ(1552535)
  - Allow hsqldb_t domain to mmap own temp files
  Resolves: rhbz#1612143
  - Allow hsqldb_t domain to read cgroup files
  Resolves: rhbz#1612143
  - Allow rngd_t domain to read generic certs
  Resolves: rhbz#1612456
  - Allow innd_t domain to mmap own var_lib_t files
  Resolves: rhbz#1600591
  - Update screen_role_temaplate interface
  Resolves: rhbz#1384769
  - Allow cupsd_t to create cupsd_etc_t dirs
  Resolves: rhbz#1452595
  - Allow chronyd_t domain to mmap own tmpfs files
  Resolves: rhbz#1596563
  - Allow cyrus domain to mmap own var_lib_t and var_run files
  Resolves: rhbz#1610374
  - Allow sysadm_t domain to create rawip sockets
  Resolves: rhbz#1571591
  - Allow sysadm_t domain to listen on socket
  Resolves: rhbz#1557299
  - Update sudo_role_template() to allow caller domain also setattr generic ptys
  Resolves: rhbz#1564470
  - Allow netutils_t domain to create bluetooth sockets
  Resolves: rhbz#1600586


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-211
changelog:
  - Allow innd_t domain to mmap own var_lib_t files
  Resolves: rhbz#1600591
  - Update screen_role_temaplate interface
  Resolves: rhbz#1384769
  - Allow cupsd_t to create cupsd_etc_t dirs
  Resolves: rhbz#1452595
  - Allow chronyd_t domain to mmap own tmpfs files
  Resolves: rhbz#1596563
  - Allow cyrus domain to mmap own var_lib_t and var_run files
  Resolves: rhbz#1610374
  - Allow sysadm_t domain to create rawip sockets
  Resolves: rhbz#1571591
  - Allow sysadm_t domain to listen on socket
  Resolves: rhbz#1557299
  - Update sudo_role_template() to allow caller domain also setattr generic ptys
  Resolves: rhbz#1564470
  - Allow netutils_t domain to create bluetooth sockets
  Resolves: rhbz#1600586


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-209
changelog:
  - Allow sblim_sfcbd_t domain to mmap own tmpfs files
  Resolves: rhbz#1609384
  - Update logging_manage_all_logs() interface to allow caller domain map all logfiles
  Resolves: rhbz#1592028


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-208
changelog:
  - Dontaudit oracleasm_t domain to request sys_admin capability
  - Allow iscsid_t domain to load kernel module
  Resolves: rhbz#1589295
  - Update rhcs contexts to reflects the latest fenced changes
  - Allow httpd_t domain to rw user_tmp_t files
  Resolves: rhbz#1608355
  - /usr/libexec/udisks2/udisksd should be labeled as devicekit_disk_exec_t
  Resolves: rhbz#1521063
  - Allow tangd_t dac_read_search
  Resolves: rhbz#1607810
  - Allow glusterd_t domain to mmap user_tmp_t files
  - Allow mongodb_t domain to mmap own var_lib_t files
  Resolves: rhbz#1607729
  - Allow iscsid_t domain to mmap sysfs_t files
  Resolves: rhbz#1602508
  - Allow tomcat_domain to search cgroup dirs
  Resolves: rhbz#1600188
  - Allow httpd_t domain to mmap own cache files
  Resolves: rhbz#1603505
  - Allow cupsd_t domain to mmap cupsd_etc_t files
  Resolves: rhbz#1599694
  - Allow kadmind_t domain to mmap krb5kdc_principal_t
  Resolves: rhbz#1601004
  - Allow virtlogd_t domain to read virt_etc_t link files
  Resolves: rhbz#1598593
  - Allow dirsrv_t domain to read crack db
  Resolves: rhbz#1599726
  - Dontaudit pegasus_t to require sys_admin capability
  Resolves: rhbz#1374570
  - Allow mysqld_t domain to exec mysqld_exec_t binary files
  - Allow abrt_t odmain to read rhsmcertd lib files
  Resolves: rhbz#1601389
  - Allow winbind_t domain to request kernel module loads
  Resolves: rhbz#1599236
  - Allow gpsd_t domain to getsession and mmap own tmpfs files
  Resolves: rhbz#1598388
  - Allow smbd_t send to nmbd_t via dgram sockets BZ(1563791)
  Resolves: rhbz#1600157
  - Allow tomcat_domain to read cgroup_t files
  Resolves: rhbz#1601151
  - Allow varnishlog_t domain to mmap varnishd_var_lib_t files
  Resolves: rhbz#1600704
  - Allow dovecot_auth_t domain to manage also dovecot_var_run_t fifo files. BZ(1320415)
  Resolves: rhbz#1600692
  - Fix ntp SELinux module
  - Allow innd_t domain to mmap news_spool_t files
  Resolves: rhbz#1600591
  - Allow haproxy daemon to reexec itself. BZ(1447800)
  Resolves: rhbz#1600578
  - Label HOME_DIR/mozilla.pdf file as mozilla_home_t instead of user_home_t
  Resolves: rhbz#1559859
  - Allow pkcs_slotd_t domain to mmap own tmpfs files
  Resolves: rhbz#1600434
  - Allow fenced_t domain to reboot
  Resolves: rhbz#1293384
  - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
  Resolves: rhbz#1557299
  - Allow lircd to use nsswitch. BZ(1401375)
  - Allow targetd_t domain mmap lvm config files
  Resolves: rhbz#1546671
  - Allow amanda_t domain to read network system state
  Resolves: rhbz#1452444
  - Allow abrt_t domain to read rhsmcertd logs
  Resolves: rhbz#1492059
  - Allow application_domain_type also mmap inherited user temp files BZ(1552765)
  Resolves: rhbz#1608421
  - Allow ipsec_t domain to read l2tpd pid files
  Resolves: rhbz#1607994
  - Allow systemd_tmpfiles_t do mmap system db files
  - Improve domain_transition_pattern to allow mmap entrypoint bin file.
  Resolves: rhbz#1460322
  - Allow nsswitch_domain to mmap passwd_file_t files BZ(1518655)
  Resolves: rhbz#1600528
  - Dontaudit syslogd to watching top llevel dirs when imfile module is enabled
  Resolves: rhbz#1601928
  - Allow ipsec_t can exec ipsec_exec_t
  Resolves: rhbz#1600684
  - Allow netutils_t domain to mmap usmmon device
  Resolves: rhbz#1600586
  - Allow netlabel_mgmt_t domain to read sssd public files, stream connect to sssd_t BZ(1483655)
  - Allow userdomain sudo domains to use generic ptys
  Resolves: rhbz#1564470
  - Allow traceroute to create icmp packets
  Resolves: rhbz#1548350
  - Allow systemd domain to mmap lvm config files BZ(1594584)
  - Add new interface lvm_map_config
  - refpolicy: Update for kernel sctp support Resolves: rhbz#1597111 Add additional entries to support the kernel SCTP implementation introduced in kernel 4.16


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-207
changelog:
  - Update oddjob_domtrans_mkhomedir() interface to allow caller domain also mmap oddjob_mkhomedir_exec_t files
  Resolves: rhbz#1596306
  - Update rhcs_rw_cluster_tmpfs() interface to allow caller domain to mmap cluster_tmpfs_t files
  Resolves: rhbz#1589257
  - Allow radiusd_t domain to read network sysctls
  Resolves: rhbz#1516233
  - Allow chronyc_t domain to use nscd shm
  Resolves: rhbz#1596563
  - Label /var/lib/tomcats dir as tomcat_var_lib_t
  Resolves: rhbz#1596367
  - Allow lsmd_t domain to mmap lsmd_plugin_exec_t files
  Resolves: rhbz#bea0c8174
  - Label /usr/sbin/rhn_check-[0-9]+.[0-9]+ as rpm_exec_t
  Resolves: rhbz#1596509
  - Update seutil_exec_loadpolicy() interface to allow caller domain to mmap load_policy_exec_t files
  Resolves: rhbz#1596072
  - Allow xdm_t to read systemd hwdb
  Resolves: rhbz#1596720
  - Allow dhcpc_t domain to mmap files labeled as ping_exec_t
  Resolves: rhbz#1596065


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-206
changelog:
  - Allow tangd_t domain to create tcp sockets
  Resolves: rhbz#1595775
  - Update postfix policy to allow postfix_master_t domain to mmap all postfix* binaries
  Resolves: rhbz#1595328
  - Allow amanda_t domain to have setgid capability
  Resolves: rhbz#1452444
  - Update usermanage_domtrans_useradd() to allow caller domain to mmap useradd_exec_t files
  Resolves: rhbz#1595667


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-205
changelog:
  - Allow abrt_watch_log_t domain to mmap binaries with label abrt_dump_oops_exec_t 
  Resolves: rhbz#1591191
  - Update cups_filetrans_named_content() to allow caller domain create ppd directory with cupsd_etc_rw_t label
  Resolves: rhbz#1452595
  - Allow abrt_t domain to write to rhsmcertd pid files
  Resolves: rhbz#1492059
  - Allow pegasus_t domain to eexec lvm binaries and allow read/write access to lvm control
  Resolves: rhbz#1463470
  - Add vhostmd_t domain to read/write to svirt images
  Resolves: rhbz#1465276
  - Dontaudit action when abrt-hook-ccpp is writing to nscd sockets
  Resolves: rhbz#1460715
  - Update openvswitch policy
  Resolves: rhbz#1594729
  - Update kdump_manage_kdumpctl_tmp_files() interface to allow caller domain also mmap kdumpctl_tmp_t files
  Resolves: rhbz#1583084
  - Allow sssd_t and slpad_t domains to mmap generic certs
  Resolves: rhbz#1592016
  Resolves: rhbz#1592019
  - Allow oddjob_t domain to mmap binary files as oddjob_mkhomedir_exec_t files
  Resolves: rhbz#1592022
  - Update dbus_system_domain() interface to allow system_dbusd_t domain to mmap binary file from second parameter
  Resolves: rhbz#1583080
  - Allow chronyc_t domain use inherited user ttys
  Resolves: rhbz#1593267
  - Allow stapserver_t domain to mmap own tmp files
  Resolves: rhbz#1593122
  - Allow sssd_t domain to mmap files labeled as sssd_selinux_manager_exec_t
  Resolves: rhbz#1592026
  - Update policy for ypserv_t domain
  Resolves: rhbz#1592032
  - Allow abrt_dump_oops_t domain to mmap all non security files
  Resolves: rhbz#1593728
  - Allow svirt_t domain mmap svirt_image_t files
  Resolves: rhbz#1592688
  - Allow virtlogd_t domain to write inhibit systemd pipes.
  Resolves: rhbz#1593740
  - Allow sysadm_t and staff_t domains to use sudo io logging
  Resolves: rhbz#1564470
  - Allow sysadm_t domain create sctp sockets
  Resolves: rhbz#1571591
  - Update mount_domtrans() interface to allow caller domain mmap mount_exec_t
  Resolves: rhbz#1592025
  - Allow dhcpc_t to mmap all binaries with label hostname_exec_t, ifconfig_exec_t and netutils_exec_t
  Resolves: rhbz#1594661


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-204
changelog:
  - Fix typo in logwatch interface file
  - Allow spamd_t to manage logwatch_cache_t files/dirs
  - Allow dnsmasw_t domain to create own tmp files and manage mnt files
  - Allow fail2ban_client_t to inherit rlimit information from parent process
  Resolves: rhbz#1513100
  - Allow nscd_t to read kernel sysctls
  Resolves: rhbz#1512852
  - Label /var/log/conman.d as conman_log_t
  Resolves: rhbz#1538363
  - Add dac_override capability to tor_t domain
  Resolves: rhbz#1540711
  - Allow certmonger_t to readwrite to user_tmp_t dirs
  Resolves: rhbz#1543382
  - Allow abrt_upload_watch_t domain to read general certs
  Resolves: rhbz#1545098
  - Update postfix_domtrans_master() interface to allow caller domain also mmap postfix_master_exec_t binary
  Resolves: rhbz#1583087
  - Allow postfix_domain to mmap postfix_qmgr_exec_t binaries
  Resolves: rhbz#1583088
  - Allow postfix_domain to mmap postfix_pickup_exec_t binaries
  Resolves: rhbz#1583091
  - Allow chornyd_t read phc2sys_t shared memory
  Resolves: rhbz#1578883
  - Allow virt_qemu_ga_t read utmp
  Resolves: rhbz#1571202
  - Add several allow rules for pesign policy: Resolves: rhbz#1468744 - Allow pesign domain to read /dev/random - Allow pesign domain to create netlink_kobject_uevent_t sockets - Allow pesign domain create own tmp files
  - Add setgid and setuid capabilities to mysqlfd_safe_t domain
  Resolves: rhbz#1474440
  - Add tomcat_can_network_connect_db boolean
  Resolves: rhbz#1477948
  - Update virt_use_sanlock() boolean to read sanlock state
  Resolves: rhbz#1448799
  - Add sanlock_read_state() interface
  - Allow postfix_cleanup_t domain to stream connect to all milter sockets BZ(1436026)
  Resolves: rhbz#1563423
  - Update abrt_domtrans and abrt_exec() interfaces to allow caller domain to mmap binary file
  Resolves:rhbz#1583080
  - Update nscd_domtrans and nscd_exec interfaces to allow caller domain also mmap nscd binaries
  Resolves: rhbz#1583086
  - Update snapperd_domtrans() interface to allow caller domain to mmap snapperd_exec_t file
  Resolves: rhbz#1583802
  - Allow zoneminder_t to getattr of fs_t
  Resolves: rhbz#1585328
  - Fix denials during ipa-server-install process on F27+
  Resolves: rhbz#1586029
  - Allow ipa_dnskey_t to exec ipa_dnskey_exec_t files
  Resolves: rhbz#1586033
  - Allow rhsmcertd_t domain to send signull to postgresql_t domain
  Resolves: rhbz#1588119
  - Allow policykit_t domain to dbus chat with dhcpc_t
  Resolves: rhbz#1364513
  - Adding new boolean keepalived_connect_any()
  Resolves: rhbz#1443473
  - Allow amanda to create own amanda_tmpfs_t files
  Resolves: rhbz#1452444
  - Add amanda_tmpfs_t label. BZ(1243752)
  - Allow gdomap_t domain to connect to qdomap_port_t
  Resolves: rhbz#1551944
  - Fix typos in sge
  - Fix typo in openvswitch policy
  - /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
  - Allow sshd_keygen_t to execute plymouthd
  Resolves: rhbz#1583531
  - Update seutil_domtrans_setfiles() interface to allow caller domain to do mmap on setfiles_exec_t binary
  Resolves: rhbz#1583090
  - Allow systemd_networkd_t create and relabel tun sockets
  Resolves: rhbz#1583830
  - Allow map audisp_exec_t files fordomains executing this binary
  Resolves: rhbz#1586042
  - Add new interface postgresql_signull()
  - Add fs_read_xenfs_files() interface.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-203
changelog:
  - /usr/libexec/bluetooth/obexd should have only obexd_exec_t instead of bluetoothd_exec_t type
  - Allow dac override capability to mandb_t domain BZ(1529399)
  Resolves: rhbz#1423361
  - Allow inetd_child process to chat via dbus with abrt
  Resolves: rhbz#1428805
  - Allow zabbix_agent_t domain to connect to redis_port_t
  Resolves: rhbz#1418860
  - Allow rhsmcertd_t domain to read xenfs_t files
  Resolves: rhbz#1405870
  - Allow zabbix_agent_t to run zabbix scripts
  Resolves: rhbz#1380697
  - Allow rabbitmq_t domain to create own tmp files/dirs
  Resolves: rhbz#1546897
  - Allow policykit_t mmap policykit_auth_exec_t files
  Resolves: rhbz#1583082
  - Allow ipmievd_t domain to read general certs
  Resolves: rhbz#1514591
  - Add sys_ptrace capability to pcp_pmie_t domain
  - Allow squid domain to exec ldconfig
  Resolves: rhbz#1532017
  - Make working gpg agent in gpg_agent_t domain
  Resolves: rhbz#1535109
  - Update gpg SELinux policy module
  - Allow kexec to read kernel module files in /usr/lib/modules.
  Resolves: rhbz#1536690
  - Allow mailman_domain to read system network state
  Resolves: rhbz#1413510
  - Allow mailman_mail_t domain to search for apache configs
  Resolves: rhbz#1413510
  - Allow openvswitch_t domain to read neutron state and read/write fixed disk devices
  Resolves: rhbz#1499208
  - Allow antivirus_domain to read all domain system state
  Resolves: rhbz#1560986
  - Allow targetd_t domain to red gconf_home_t files/dirs
  Resolves: rhbz#1546671
  - Allow freeipmi domain to map sysfs_t files
  Resolves: rhbz#1575918
  - Label /usr/libexec/bluetooth/obexd as obexd_exec_t
  Resolves: rhbz#1351750
  - Update rhcs SELinux module
  Resolves: rhbz#1589257
  - Allow iscsid_t domain mmap kernel modules
  Resolves: rhbz#1589295
  - Allow iscsid_t domain mmap own tmp files
  Resolves: rhbz#1589295
  - Update iscsid_domtrans() interface to allow mmap iscsid_exec_t binary
  Resolves: rhbz#1589295
  - Update nscd_socket_use interface to allow caller domain also mmap nscd_var_run_t files.
  Resolves: rhbz#1589271
  - Allow nscd_t domain to mmap system_db_t files
  Resolves: rhbz#1589271
  - Add interface nagios_unconfined_signull()
  - Allow lircd_t domain read sssd public files Add setgid capability to lircd_t domain
  Resolves: rhbz#1550700
  - Add missing requires
  - Allow tomcat domain sends email
  Resolves: rhbz#1585184
  - Allow memcached_t domain nnp_transition becuase of systemd security features BZ(1514867)
  Resolves: rhbz#1585714
  - Allow kdump_t domain to map /boot files
  Resolves: rhbz#1588884
  - Fix typo in netutils policy
  - Allow confined users get AFS tokens
  Resolves: rhbz#1417671
  - Allow sysadm_t domain to chat via dbus
  Resolves: rhbz#1582146
  - Associate sysctl_kernel_t type with filesystem attribute
  - Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets
  Resolves: rhbz#1557299
  - Allow user_t and staff_t domains create netlink tcpdiag sockets
  Resolves: rhbz#1557281
  - Add interface dev_map_sysfs
  - Allow xdm_t domain to execute xdm_var_lib_t files
  Resolves: rhbz#1589139
  - Allow syslogd_t domain to send signull to nagios_unconfined_plugin_t
  Resolves: rhbz#1569344
  - Label /dev/vhost-vsock char device as vhost_device_t
  - Add files_map_boot_files() interface
  Resolves: rhbz#1588884
  - Update traceroute_t domain to allow create dccp sockets
  Resolves: rhbz#1548350


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-202
changelog:
  - Update ctdb domain to support gNFS setup 
  Resolves: rhbz#1576818
  - Allow authconfig_t dbus chat with policykit
  Resolves: rhbz#1551241
  - Allow lircd_t domain to read passwd_file_t
  Resolves: rhbz:#1550700
  - Allow lircd_t domain to read system state
  Resolves: rhbz#1550700
  - Allow smbcontrol_t to mmap samba_var_t files and allow winbind create sockets BZ(1559795)
  Resolves: rhbz#1574521
  - Allow tangd_t domain read certs
  Resolves: rhbz#1509055
  - Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db  is turned on
  Resolves: rhbz:#1579219
  - Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
  Resolves: rhbz#1574418
  - Allow ctdb_t domain modify ctdb_exec_t files
  Resolves: rhbz#1572584
  - Allow chrome_sandbox_t to mmap tmp files
  Resolves: rhbz#1574392
  - Allow ulogd_t to create netlink_netfilter sockets.
  Resolves: rhbz#1575924
  - Update ulogd SELinux security policy
  - Allow rhsmcertd_t domain send signull to apache processes
  Resolves: rhbz#1576555
  - Allow freeipmi domain to read sysfs_t files
  Resolves: rhbz#1575918
  - Allow smbcontrol_t to create dirs with samba_var_t label
  Resolves: rhbz#1574521
  - Allow swnserve_t domain to stream connect to sasl domain
  Resolves: rhbz#1574537
  - Allow SELinux users (except guest and xguest) to using bluetooth sockets
  Resolves: rhbz#1557299
  - Allow confined users to use new socket classes for bluetooth, alg and tcpdiag sockets
  Resolves: rhbz#1557299
  - Fix broken sysadm SELinux module
  Resolves: rhbz#1557311
  - Allow user_t and staff_t domains create netlink tcpdiag sockets
  Resolves: rhbz#1557281
  - Update ssh_domtrans_keygen interface to allow mmap ssh_keygen_exec_t binary file
  Resolves: rhbz#1583089
  - Allow systemd_networkd_t to read/write tun tap devices
  Resolves: rhbz#1583830
  - Add bridge_socket, dccp_socket, ib_socket and mpls_socket to socket_class_set
  Resolves: rhbz#1583771
  - Allow audisp_t domain to mmap audisp_exec_t binary
  Resolves: rhbz#1583551
  - Fix duplicates in sysadm.te file
  Resolves: rhbz#1307183
  - Allow sysadm_u use xdm
  Resolves: rhbz#1307183
  - Fix typo in sysnetwork.if file
  Resolves: rhbz#1581551


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-199
changelog:
  - Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db  is turned on
  Resolves: rhbz:#1579219
  - Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
  Resolves: rhbz#1574418
  - Allow chrome_sandbox_t to mmap tmp files
  Resolves: rhbz#1574392
  - Allow ulogd_t to create netlink_netfilter sockets.
  Resolves: rhbz#1575924
  - Update ulogd SELinux security policy
  - Allow rhsmcertd_t domain send signull to apache processes
  Resolves: rhbz#1576555
  - Allow freeipmi domain to read sysfs_t files
  Resolves: rhbz#1575918
  - Allow smbcontrol_t to create dirs with samba_var_t label
  Resolves: rhbz#1574521
  - Allow swnserve_t domain to stream connect to sasl domain
  Resolves: rhbz#1574537
  - Fix typo in sysnetwork.if file
  Resolves: rhbz#1581551


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-197
changelog:
  - Improve procmail_domtrans() to allow mmaping procmail_exec_t
  - Allow hypervvssd_t domain to read fixed disk devices
  Resolves: rhbz#1581225
  - Improve modutils_domtrans_insmod() interface to mmap insmod_exec_t binaries
  Resolves: rhbz#1581551
  - Improve iptables_domtrans() interface to allow mmaping iptables_exec_t binary
  Resolves: rhbz#1581551
  - Improve auth_domtrans_login_programinterface to allow also mmap login_exec_t binaries
  Resolves: rhbz#1581551
  - Improve auth_domtrans_chk_passwd() interface to allow also mmaping chkpwd_exec_t binaries.
  Resolves: rhbz#1581551
  - Allow mmap dhcpc_exec_t binaries in sysnet_domtrans_dhcpc interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-196
changelog:
  - Add dbus_stream_connect_system_dbusd() interface.
  - Allow pegasus_t domain to mount tracefs_t filesystem
  Resolves:rhbz#1374570
  - Allow psad_t domain to read all domains state
  Resolves: rhbz#1558439
  - Add net_raw capability to named_t domain BZ(1545586)
  - Allow tomcat_t domain to connect to mongod_t tcp port
  Resolves:rhbz#1539748
  - Allow dovecot and postfix to connect to systemd stream sockets
  Resolves: rhbz#1368642
  - Label /usr/libexec/bluetooth/obexd as bluetoothd_exec_t to run process as bluetooth_t
  Resolves:rhbz#1351750
  - Rename tang policy to tangd
  - Add interface systemd_rfkill_domtrans()
  - Allow users staff and sysadm to run wireshark on own domain
  Resolves:rhbz#1546362
  - Allow systemd-bootchart to create own tmpfs files
  Resolves:rhbz#1510412


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-195
changelog:
  - Rename tang policy to tangd
  - Allow virtd_t domain to relabel virt_var_lib_t files 
  Resolves: rhbz#1558121
  - Allow logrotate_t domain to stop services via systemd
  Resolves: rhbz#1527522
  - Add tang policy
  Resolves: rhbz#1509055
  - Allow mozilla_plugin_t to create mozilla.pdf file in user homedir with label mozilla_home_t
  Resolves: rhbz#1559859
  - Improve snapperd SELinux policy
  Resolves: rhbz#1365555
  - Allow snapperd_t daemon to create unlabeled dirs.
  Resolves: rhbz#1365555
  - We have inconsistency in cgi templates with upstream, we use _content_t, but refpolicy use httpd__content_t. Created aliasses to make it consistence
  Resolves: rhbz#1271324
  - Allow Openvswitch adding netdev bridge ovs 2.7.2.10 FDP
  Resolves: rhbz#1503835
  - Add new Boolean tomcat_use_execmem
  Resolves: rhbz#1565226
  - Allow domain transition from logrotate_t to chronyc_t
  Resolves: rhbz#1568281
  - Allow nfsd_t domain to read/write sysctl fs files
  Resolves: rhbz#1516593
  - Allow conman to read system state
  Resolves: rhbz#1377915
  - Allow lircd_t to exec shell and add capabilities dac_read_search and dac_override
  Resolves: rhbz#1550700
  - Allow usbmuxd to access /run/udev/data/+usb:*.
  Resolves: rhbz#1521054
  - Allow abrt_t domain to manage kdump crash files 
  Resolves: rhbz#1491585
  - Allow systemd to use virtio console
  Resolves: rhbz#1558121
  - Allow transition from sysadm role into mdadm_t domain.
  Resolves: rhbz#1551568
  - Label /dev/op_panel and /dev/opal-prd as opal_device_t
  Resolves: rhbz#1537618
  - Label /run/ebtables.lock as iptables_var_run_t
  Resolves: rhbz#1511437
  - Allow udev_t domain to manage udev_rules_t char files.
  Resolves: rhbz#1545094
  - Allow nsswitch_domain to read virt_var_lib_t files, because of libvirt NSS plugin.
  Resolves: rhbz#1567753
  - Fix filesystem inteface file, we don't have nsfs_fs_t type, just nsfs_t
  Resolves: rhbz#1547700
  - Allow iptables_t domain to create dirs in etc_t with system_conf_t labels


