# changelog

author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - sepolgen: Add support for TYPEBOUNDS statement in INTERFACE policy
    files (#1319338)
  - Add documentation for MCS separated domains
  - Move svirt man page out of libvirt into its own


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-17
changelog:
  - Fix handling of Forking daemon, to allow systemd to handle it better
  Resolves: rhbz#1186648
  - Fix typo in semanage args for minimum policy store
  Resolves: rhbz#1208797
  - Allow to define sock file in /etc directory
  Resolves: rhbz#1188360


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-16
changelog:
  - semanage: Use OrderedDict for list of fcontexts
  Resolves: rhbz#1206769
  - fixfiles: Cover file_context.XXX.homedir
  Resolves: rhbz#1186640


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-13
changelog:
  - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error
  Resolves:#1082956
  - Make fixfiles_exclude_dirs working if there is a substituion for the given directory
  Resolves:#1082676
  - Add ability to list the actual active modules
  Resolves:#1075023
  - Update XDG_RUNTIME_DIR directory
  Resolves:#1112811
  - Fix semanage man page to talk about  semanage-* (8) man pages.
  Resolves:#1084390


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-12
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1103292


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-5
changelog:
  - Remove default s0 range from semanage-login command. It is handled in seobject.py.
  Resolves:#1028106


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections
  Resolves: #1049977


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-1
changelog:
  - Fix Mass Rebuild problems
  - Update to upstream 
  	* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
  	* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
  	* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
  	* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  Resolves: #1002529
  Resolves: #924105
  Resolves: #918140
  Resolves: #1028096

  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
  	* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
  	* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
  	* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Properly build the swig exception file from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville.
  	* Fix init_policy warning from Laurent Bigonville.
  	* Fix semanage logging from Laurent Bigonville.
  	* Open newrole stdin as read/write from Sven Vermeulen.
  	* Fix sepolicy transition from Sven Vermeulen.
  	* Support overriding CFLAGS from Simon Ruderich.
  	* Create correct man directory for run_init from Russell Coker.
  	* restorecon GLOB_BRACE change from Michal Trunecka.
  	* Extend audit2why to report additional constraint information.
  	* Catch IOError errors within audit2allow from Dan Walsh.
  	* semanage export/import fixes from Dan Walsh.
  	* Improve setfiles progress reporting from Dan Walsh.
  	* Document setfiles -o option in usage from Dan Walsh.
  	* Change setfiles to always return -1 on failure from Dan Walsh.
  	* Improve setsebool error r eporting from Dan Walsh.
  	* Major overhaul of gui from Dan Walsh.
  	* Fix sepolicy handling of non-MLS policy from Dan Walsh.
  	* Support returning type aliases from Dan Walsh.
  	* Add sepolicy tests from Dan Walsh.
  	* Add org.selinux.config.policy from Dan Walsh.
  	* Improve range and user input checking by semanage from Dan Walsh.
  	* Prevent source or target arguments that end with / for substitutions from Dan Walsh.
  	* Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
  	* Support deleteall for restoring disabled modules from Dan Walsh.
  	* Improve semanage error reporting from Dan Walsh.
  	* Only list disabled modules for module locallist from Dan Walsh.
  	* Fix logging from Dan Walsh.
  	* Define new constants for file type character codes from Dan Walsh.
  	* Improve bash completions from Dan Walsh.
  	* Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
  	* Add semanage tests from Dan Walsh.
  	* Split semanage man pages from Dan Walsh.
  	* Move bash completion scripts from Dan Walsh.
  	* Replace genhomedircon script with a link to semodule from Dan Walsh.
  	* Fix fixfiles from Dan Walsh.
  	* Add support for systemd service for restorecon from Dan Walsh.
  	* Spelling corrections from Dan Walsh.
  	* Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
  	* Switch sandbox to openbox window manager from Dan Walsh.
  	* Coalesce audit2why and audit2allow from Dan Walsh.
  	* Change audit2allow to append to output file from Dan Walsh.
  	* Update translations from Dan Walsh.
  	* Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-89
changelog:
  - Update to latest sepolicy tool chain.
  - Document semodule -P
  - Verify input to semanage permissive -a is a valid domain.
  - Assigning login user with semanage login, range should default to user record


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs
  Resolves: #1018913


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
  	* setfiles: estimate percent progress
  	* load_policy: make link at the destination directory
  	* Rebuild polgen.glade with glade-3
  	* sepolicy: new command to unite small utilities
  	* sepolicy: Update Makefiles and po files
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* add po file configuration information
  	* po: stop running update-po on all
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* gui: Start using Popen, instead of os.spawnl
  	* sandbox: Copy /var/tmp to /tmp as they are the same inside
  	* qualifier to shred content
  	* semanage: Fix handling of boolean_sub names when using the -F flag
  	* semanage: man: roles instead of role
  	* gui: system-config-selinux: Catch no DISPLAY= error
  	* setfiles: print error if no default label found
  	* semanage: list logins file entries in semanage login -l
  	* semanage: good error message is sepolgen python module missing
  	* gui: system-config-selinux: do not use lokkit
  	* secon: add support for setrans color information in prompt output
  	* restorecond: remove /etc/mtab from default list
  	* gui: If you are not able to read enforcemode set it to False
  	* genhomedircon: regenerate genhomedircon more often
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
  	* fixfiles: relabel only after specific date
  	* po: update translations
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid
  	* sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
  	* Add semanage dontaudit to turn off dontaudits from Dan Walsh.
  	* Fix semanage to set correct mode for setrans file from Dan Walsh.
  	* Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
  	and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy.
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan.
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  		* audit2allow: process MAC_POLICY_LOAD events
  		* newrole: run shell with - prefix to start a login shell
  		* po: po file updates
  		* restorecond: bail if SELinux not enabled
  		* fixfiles: omit -q
  		* genhomedircon:  fix exit code if non-root
  		* semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
  	semodule utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol.
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
  	* Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local;
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Christian Krause <chkr@fedoraproject.org> - 0.0.8-3
changelog:
  - add upstream patch 22287584fbfa4657098ee997957a6c4fc972a53b to
    properly decompress CFA from certain cameras (BZ 624283)


author: Christian Krause <chkr@fedoraproject.org> - 0.0.8-2
changelog:
  - add upstream patch 1b15acdcfdc4664bc6c0be473cb6e096071a4e62
    to support certain PEF files and to fix a crash when opening
    such files (BZ 606898)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.8-1
changelog:
  - Version bump to 0.0.8.
    * Fixed a huge memory leak. (FreeDesktop Bugzilla #21435)
    * cfa output should write the data in PGM as big endian.
    * Better handling of Canon CR2 "slices" to fix crasher with Canon
      450D/Digital Rebel XSi files (and possibly others).
    * Added new API or_rawfile_new_from_memory() to load a Raw file from a
      memory buffer.
    * Added new API or_rawfile_get_typeid() and the associated consts.
    * Added new API or_rawdata_get_minmax().
    * Added new API or_get_file_extensions().
    * Added new API or_rawfile_get_rendered_image() to get a rendered image.
    * Added new API or_bitmapdata_*().
    * New GdkPixbuf loader.
    * Decompress NEF files.
  - License changed to LGPLv3 or later.
  - Missing includes fixed by upstream.
  - Replaced 'BuildRequires: chrpath glib2-devel' with 'BuildRequires:
    exempi-devel libcurl-devel'.
  - Added 'Requires: gtk2' to pixbuf-loader for directory ownership.
  - Added a %check stanza.


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: Rex Dieter <rdieter@fedoraproject.org> 0.10.1-4
changelog:
  - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954)


author: Remi Collet <remi@fedoraproject.org> - 0.10-1
changelog:
  - update to 0.10
  - apply patch with changes from php bundled lib (thanks spot)
  - handle multiarch headers (ex from MySQL)


author: Sebastian Vahl <fedora@deadbabylon.de> 0.8-3
changelog:
  - require pkgconfig in devel subpkg
  - move api description to devel subpkg
  - keep timestamps in %install
  - avoid lib64 rpaths


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.2.1-2
changelog:
  - Split patch for upstream issue #26 into separate patches for upstream changes
    and effect of running autotools


author: Philip A. Prindeville <philipp@fedoraproject.org> - 2.2.1-1
changelog:
  - Update to 2.2.1
    - geoipupdate now verifies the MD5 of the new database before deploying it;
      if the database MD5 does not match the expected MD5, geoipupdate will exit
      with an error
    - The copy of 'base64.c' and 'base64.h' was switched to a version under
      GPLv2+ to prevent a license conflict
    - The 'LICENSE' file was added to the distribution
    - Several issues in the documentation were fixed
  - Use interim fix for upstream issue #26 until it's accepted:
    https://github.com/maxmind/geoipupdate/issues/26
  - Add buildroot and clean, BR: curl-devel rather than libcurl-devel for
    EL-5 compatibility


author: Paul Howarth <paul@city-fan.org> - 2.1.0-4
changelog:
  - New geoipupdate6 cron script written in Perl that doesn't download the data
    if it hasn't changed


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Add explicit version-release on Provides and Obsoletes
  - Untabify
  - Remove %ghost on versioned javadoc dir
  - Just include %{_javadocdir}/* for javadoc package


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Bump to 1.1 final
  - Make release Xjpp.Y.el7
  - Remove Distribution, Vendor
  - Fix Group
  - Remove cleaning of buildroot from beginning of %prep
  - Add cleaning of buildroot to beginning of %install
  - Remove %section free
  - Use Fedora buildroot


author: Ralph Apel <r.apel@r-apel.de> 0:1.1-0.b7.1jpp
changelog:
  - Upgrade to 1.1-beta-7
  - Now mavenized
  - Requiring dom4j >= 1.6.1
  - rpmbuild option to inhibit build of manual (needs newer maven)


author: Ralph Apel <r.apel@r-apel.de> 0:1.0-3jpp
changelog:
  - build against dom4j-1.4-1jpp
  - introduce manual and demo subpackages
  - patch org.jaxen.dom4j.DocumentNavigatorTest
  - include LICENSE in main package
  - run tests during build


author: Jesse Keating <jkeating@redhat.com> - 0.2.6.3-1
changelog:
  - Update to 0.2.6.3
  - Remove libisofs stuff as it's packaged seperately now.
  - Add a manpage for cdrskin


author: Jesse Keating <jkeating@redhat.com> - 0.2-3.20060823svn
changelog:
  - don't install dupe headers in -devel packages
  - libisofs requires libburn devel for directory ownership


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - filter private shared objects
  - %{python_sitelib}/dbus/mainloop/qt.so should be in %python_sitearch (#957260)
  - .spec cleanup
  - -assistant subpkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.7-5
changelog:
  - fix implicit linking when checking for QtHelp and QtAssistant
  - remove Python 3 code from Python 2.6 directory, fixes FTBFS (#564633)


author: Nils Philippsen <nils@redhat.com> - 2.0.2-0.2
changelog:
  - don't require gimptool file, but gimp-devel-tools package for building
  - merge review (#225797)
    - don't require /usr/share/gimp/2.0 directory, but specific minimum gimp
      version
    - work around problematic gimpdatadir macro definition if gimptool is not
      available


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.2-0.1
changelog:
  - version 2.0.2
  - use RPM macros where appropriate
  - use "make DESTDIR=... install"
  - merge review (#225797)
    - add dist tag
    - change license tag to GPLv2+
    - sanitize buildroot
    - set default mode 0755 for directories
    - add documentation files
    - separate BuildRequires, add epoch to BR: gimp-devel ...
    - sanitize summary
    - recode SPEC file to UTF-8
    - clean buildroot at beginning of %install


author: Owen Taylor <otaylor@redhat.com> - 1.18.2-12
changelog:
  - Add patches to improve display synchronization on NVIDIA
      
    When testing quadbuffer stereo patches, GNOME Shell would sometimes
    hang up on restart. This turned out to be a problem with display
    synchronization on NVIDIA. The patches added here make display
    synchronization work much more similarly with the NVIDIA drivers
    and the open source drivers, which not only fixes this bug, but should
    reduce future bugs.
      
    Resolves: #1305076

  - Add patches improving frame completion events in Cogl


author: Kalev Lember <kalevlember@gmail.com> - 1.17.4-1
changelog:
  - Update to 1.17.4, which includes soname bump
  - Build a temporary compat-libcogl19 subpackage to ease the rebuilds


author: Adam Jackson <ajax@redhat.com> 1.8.2-4
changelog:
  - cogl-1.8.2-lp-no-framebuffer-blit.patch: Disable the subbuffer blit code
    when running on llvmpipe until it's unbroken.


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.2-1
changelog:
  - 1.8.2 stable release
  - http://ftp.gnome.org/pub/GNOME/sources/cogl/1.8/cogl-1.8.2.news
  - Enable gdk-pixbuf2 support - Fixes RHBZ # 738092


author: EL Errata <el-errata_ww@oracle.com> - 2.1.fb69-3.0.1
changelog:
  - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix [Orabug: 27613482]
  - Add patch 0004-allow-underscore-in-oracle-iqns to fix [Orabug: 27582660]
  - Add patch 0014-reenable-vhost to fix [Orabug: 27707403] <alan.adamson@oracle.com>


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb63-5
changelog:
  - rtslib never creates hba directories without a storage object within it,
    but if under some circumstance these existed then we should remove them.


author: Andy Grover <agrover@redhat.com> - 2.1.fb30-1
changelog:
  - New upstream version
  - Update description and summary
  - Remove patch0, upstream doesn't include usb gadget any more


author: Andy Grover <agrover@redhat.com> - 2.1.fb26-1
changelog:
  - New upstream release
  - Remove kernel dependency
  - Remove python-ethtool and python-ipaddr dependencies


author: Andy Grover <agrover@redhat.com> - 2.1.fb14-1
changelog:
  - Update Source URL to proper tarball
  - Add patch retry-target-creation.patch
  - New upstream release


author: Andy Grover <agrover@redhat.com> - 2.1.fb1-1
changelog:
  - Change upstream URL
  - New upstream release
  - Remove upstreamed patches:
    * python-rtslib-git-version.patch
    * python-rtslib-use-ethtool.patch
    * python-rtslib-update-specpath.patch


author: Andy Grover <agrover@redhat.com> - 1.99-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Andrew Overholt <overholt@redhat.com> 0:2.7.1-6
changelog:
  - Fix filename of serializer.jar in xalan-j2's MANIFEST.MF
  - https://bugzilla.redhat.com/show_bug.cgi?id=718738


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Gary Benson <gbenson at redhat.com> 0:2.6.0-3jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles xsltc and samples).


author: Gary Benson <gbenson@redhat.com> 0:2.6.0-2jpp_3fc
changelog:
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.2-1jpp
changelog:
  - Update to 2.5.2.
  - Re-enable javadocs, new style versionless symlink handling, crosslink
    with local J2SE javadocs.
  - Spec cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.1-1jpp
changelog:
  - Update to 2.5.1.
  - Fix jpackage-utils version in BuildRequires, add xerces-j2.
  - Non-versioned javadoc symlinking.
  - Add one missing epoch.
  - Clean up manifests from Class-Path's and other stuff we don't include.
  - xsltc no longer provides a jaxp_transform_impl because of huge classpath
    and general unsuitablity for production-use, system-installed transformer.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.
  - Disable javadoc subpackage for now:
    <http://issues.apache.org/bugzilla/show_bug.cgi?id=20572>


author: Ville Skyttä <ville.skytta at iki.fi> - 2.4.1-2jpp
changelog:
  - bsf -> oldbsf.
  - Use non-versioned jar in alternative, don't remove it on upgrade.
  - Remove hardcoded packager tag.


author: Ville Skyttä <ville.skytta at iki.fi> 2.4-0.D1.2jpp
changelog:
  - Remove xerces-j1 runtime dependency.
  - Add bcel, jlex, regexp to xsltc runtime requirements:
    <http://xml.apache.org/xalan-j/xsltc_usage.html>
  - Build with -Dbuild.compiler=modern (IBM 1.3.1) to avoid stylebook errors.
  - XSLTC now provides jaxp_transform_impl too.
  - Earlier changes by Henri, from unreleased 2.4-D1.1jpp:
      Mon Jul 15 2002 Henri Gomez <hgomez@users.sourceforge.net> 2.4-D1.1jpp
    - 2.4D1
    - use the jlex 1.2.5-5jpp (patched by Xalan/XSLTC team) rpm
    - use the stylebook-1.0-b3_xalan-2.jar included in source file till it will
      be packaged in jpackage
    - use jaxp_parser_impl (possibly xerces-j2) instead of xerces-j1 for docs
      generation, since it's tuned for stylebook-1.0-b3_xalan-2.jar
    - build and provide xsltc in a separate rpm


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - provides jaxp_transform_impl
  - requires jaxp_parser_impl
  - stylebook already requires xml-commons-apis
  - jaxp_parser_impl already requires xml-commons-apis
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Henri Gomez <hgomez@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - fix built classpath (bsf, bcel are existing jpackage rpms),
  - add buildrequires for javacup and JLex


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.0-1jpp
changelog:
  - 2.2.0 final
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for compat and demo packages
  - fixed package confusion
  - adaptation for new servlet3 package
  - requires xerces-j1 instead of jaxp_parser
  - xml-apis jar now in required xml-commons-apis external package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D14-1jpp
changelog:
  - 2.2.D14
  - javadoc into javadoc package
  - compat.jar into compat package
  - compat javadoc into compat-javadoc package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D10-1mdk
changelog:
  - cvs references
  - splitted demo package
  - moved demo files to %{_datadir}/%{name}
  - only manual package requires stylebook-1.0b3
  - only demo package requires servletapi3


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.42-2
changelog:
  - Update to 0.6.44
    Related: #1424623
  - export password expiration policy from shadow
    Resolves: #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.35-11
changelog:
  - address minor bug in previous patch
    Related: #1220904

  - fix memory leak in log handler
    Resolves: #1292543


author: Matthias Clasen <mclasen@redhat.com> 0.6.15-2
changelog:
  - Make resetting user icons work
  - Update to 0.6.15
  - Fixes session chooser at login screen when logged into vt


author: Ray Strode <rstrode@redhat.com> 0.6.14-2
changelog:
  - Fix wtmp loading so users coming from the network are
    remembered in the user list in subsequent boots


author: Carlo Wood <carlo@gnu.org>
changelog:
  - There should not be a reason anymore to include README.alias in the rpm docs.
  - Don't install as root.root in RPM_BUILD_ROOT, in order to allow to build
    rpm as non-root.
  - Bug fix
  - Added /etc/profile.d for automatic alias inclusion.


author: Carlo Wood <carlo@gnu.org>
changelog:
  - Typo in appended changelog.
  - Appended the old change log of `which-2.0.spec' to (this) changelog,
    which is generated from the CVS log of `which-2.0.spec.in'.
  - Generate which-2.spec from which-2.spec.in with automatic VERSION
    and CHANGELOG substitution.


author: Carlo Wood <carlo@gnu.org>
changelog:
  - Moved assignment of CFLAGS to the configure line, using RPM_OPT_FLAGS now.
  - Corrected Source: line to point to ftp.gnu.org.


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-1
changelog:
  - Updated to 1.1.0
  - Enable hda-verb, hdajackretast, hdajacksensetest for i686/x86_64
  - Resolves: rhbz#1172560


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Tim Jackson <rpm@timj.co.uk> - 1.0.25-4
changelog:
  - Move udev rules to /lib/udev/rules.d (rhbz #748206)
  - remove %BuildRoot and %clean sections; no longer required


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> - 0:1.0.1-0.fdr.2
changelog:
  - Integrate Michaels patch that fixes:
  - fix desktop files for fedora.us, adds buildreq desktop-file-utils
  - fix %install section for short-circuit installs


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> 1.0.0-0.fdr.0.3.rc2
changelog:
  - exit if error during build or install
  - fix install errors hdspconf, hdspmixer, usx2yloader
  - Split package in alsa-tools and alsa-tools-firmware
  - Integrate more docs


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.16-3
changelog:
  - Bundle python-keyring
  - Append python-keyring bundled directory to search path where needed

    Resolves: rhbz#1511228


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-10
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Brian C. Lane <bcl@redhat.com> - 3.1-31
changelog:
  - Backport patches for dasd on virtio
    fdasd: geometry handling updated from upstream s390-tools
    dasd: enhance device probing
    parted: fix build error on s390
    fdasd.c: Safeguard against geometry misprobing
    Resolves: rhbz#1676604
  - Add part-label documentation to mkpart command
    Resolves: rhbz#1686659


author: Brian C. Lane <bcl@redhat.com> - 3.1-30
changelog:
  - partprobe: always close dev when probing disks
    Resolves: rhbz#1551411
  - tests: Add t4201 to test partprobe with 1025 devices
    Related: rhbz#1551411


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-18
changelog:
  - Fix manpage NAME so whatis works with parted
    Resolves: rhbz#948424
  - GPT add support for PReP GUID
    Resolves: rhbz#1108196


author: Brian C. Lane <bcl@redhat.com> 3.1-16
changelog:
  - tests: Remove rmmod loop from t8001
    Resolves: rhbz#1040504
  - tests: Increase size of container filesystem in t4100
    Resolves: rhbz#1036149
  - tests: Disable t4100 dvh test for now
    Resolves: rhbz#1036093
  - libparted: Make sure not to treat percentages as exact
    Resolves: rhbz#1045957
  - tests: Use mkfs.xfs to create files
    Resolves: rhbz#1036152


author: Brian C. Lane <bcl@redhat.com> 3.1-13
changelog:
  - libparted: Recognize btrfs filesystem (#857101)
  - tests: Add btrfs and xfs to the fs probe test (#857101)


author: Brian C. Lane <bcl@redhat.com> 3.1-10
changelog:
  - libparted: mklabel to support EAV DASD (#707032)
  - libparted: Avoid dasd as default disk type while probe (#707032)


author: Brian C. Lane <bcl@redhat.com> 3.1-8
changelog:
  - change partition UUID to use partX-UUID (#858704)
  - fixup losetup usage in tests
  - add support for implicit FBA DASD partitions (#707027)
  - add support for EAV DASD partitions (#707032)


author: Brian C. Lane <bcl@redhat.com> 3.1-6
changelog:
  - Use dm_udev_wait for dm operations (#844257) (bcl)
  - use largest_partnum in _dm_reread_part_table (bcl)
  - set uuid on dm partitions (#832145) (bcl)


author: Brian C. Lane <bcl@redhat.com> 3.1-2
changelog:
  - libparted: check PMBR before GPT partition table (#805272)
  - tests: add a test for the new behavior


author: Brian C. Lane <bcl@redhat.com> - 3.0-6
changelog:
  - gpt: add commands to manipulate pMBR boot flag (#754850)
  - parted: when printing, also print the new disk flags
  - tests: update tests for new disk flags output
  - tests: add test for GPT PMBR pmbr_boot flag
  - doc: update parted documentation


author: Brian C. Lane <bcl@redht.com> - 3.0-4
changelog:
  - Fix ped_disk_duplicate on GPT so that it copies the partition flags (#747947)
  - Add new test to check ped_disk_duplicate on msdos, gpt, bsd disk labels
  - Add e2fsprogs and dosfstools so that skipped tests will be run


author: Brian C. Lane <bcl@redhat.com> - 3.0-3
changelog:
  - Fix handling of zero-length gpt partitions (#728949)
  - Fix bug in nilfs2 probe with short partitions (#728949)
  - Fix bug in hfs probe code (#714758)
  - Make pc98 detection depend on specific signatures (#646053)


author: Brian C. Lane <bcl@redhat.com> - 3.0-1
changelog:
  - Update to parted v3.0
  - Run autoreconf so that patches to .am files will work
  - Add patch to Fix snap radius and don't allow values < 1 (#665496)
  - Add tests for the snap radius fix.
  - Drop patches included in upstream release


author: Brian C. Lane <bcl@redhat.com> - 2.3-8
changelog:
  - Add support for legacy_boot flag for GPT partitions (680562)
  - Remove PED_ASSERT for dos geometry calculations (585468)


author: Brian C. Lanr <bcl@redhat.com> - 2.3-5
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.3-2
changelog:
  - Add patch to handle syncing partition changes when using blkext majors
  - Resolves rhbz#634980
  - Related rhbz#629719


author: Hans de Goede <hdegoede@redhat.com> 2.3-1
changelog:
  - Rebase to new upstream 2.3 release
  - Drop all patches (all upstreamed)
  - Recognize scsi disks with a high major as such (#611691)


author: Hans de Goede <hdegoede@redhat.com> 2.2-4
changelog:
  - Properly check dm_task_run return value (#585158)
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)


author: Hans de Goede <hdegoede@redhat.com> 2.1-4
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - If a drive does not have alignment information available default
    to an alignment of 1MiB (#559639)


author: Hans de Goede <hdegoede@redhat.com> 2.1-2
changelog:
  - Fix various memory leaks in error paths (#556012)
  - Add %check section to the specfile, invoking make check


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-25
changelog:
  - Fix crash when partitioning loopback devices (#546622)
  - Drop no-cylinder-align patch:
    - its functionality is superseeded by the per disk flags
    - its only user (pyparted) has been updated to use those
    - this is not upstream so we don't want other programs to start using it


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-24
changelog:
  - Allow partitioning of loopback devices (#546622)
  - Add libparted function to query maximum partition length and start
    addresses for a given disk (#533417)
  - Add per disk flags functions from upstream, this is the way upstream
    has implemented the disable cylinder alignment functionality
  - Add --align cmdline option to specify how to align new partitions
    see the parted man page for details (#361951)
  - Make the default alignment for new partitions optimal (#361951)
  - When cylinder alignment is disabled, allow use of the last (incomplete)
    cylinder of the disk (#533328)
  - Don't crash when printing partition tables in Russian (#543029)
  - Make parted work correctly with new lvm (#525095)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-22
changelog:
  - Fix error when creating a fresh dasd disk on a dasd device
    with a corrupted dasd label (#533808)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-20
changelog:
  - Fix error when creating a fresh dasd disk (#532425)
  - Rewrite dasd disk duplication patches, as the old old ones conflicted
    with fixing creating a fresh dasd disk


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-17
changelog:
  - Only change the partition type to 82 when setting the swap flag on dos
    labels, not when resetting it


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-15
changelog:
  - ped_partition_is_busy() should not throw exceptions (#527035)
  - msdos_partition_is_flag_available() should return 1 for swap flag (#513729)


author: Joel Granados <jgranado@redhat.com> - 1.8.8-15
changelog:
  - Begin to identify virtio devices.
  - Actually change the partition type in msdos lables (dcantrell).


author: Peter Jones <pjones@redhat.com> - 1.8.8-4
changelog:
  - Don't interactively ask to fix an AlternateGPT's location when not
    at the end of the disk; this is so that disk images written to a
    usb-key can work reasonably.


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-12
changelog:
  - Add KNOWN ISSUES section to parted(8) man page explaining that we cannot
    currently do ext3 resizing inside parted (#367101)
  - Update the xvd patch to include 'xvd' in the string table that parted
    uses when printing device types (#366971)
  - Do not install the linux.h or gnu.h headers


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-4
changelog:
  - Fix primary partition cylinder alignment error for DOS disk labels (#229745)
  - Do not build and package up libparted.a, only the shared library


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-1
changelog:
  - Upgrade to GNU parted-1.8.6, summary of major change(s):
       a) Revert linux-swap(new) and linux-swap(old) fs types, it's
          linux-swap for all swap types (#233085)


author: David Cantrell <dcantrell@redhat.com> - 1.8.4-1
changelog:
  - Upgrade to GNU parted-1.8.4, summary of major changes:
       a) Update to use newest GNU developer tools
       b) Use gnulib, the GNU portability library
       c) HFS+ resize support
       d) Windows Vista fixes
       e) AIX disk label fixes
       f) >512 byte logical sector read support on Linux
  - Spec file cleanups per Fedora packaging guidelines


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-5
changelog:
  - Remove period from end of summary line (package review)
  - Use preferred BuildRoot (package review)
  - BR device-mapper-devel


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-4
changelog:
  - Patched parted.8 man page to show partition names apply to GPT disklabels
    as well as Mac and PC98 disklabels (#221600)


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-3
changelog:
  - Remove BR for libtermcap-devel
  - Specifically preserve starting alignment of 0x800 on Windows Vista
    (see http://support.microsoft.com/kb/923332 for details)
  - Fix incorrect sector parameter used to initialize a new PedAlignment


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-2
changelog:
  - Preserve starting sector for primary NTFS 3.1 partitions (Windows
    Vista) when modifying the DOS disk label.  NTFS 3.1 partitions do
    not start on the 2nd head of the 1st cylinder at the beginning of
    the drive.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-17
changelog:
  - For init_generic() failures on user-mode Linux block devices, goto
    error_free_arch_specific instead of error_free_dev.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-16
changelog:
  - Don't throw PED_EXCEPTION_ERROR in ped_geometry_read() if accessing
    sectors outside of partition boundary, since returning false will
    shift ped_geometry_check() to the correct sectors.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-14
changelog:
  - Improve error message returned by _parse_header() on GPT-labeled disks
    so users actually have an idea of how to correct the problem
  - Fix off-by-one error with LastUsableLBA and PartitionEntryLBA overlap
    to prevent possible data corruption when using non-parted GPT editing
    tools


author: Peter Jones <pjones@redhat.com> - 1.7.1-13
changelog:
  - Don't use the "volume name" as the device node name on dm device
    partitions, it isn't really what we want at all.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-12
changelog:
  - Updated O_DIRECT patch to work around s390 problems
  - Update LastUsableLBA on GPT-labeled disks after LUN resize (#194238)
  - Fix exception when backup GPT table is not in the correction location
    and parted tries to move it (#194238)


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-11
changelog:
  - Expand error buffer to 8192 bytes in vtoc_error()
  - Do not apply O_DIRECT patch on S/390 or S/390x platforms


author: Chris Lumens <clumens@redhat.com> 1.6.23-1
changelog:
  - Updated to 1.6.23.
  - Get rid of separate Mac patches that are now included in upstream.
  - Update DASD and AIX patches.


author: Chris Lumens <clumens@redhat.com> 1.6.22-3
changelog:
  - Modified Apple_Free patch to take care of the case where the partitions
    are unnamed, causing many errors to be printed (#159047).


author: Chris Lumens <clumens@redhat.com> 1.6.22-1
changelog:
  - Updated to 1.6.22.
  - Get rid of separate gc4 patch that's now included upstream.
  - Take Mac LVM patch from parted CVS.


author: Jeremy Katz <katzj@redhat.com> - 1.6.16-2
changelog:
  - add patch from Matt Domsch to fix consistency of GPT disk labels 
    with the EFI specification for disks > 2TB (#138480)
  - understand the new Sun UFS partition ID
  - merge the new geometry probing from CVS to see if that helps the 
    assertions people are seeing (#138419)


author: Jeremy Katz <katzj@redhat.com> - 1.6.15-5
changelog:
  - add patch from Matt Domsch to add a unique signature to new DOS labels 
    so that we can later determine which BIOS disk is which (#106674)


author: Phil Knirsch <pknirsch@redhat.com> 1.6.15-4
changelog:
  - Fixed dasd patch (had some duplicate file patches in it)
  - Fixed problem with parted segfaulting on SCSI discs on s390 (#133997)


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-2
changelog:
  - fix assertion error when checking flags on non-active partition (#130692)
  - buildrequires: gettext-devel


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-1
changelog:
  - update to 1.6.12 with major changes to CHS handling to hopefully fix #115980
  - adjust dasd patch accordingly, drop some included patches


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-4
changelog:
  - add patch from Matt Domsch to not use the get/set last sector ioctls 
    with a 2.6 kernel (#121455)


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-1
changelog:
  - update to 1.6.9
  - need automake17
  - python-devel is superfluous with pyparted as a separate package
  - lose the fake-libtool stuff, 1.6.9 was disted with newer auto*


author: Jeremy Katz <katzj@redhat.com> - 1.6.6-1
changelog:
  - update to 1.6.6 
  - split dasd into a patch instead of included in the tarball
  - python module is now in the pyparted package (separate src.rpm)
  - ExcludeArch: ppc64 (#118183)


author: Jeremy Katz <katzj@redhat.com> 1.6.3-33
changelog:
  - 2.6 removes the geometry fixups that used to be present for IDE disks.  
    According to Andries, just follow what's in the partition table and don't 
    worry about what Linux "detects"


author: Matt Wilson <msw@redhat.com> 1.6.3-20
changelog:
  - don't detect AIX physical volumes as msdos partition tables (#91748)
  - added stubbed code for manipulating AIX PVs, enough to clobber the
    signature. (#91748)


author: Matt Wilson <msw@redhat.com> 1.6.3-18
changelog:
  - use metadata partitions to protect DASD VTOC
  - stash DASD specific data in disk specific areas, not arch specific
    areas.


author: Karsten Hopp <karsten@redhat.de> 1.6.3-11
changelog:
  - use different define to enable DASD debugging
    Otherwise we'll get a lot of dasd debug output because DEBUG is
    always defined


author: Jeremy Katz <katzj@redhat.com> 1.4.24-7
changelog:
  - use make LIBTOOL=/usr/bin/libtool instead of recreating everything
  - add patch from Jack Howarth <howarth@bromo.med.uc.edu> to self host properly
  - add patch to treat GPT structs as little-endian always and treat GUIDS 
    as little-endian blobs
  - add patch to recognize hp service partitions


author: Jeremy Katz <katzj@redhat.com> 1.4.24-6hammer
changelog:
  - libtoolize, etc for x86_64
  - hack to get the python module in the right place until python.m4 
    from automake is fixed


author: Matt Wilson <msw@redhat.com> 1.4.20-0.1pre3
changelog:
  - new dist from CVS with new autoconf and automake
  - gpt is in 1.4.20, removed patch1 (gpt support)
  - partstatic is in 1.4.20, removed patch2 (partstatic patch)


author: Matt Wilson <msw@redhat.com> 1.4.16-8
changelog:
  - new dist from cvs with changes to the python binding: register
    DEVICE_I20 and DEVICE_ATARAID, check to make sure that a partition
    exists in the PedDisk when using it to find ped_disk_next_partition


author: Matt Wilson <msw@redhat.com> 1.4.16-6
changelog:
  - added a patch (Patch1) to link the c library in dynamically, the
    rest of the libs statically for the parted binary (MF #49358)


author: Matt Wilson <msw@redhat.com>
changelog:
  - made a new dist from CVS that includes binding for
    disk.get_partition_by_sector and accessing the name of a disk type


author: Matt Wilson <msw@redhat.com>
changelog:
  - 1.4.16
  - regenerated gpt patch against 1.4.16, incorporated
    parted-1.4.15-pre1-gpt-printf.patch into the same patch, removed Patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a new dist tarball that contains a check in python code to
    make sure that a partition exists within a disk before trying to
    remove it from the disk
  - also changed _probe_with_open to make the first probed filesystem win


author: Matt Wilson <msw@redhat.com>
changelog:
  - added another fix for ext2/ext3
  - added Patch4 to move the crc32 function into its own namespace so
    we don't colide with zlib when both are in the same executable space


author: Matt Wilson <msw@redhat.com>
changelog:
  - include python binding
  - enable shared library (for python binding, we want fpic code)
    with --enable-shared
  - build parted binary static with --enable-all-static
  - don't run libtoolize on this.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.4.11
  - add EFI GPT patch from Matt Domsch (<Matt_Domsch@dell.com>)
  - don't run autoconf, it relies on a newer non-released version
    of autoconf...


author: Paul Howarth <paul@city-fan.org> - 4.069-1
changelog:
  - Update to 4.069
    - Add proper pod encoding in Lite.pm
    - Changed Makefile.PL to check for config.h when building for XS with 'gcc',
      try building with 'cc', and check again; if config.h is not found, force
      Pure Perl mode
    - Kill XS in winduhs and Darwin, both of which misbehave when compiling XS
      code
  - Drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 4.067-1
changelog:
  - Update to 4.067
    - Improved diagnostic message for "die" with bad mask for hostenum,
      hostenumref, split, splitref, rsplit, rsplitref
  - Include new docfile About-NetAddr-IP.txt


author: Paul Howarth <paul@city-fan.org> - 4.064-1
changelog:
  - Update to 4.064
    - Updated GPL v2.0 text and address in all modules
    - Added support for rfc3021 /31 networks to hostenum
  - Update UTF8 patch


author: Paul Howarth <paul@city-fan.org> 4.062-1
changelog:
  - update to 4.062 (#802994)
    - add is_rfc1918 to Lite.pm v1.42
    - fix change in behavior introduced in v4.050 where an empty string supplied
      to "new" previously returned 'undef' and now returns 'default' for ipV4 or
      ipV6 (CPAN RT#75976)
    - documentation updates
  - don't need to remove empty directories from the buildroot
  - recode NetAddr::IP::Lite module and manpage as UTF-8
  - don't use macros for commands


author: Paul Howarth <paul@city-fan.org> 4.058-1
changelog:
  - update to 4.058
    - in Lite.pm v1.40:
      - add call to InetBase::fillIPv4 to all uses of gethostbyname
    - in InetBase.pm v0.06:
      - break out the code that expands short IPv4 addresses into dotquad format
        to account for broken BSD implementations of inet_aton and gethostbyname
        that do not recognize the short format, and EXPORT this as sub 'fillIPv4'
    - in Util.pm v1.45:
      - add 'fillIPv4' to calls to gethostbyname to work around broken inet_aton
        and gethostbyname implementations in certain BSD implementations


author: Paul Howarth <paul@city-fan.org> 4.056-1
changelog:
  - update to 4.056
    - in InetBase.pm v0.04:
      - improve inet_aton to overcome broken gethostbyname found in NetBSD and
        OpenBSD


author: Paul Howarth <paul@city-fan.org> 4.055-1
changelog:
  - update to 4.055
    - in Lite.pm v1.38:
      - patch for CPAN RT#71869: issues with Math::BigInt variants


author: Paul Howarth <paul@city-fan.org> 4.054-1
changelog:
  - update to 4.054
    - in Lite.pm v1.37:
      - fix CPAN RT#71925, a sub-variant of CPAN RT#62521 that showed up only for
        short notation for IPv4, e.g. 127/n, 127.0/n, 127.0.0/n but not
        127.0.0.0/n
      - remove Calc.pm
      - add detection of early Math::BigInt object structure
      - fix CPAN RT#71869 - a failed test routine
  - upstream no longer ships README so no need to fix its encoding


author: Paul Howarth <paul@city-fan.org> 4.052-1
changelog:
  - update to 4.052
    - in InetBase.pm v0.03:
      - Socket6 prior to version 0.23 does not have AF_INET6 in the EXPORT_OK
        array; modify InetBase.pm to work around this
      - remove reference to Config{osname}
    - in Lite.pm v1.35:
      - add support for Math::BigInt to NetAddr::IP::Lite
      - use Math::BigInt::Calc for creating BigInt values and fall back to
        NetAddr::IP::Calc if Math::BigInt is not present (fixes CPAN RT#71869)
  - BR: perl(Data::Dumper) and perl(Math::BigInt)
  - add runtime dependency on perl(Math::BigInt) for performance and consistency
  - update UTF-8 patch to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 4.049-1
changelog:
  - update to 4.049
    - in Lite v1.32:
      - add capability to parse input of the form ->new6(12345,1); this should
        have been there but was missing (CPAN RT#68723)
    - in Util v1.41:
      - add inet_pton, inet_ntop, AF_INET, AF_INET6
      - modify inet_n2dx and inet_n2ad to recognize the new 128-bit IPv4 format
        ::FFFF:FFFF:0:0
      - replace isIPv4 with a pure perl version for portability
    - split the following into NetAddr::IP::InetBase v0.01 to provide better
      long-term support for IPv6:
      - inet_aton
      - inet_ntoa
      - ipv6_aton
      - ipv6_n2x
      - ipv6_n2d
      - inet_any2n
      - inet_n2dx
      - inet_n2ad
      - inet_ntop
      - inet_pton
      - packzeros
      - isIPv4
      - isNewIPv4
      - isAnyIPv4
      - AF_INET
      - AF_INET6
  - BR: perl(Carp)
  - BR: perl(Socket6) for test suite
  - update UTF-8 patch to apply cleanly
  - license is now GPL+ or Artistic in most of the code but Util.xs is GPLv2+ so
    we ship the whole thing under that license


author: Paul Howarth <paul@city-fan.org> - 4.044-3
changelog:
  - use a patch rather than scripted iconv to fix character encoding
  - use rpm native provides filtering
  - make %files list more explicit


author: Kyle McMartin <kyle@fedoraproject.org> - 0.1-6
changelog:
  - webrtc-fix-typedefs-on-other-arches.patch: fix ftbfs on non-x86/arm due to
    a build #error in typedefs.h, however, the defines are not used anywhere in
    the code. Fixes build on ppc{,64}, s390x, and aarch64.


author: Edward Leung <edward.leung@oracle.com> - 3.4.3-167.0.1
changelog:
  - Resolves: [Orabug: 27942695] spacewalk reposync fails [Errno 14] HTTP Error 407-Proxy Authentication Required
  - Remove Red Hat references [Orabug: 24684777]
  - Remove Red Hat references [Orabug: 22587848]
  - discard the patch for [Orabug: 12614512].
  - Bug13869 Fix the CVE duplicate entries problem. (leon.w.wang@oracle.com)
  - Add kernel-uek packages to install only list (john.haxby@oracle.com)
  - Add uln.patch to fix repository not found [Orabug: 12614512] (leon.w.wang@oracle.com)
  - Add kernel-uek-firmware package to install only list [Orabug: 13535055]


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-166
changelog:
  - docs: yum command argument is not optional
  - Resolves: bug#1573154
  - updateinfo: suggest command for --verbose if bad duplicate
  - Resolves: bug#1645618


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-164
changelog:
  - Do not reinstall local installonly packages
  - Resolves: bug#1689025
  - Fix traceback when every provider conflicts with requiring package
  - Resolves: bug#1713649
  - Gracefully handle empty RPM error list during transaction test
  - Resolves: bug#1690376
  - Gracefully handle self-conflicts during reinstall
  - Resolves: bug#1564747
  - yumRepo: migrate more prints to logging
  - Resolves: bug#1510495


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-162
changelog:
  - downloadonly: unlink .tmp files on ctrl-c
  - Resolves: bug#1410234
  - Fix calculation of uncleaned disk space after "yum clean all"
  - Resolves: bug#1645173
  - Speed up depsolving in Anaconda for large transactions
  - Resolves: bug#1600383


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-159
changelog:
  - Retry on gpgkey timeout from MirrorManager
  - Resolves: bug#1520454
  - docs: baseurl: clarify multiple URLs
  - Resolves: bug#1509831
  - updateinfo: preload pkgSack
  - Resolves: bug#1528608
  - update(): honor multilib_policy for obsoletes
  - Resolves: bug#1477574
  - Print a disk usage summary on "yum clean all" and clarify docs
  - Resolves: bug#1481220
  - depsolve: filter out conflicting provider
  - Resolves: bug#1480065
  - Change 'size' option to 'maxsize' in yum.logrotate
  - Resolves: bug#1506890


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-156
changelog:
  - Preload shared libs that we may dlopen().
  - Resolves: bug#1458841
  - Update payload_gpgcheck documentation.
  - Resolves: bug#1451817
  - Make exactarchlist support wildcards and add docs.
  - Resolves: bug#1361609
  - Add usercache config option.
  - Resolves: bug#1432319


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-155
changelog:
  - Don't pollute stderr in FIPS mode.
  - Resolves: bug#1287610
  - Don't require enabled repos for URL installs.
  - Resolves: bug#1175315
  - installonlypkgs: add "installonlypkg(kernel)
  - Resolves: bug#1358492
  - Manpage fixes.
  - Resolves: bug#1386597
  - Resolves: bug#1411575


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-154
changelog:
  - Add payload_gpgcheck option.
  - Resolves: bug#1343690
  - Add hint about rm -rf for yum clean all.
  - Resolves: bug#1357083
  - Have "yum check" ignore self conflicts.
  - Resolves: bug#1370134
  - Detect installed virtual provide in install().
  - Resolves: bug#1352585
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1397829


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-153
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1399628
  - sqlitesack: fix filelist queries for duplicate pkgs.
  - Resolves: bug#1391507


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-151
changelog:
  - Add repo-id to repomd timestamp error message.
  - Resolves: bug#1389816
  - Don't recommend makecache if just running.
  - Resolves: bug#1369389
  - Add logging of bad update notice duplicates.
  - Resolves: bug#1194915


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-146
changelog:
  - Fix count of applicable security updates.
  - Related: bug#1292160
  - Update the docs for compare_providers_priority.
  - Related: bug#1186690


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-145
changelog:
  - yum-cron: properly replace 'localhost' with system_name value in email_from.
  - Related: bug#1330670


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-143
changelog:
  - Add lazy:packages caching option.
  - Resolves: bug#1337105
  - Install comps.rng on the system.
  - Resolves: bug#1348995
  - Typo fixes.
  - Resolves: bug#1339168
  - yum-cron: replace 'localhost' with system_name value in email_from.
  - Resolves: bug#1330670


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-141
changelog:
  - updateinfo: strip respin suffix if present.
  - Resolves: bug#1065380
  - Mention subscription-manager for enabling repos.
  - Resolves: bug#1175309


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-139
changelog:
  - Add autosavets option allowing to avoid autosaving transactions.
  - Resolves: bug#1208803
  - Add compare_providers_priority repository option.
  - Resolves: bug#1186690
  - skipbroken: don't installonly_limit if new pkg fails.
  - Resolves: bug#1330423
  - Recommend --disablerepo and subscription-manager when a repo fails.
  - Resolves: bug#1195745
  - Fix a typo in exclude_updates().
  - Resolves: bug#1327962
  - Fix 'updateinfo list all' traceback and indicate if the package is installed.
  - Resolves: bug#1328023
  - Explicitly list the bash completions directory.
  - Resolves: bug#1293513


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-138
changelog:
  - Read FS yumvars before yum.conf setup, and reread if installroot changed.
  - Resolves: bug#1281593
  - Cope with older installonly packages from deps.
  - Resolves: bug#1306142
  - Add metadata_expire_filter to repoinfo output.
  - Resolves: bug#1321651
  - yum-cron: don't crash with non-ascii email.
  - Resolves: bug#1202680
  - Fix fssnapshot section in the manpage.
  - Resolves: bug#1168121
  - yum-cron: don't fail on empty transaction.
  - Resolves: bug#1004853
  - Fix summary for yum fs command.
  - Resolves: bug#1309676
  - yum-cron: fix the parsing of update_cmd.
  - Resolves: bug#1294789
  - Make YumHistoryRpmdbProblem objects hashable.
  - Resolves: bug#1292087
  - Allow for validating attributes read from yumdb.
  - Resolves: bug#1234967


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-137
changelog:
  - Honor proxy=_none_ set in yum.conf.
  - Resolves: bug#1293670
  - Fix the default value for query_install_excludes config option.
  - Resolves: bug#1291745
  - Add ftp_disable_epsv config option.
  - Resolves: bug#1293378
  - Add ppc64le and aarch64 to rpmUtils.arch.arches.
  - Resolves: bug#1272058
  - Clarify using 'group list' command for hidden groups in the man page.
  - Resolves: bug#1279483


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-136
changelog:
  - Fix updateinfo to exclude wrong arch updates.
  - Resolves: bug#1292160
  - Exclude duplicates from the list of security updates.
  - Resolves: bug#1267897
  - Fix 'updateinfo list available' logic and make 'updates' the default.
  - Resolves: bug#1292150


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-134
changelog:
  - Disable repo with skip_if_unavailable=True if repomd.xml can't be retrieved.
  - Resolves: bug#1183669


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-133
changelog:
  - Fail on attempting to install a non-existent group.
  - Resolves: bug#1267234
  - Add config options skip_missing_names_on_install and skip_missing_names_on_update.
  - Resolves: bug#1274211


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-130
changelog:
  - Fix fssnap_automatic_devices and fssnap_automatic_percentage in yum.conf manpage.
  - Resolves: bug#1244119


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-129
changelog:
  - Fix UnboundLocalError in deselect().
  - Related: bug#1168385
  - Update the URL of kcs article.
  - Related: bug#1200338


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-126
changelog:
  - Fix update-minimal traceback and ignoring updates.
  - Resolves: bug#1192239
  - Expect KB as well as MB in disk requirements message from rpm.
  - Resolves: bug#1212514
  - Make sure epoch is a string while checking for running kernel.
  - Resolves: bug#1212506
  - Fix tsInfo.conditionals in deselect() when the package is not yet in the transaction.
  - Resolves: bug#1168385
  - Replace 'upgrade-minimal' with documented 'update-minimal' in yum-cron.conf files.
  - Resolves: bug#1182096
  - Add query_install_excludes conf./docs and use it for list/info/search/provides.
  - Resolves: bug#1212519
  - Don't traceback on xml parsing.
  - Resolves: bug#1063177
  - Fix casing of 'yum grouplist' headers.
  - Resolves: bug#1211384
  - Show advisory even if package arch changed.
  - Resolves: bug#1193871
  - Add fssnap_abort_on_errors config option and improve detecting if lvm is installed.
  - Resolves: bug#1047793
  - Fix default for fssnap_automatic_keep in the man page and dad logging for automatic fssnap events.
  - Resolves: bug#1145485
  - yum manpage: move 'history info' description to its proper place.
  - Resolves: bug#1168120
  - Add missing documentation from yum-security manpage.
  - Resolves: bug#1182075
  - Add links to knowledge base articles for http errors 404 and 403 and curl error 60.
  - Resolves: bug#1199976
  - Resolves: bug#1200312
  - Resolves: bug#1200338
  - API v2.7: missing_requires, pretty_output_update, promptYN fix, confList.
  - Resolves: bug#1188960


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-121
changelog:
  - Fix variable substitution.
  - Resolves: bug#1102585
  - Fix history searching for [abc] character lists failures.
  - Resolves: bug#1096147
  - Fix update-minimal command in the man page.
  - Resolves: bug#1087911


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-119
changelog:
  - Don't create lockdir directories.
  - Resolves: rhbz#1130939
  - Mask st_mode to fix verifying permissions for ghost files.
  - Resolves: rhbz#1113395
  - Check /usr for writability before running a transaction.
  - Resolves: rhbz#1097383
  - Make --setopt handle spaces properly.
  - Resolves: rhbz#1095161
  - Fix traceback when the history dir is empty.
  - Resolves: rhbz#1095157
  - Test for lvm binary before using.
  - Resolves: rhbz#1047793


author: James Antill <james.antill@redhat.com> - 3.4.3-116
changelog:
  - Fix traceback on removing doc dirs.
  - Resolves: rhbz#1062959
  - Tweak docs for groups info, showing yum remove results.
  - Resolves: rhbz#833087


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-112
changelog:
  - Improve yum-cron messages and error handling.
  - Resolves: rhbz#1040619
  - Enable yum_cron_systemd
  - Resolves: rhbz#1040620
  - Update "yum check" description.
  - Resolves: rhbz#1015000


author: James Antill <james.antill@redhat.com> - 3.4.3-111
changelog:
  - A few simple perf, UI, bug, and docs. fixes.
  - Resolves: rhbz#1053289
  - A few group related bug fixes from pre-f20 testing.
  - Resolves: rhbz#1052436


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-110
changelog:
  - yum-cron: fail when sigCheckPkg() returns 2
  - Resolves: bug#1052994
  - depsolve_loop_limit=<forever> should try forever


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-106
changelog:
  - More reliable po.localpath file:// URL test. BZ 1004089
  - Disable drpms for local repositories. BZ 1007097
  - docs: fix formatting of "yum swap" examples. BZ 1009154
  - docs: update "yum check" extra args description. BZ 1014993
  - Implement pkg.remote_url for YumLocalPackage. BZ 1016148
  - Give same non-exist msg. for install @foo as group install foo. BZ 1018833.
  - UpdateNotice.xml(): sanitize pkg['epoch']. BZ 1020540
  - yum-cron: support download/install with update_messages==False. BZ 1018068
  - Fix some bugs in setopt for repo config. entries. BZ 1023595.
  - Add loop limit for depsolving. BZ 1017840.
  - Small change how distroverpkg config. works. BZ 1002977.
  - _readRawRepoFile: return only valid (ini, section_id). BZ 1018795


author: James Antill <james.antill@redhat.com> - 3.4.3-103
changelog:
  - Add cache check to repolist, using "!". Document repoinfo.
  - Add epoch to updateinfo xml output.
  - Add missing translation hooks for ignored -c option message.
  - Try to smooth out the edge cases for cacheReq not ever updating data.
  - update /etc/yum-cron-hourly.conf. BZ 1002623
  - Tweak y-c-t and history redo msg. BZ 974576.
  - docs: $arch does not map 1:1 to uname(2) arch. BZ 1003554
  - checkMD: re-check when xattr matches but size==0. BZ 1002494
  - Use new comps. mock objects to re-integrate group removal. BZ 996866.
  - Add "weak" comps. groups, for installed groups.
  - Add msg. to help users deal with RepoError failures. BZ 867389.
  - Give msgs about install/trans. obsoletes a higher priority. BZ 991080.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-102
changelog:
  - smtp-compliant email_from default. BZ 982696
  - Fix the .reason handling and update/depupdated split. BZ 961938.
  - Override users umask for groups files, so users can read it. BZ 982361.
  - Also check groups dirname(), for better user messages. BZ 982361.
  - Add "--disableincludes" option to yum. BZ 911422
  - yum-cron: override the default stdout codec.  BZ 992797
  - fix file:// repository && downloadonly. BZ 903294, BZ 993567
  - deltarpm: _wait(block=True) should not wait for all running jobs. BZ 991694
  - make mdpolicy=group:small default, add group and pkgtags. BZ 989231
  - yum-cron: use the [base] section to override yum.conf. BZ 968529
  - Don't unlink .drpm files from file:// repos. BZ 999591
  - waitForLock() raises YumBaseError. BZ 1001154
  - checkMD: re-check when xattr matches but size==0. BZ 1002494
  - Add per-repository "keepcache" option to yum. BZ 1001072


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-101
changelog:
  - Pass arch of package to applydeltarpm. BZ 981314.
  - Clean up new files when reverting to old repomd.xml
  - Get correct rpmdb path from rpm configuration
  - repoMDObject.dump_xml() "distro" tag fix
  - Fix parsing of power7+ platform string. BZ 980275
  - updatesObsoletesList: add repoid arg. BZ 984297
  - findRepos: handle re.compile() errors. BZ 984356
  - updatesObsoletesList: add repoid arg. BZ 984297
  - Preload from root cache when --cacheonly. BZ 830523, 903631
  - Add debuglevel option to yum-cron.conf BZ 873428, 982088
  - RepoMD: support loading/dumping of <delta>s.
  - yum-cron: use [base] section
  - yum-cron: fix the download but don't appy updates case. BZ 983076
  - group install/update: handle "No Groups Available" exception. BZ 983010
  - misc.decompress(): handle OSError, too. BZ 989948
  - yum-distro-configs: update installonly_limit default in yum.conf.5
  - Remove "kernel-modules" from installonly list. BZ 801067


author: James Antill <james at fedoraproject.org> - 3.4.3-99
changelog:
  - Update to latest HEAD.
  - Fix igroups not being reset in "ts reset" and anaconda. BZ 924162.
  - Check for bad checksum types at runtime. BZ 902357.
  - fix --cacheonly edge case. BZ 975619.


author: James Antill <james at fedoraproject.org> - 3.4.3-98
changelog:
  - Update to latest HEAD.
  - Add simple way to specify a group of pkgs. for version. BZ 913461.
  - Change group install => group upgrade for installed groups. BZ 833087.
  - Give more text when telling user about y-c-t, mention history. BZ 974576.
  - Fix the tolerant yum.conf text.
  - Skip installonly limit, if something has set check_future_rpmdbv. BZ 962757.


author: James Antill <james at fedoraproject.org> - 3.4.3-97
changelog:
  - Update to latest HEAD.
  - Minor updates to fssnapshot command.
  - metalink: Don't assume maxconnections is always set. BZ 974826.
  - DeltaPackage: provide returnIdSum(). BZ 974394.


author: James Antill <james at fedoraproject.org> - 3.4.3-96
changelog:
  - Update to latest HEAD.
  - Add real logging to updateinfo parsing.
  - Merge fssnap command.
  - Extend repos.findRepos() API so it can handle repolist input.
  - Add a prelistenabledrepos plugin point.
  - Auto. enable disabled repos. in repo-pkgs.
  - Do cacheRequirement() tests before doCheck().


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-94
changelog:
  - Update to latest HEAD.
  - downloadonly: prefetch also pkg checksums. BZ 973380
  - Fix superfluous dots after "via" in man pages. BZ 972764
  - support "proxy = libproxy" syntax to enable libproxy. BZ 857263
  - checkEnabledRepo: run prereposetup if necessary. BZ 826096


author: James Antill <james at fedoraproject.org> - 3.4.3-93
changelog:
  - update to latest HEAD.
  - Workaround anaconda passing None as group name. BZ 959710.
  - Fix second part of igrp as grp problems. BZ 955236.
  - Add a fuzzy matcher for numbers in format_missing_requires. BZ 718245.
  - Hide the "downloadonly" option when nothing to download.
  - Add the "minrate" option. BZ 964298


author: James Antill <james at fedoraproject.org> - 3.4.3-92
changelog:
  - update to latest HEAD.
  - returnPackagesByDep() API fix (really old break).
  - Try to make groups conversion better.
  - progress.start: supply the default filename & url.  BZ 963023
  - drpm retry: add RPM sizes to total size.  BZ 959786
  - YumBaseError: safe str(e).  BZ 963698


author: James Antill <james at fedoraproject.org> - 3.4.3-90
changelog:
  - Massive hack for Fedora/updateinfo stable vs. testing statuses. BZ 960642.
  - Don't load updateinfo when we don't have to.
  - Tell which repo. we are skipping the updateinfo notice from.
  - Compat. code so we can treat groups/igroups the same. BZ 955236.
  - Don't highlight the empty space, Eg. --showdups list.


author: James Antill <james at fedoraproject.org> - 3.4.3-87
changelog:
  - update to latest HEAD.
  - Make --downloadonly skip userconfirm prompt.
  - Turn metadata_expire off for yum-cron.
  - Skip var_arch storage in yumdb.


author: James Antill <james at fedoraproject.org> - 3.4.3-86
changelog:
  - update to latest HEAD.
  - A fix for environments and not installed groups. BZ 928859.
  - Add downloadonly option to download prompt.


author: James Antill <james at fedoraproject.org> - 3.4.3-85
changelog:
  - update to latest HEAD.
  - A couple of fixes for yum-cron using security.
  - Add documentation for updateinfo merge.


author: James Antill <james at fedoraproject.org> - 3.4.3-84
changelog:
  - update to latest HEAD.
  - Move yum-security into core.
  - A bunch of minor fixes for yum-cron.
  - Update yum-cron to add security/minimal/etc. updates.
  - Add socks support to proxy config.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-83
changelog:
  - update to latest HEAD.
  - Update yum-cron to make it worthwhile on Fedora.
  - Fix the installed/depinstalled split.  BZ 952162
  - rebuilding deltarpms: fix the callback==None case. BZ 952357
  - Reuse mirrors when max_retries > len(mirrors).  BZ 765598


author: James Antill <james at fedoraproject.org> - 3.4.3-82
changelog:
  - update to latest HEAD.
  - Keep installedFileRequires in sync. BZ 920758.
  - Add repo-pkgs upgrade-to.
  - Document autoremove commands.


author: James Antill <james at fedoraproject.org> - 3.4.3-81
changelog:
  - update to latest HEAD.
  - Fix optional packages getting installed by default. BZ 923547.
  - cacheReq() added to groups command.
  - Finally fix the installed obsoletes problem.
  - Sync specfiles.
  - Turn checking on, and fix check-po script.


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-80
changelog:
  - package also /usr/share/bash-completion/completions's parent
  - set correct dir when bytecompiling /usr/share/yum-cli
  - add fast package name completion (disabled by default)


author: James Antill <james at fedoraproject.org> - 3.4.3-76
changelog:
  - Change groups_command default to objects.
  - update to latest HEAD.
  - Add timestamp to transaction object for plugins etc.


author: James Antill <james at fedoraproject.org> - 3.4.3-74
changelog:
  - update to latest HEAD.
  - Fix obsoletes in "yum check".
  - Drop drpm rebuild defaults back to 2 workers.


author: James Antill <james at fedoraproject.org> - 3.4.3-72
changelog:
  - update to latest HEAD.
  - Translation updates.
  - Smarter selection of drpm candidates.
  - "makecache fast".
  - Minor updates.


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.4.3-65
changelog:
  - start downloading drpms before rpms
  - deactivate presto if deltarpm package is not installed
  - rename "presto" option to "deltarpm".
  - new DeltaPO class instead of in-place rpm=>drpm patching.


author: James Antill <james at fedoraproject.org> - 3.4.3-60
changelog:
  - update to latest HEAD.
  - Auto expire caches on repo errors.
  - Use xattrs for cache checksum speedup.


author: James Antill <james at fedoraproject.org> - 3.4.3-58
changelog:
  - update to latest HEAD.
  - Add pyxattr require for origin_urls for everyone.
  - Fix yum-cron service file and scriptlets.
  - Fix instant broken mirrors problem.


author: James Antill <james at fedoraproject.org> - 3.4.3-56
changelog:
  - update to latest HEAD.
  - Add yumvar dumping into yumdb.
  - Add ui_repoid_vars configuration.
  - Update translations.


author: James Antill <james at fedoraproject.org> - 3.4.3-53
changelog:
  - update to latest HEAD.
  - Add repo-pkgs.
  - Add swap.
  - Add remove_leaf_only and repopkgremove_leaf_only.
  - Add metadata_expire_filter.


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.4.3-52
changelog:
  - update to latest HEAD
  - _lock(): yet another exception2msg fix.  BZ 895060
  - use yum-cron.service.  BZ 893593
  - YumRepo.populate(): always decompresses new database


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.4.3-51
changelog:
  - update to latest HEAD
  - Include langpacks when reading and writing comps. BZ 879030
  - selectGroup(): Fix a typo. BZ 885139
  - move the basename checking into _repos.doSetup(). BZ 885159
  - bash completion: offer nvra for multi-install packages
  - fixes extra '</pkglist>' tags on multi-collection errata. BZ 887407
  - Include the update date in updateinfo xml. BZ 887935
  - Complete provides/whatprovides with filenames. BZ 891561
  - New locking code.  BZ 865601


author: Zdeněk Pavlas <zpavlas@redhat.com> - 3.4.3-50
changelog:
  - update to latest HEAD.
  - Check for possible inf. recursion and workaround in skip-broken. BZ 874065
  - Don't error in history list, when we have no history. BZ 802462
  - Avoid converting to unicode and back in dump_xml_*.  BZ 716235
  - po.xml_dump_{primary,filelists,other}_metadata() cleanup


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.4.3-48
changelog:
  - update to latest HEAD.
  - add skip-broken option to yum-cron.
  - get rid of bogus "Downloaded package .. but it was invalid."
  - clean up misc.to_xml(), make it faster.  BZ 716235.
  - checksum not available implies checksum does not match.  BZ 825272.
  - avoid checksumming existing .sqlite.bz2 files.
  - fix circular obsoletes in transaction members check. BZ 868840.


author: James Antill <james at fedoraproject.org> - 3.4.3-44
changelog:
  - update to latest HEAD.
  - Add downloadonly into core, and enable background downloads.
  - Lots of minor fixes.


author: James Antill <james at fedoraproject.org> - 3.4.3-40
changelog:
  - update to latest HEAD.
  - Fix rel-eng problems when repo.repofile is None.
  - Don't statvfs when we aren't going to copy.


author: James Antill <james at fedoraproject.org> - 3.4.3-36
changelog:
  - update to latest HEAD.
  - Fix environment groups write.
  - Allow merging of updateinfo.
  - Add releasever/arch to repoids on output, if used in urls.
  - Merge mirror errors fix.


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-33
changelog:
  - update to latest HEAD.
  - Set multi_progress_obj option
  - Show full URLs and mirror errors when _getFile() fails.


author: James Antill <james at fedoraproject.org> - 3.4.3-32
changelog:
  - update to latest HEAD.
  - Some fixes for new environment groups.
  - Fix "yum upgrade" download verification. BZ 848811.


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-29
changelog:
  - update to latest HEAD.
  - quote uids to keep cachedir ascii-clean.  BZ 832195
  - show_lock_owner: report errors if we fail.  BZ 745281


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-28
changelog:
  - update to latest HEAD.
  - No async downloading when --cacheonly.  BZ 830523
  - misc.decompress(): compare mtime without sub second precision. BZ 831918
  - preload_from_sys to user dir with --cacheonly, BZ 830523


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-26
changelog:
  - update to latest master HEAD
  - Fix using available packages as installed, due to strong_requires.
  - Remove tracebacks on MD downloads. BZ 822009.


author: Zdenek Pavlas <zpavlas at redhat.com> - 3.4.3-25
changelog:
  - update to latest HEAD.
  - merged multi-downloader code
  - rebased yum-ppc64-preferred.patch
  - dropped arm-arch-detection.patch (moved to HEAD)
  - renamed yum-update.cron to 0yum-update.cron


author: James Antill <james at fedoraproject.org> - 3.4.3-23
changelog:
  - update to latest HEAD.
  - Also fix "yum check" for strong requires. bug 795907.
  - Fix for "Only update available" on downgrade. bug 803346.


author: James Antill <james at fedoraproject.org> - 3.4.3-22
changelog:
  - update to latest HEAD.
  - Fail on bad reinstall/downgrade arguments. bug 800285.
  - Fix weird multiple obsoletion bug. BZ 800016
  - Check for a compat. arch. as well, when hand testing for upgradability.
  - Allow changing the exit code on non-fatal errors.


author: James Antill <james at fedoraproject.org> - 3.4.3-20
changelog:
  - update to latest HEAD.
  - Lazy setup pkgSack, for localinstall/etc.
  - add support for 64 bit arm hardware.
  - Hack for "info install blah" to never look at repos.
  - Fixup resolvedep command for mock users.


author: James Antill <james at fedoraproject.org> - 3.4.3-19
changelog:
  - update to latest HEAD.
  - Add a yum group convert command, so people can use groups as objects easily.
  - Document the new group stuff.
  - Generic provide markers for installonlypkgs (for kernel/vms).
  - Minor updates/fixes merge some older branches.


author: James Antill <james at fedoraproject.org> - 3.4.3-18
changelog:
  - update to latest HEAD
  - Added group_command, but didn't change to groups as objects by default.
  - Minor updates.


author: James Antill <james at fedoraproject.org> - 3.4.3-15
changelog:
  - update to latest HEAD
  - Init "found" variable for distro-sync full. BZ 752407.
  - Fix _conv_pkg_state when calling with history as checksum. BZ 757736.
  - When a repo. fails in repolist, manually populate the ones after it.A
  - Fix a corner case in exception2msg(). BZ 749239.
  - Transifex sync.
  - Hand fix the plural forms gettext stuff.


author: James Antill <james at fedoraproject.org> - 3.4.3-11
changelog:
  - update to latest HEAD
  - Some edge case depsolver bug fixes.
  - Output the GPG fingerprint when showing the GPG key.
  - Update bugtracker URL back to redhat.
  - Allow reinstall and remove arguments to history redo command.
  - Let resolvedep look for installed packages.


author: James Antill <james at fedoraproject.org> - 3.4.3-10
changelog:
  - update to latest HEAD
  - Fix for history sync, and saving on install.
  - Lots of minor bug fixes.
  - Speedups for upgrade_requirements_on_install=true.
  - Fix generated data using bad caches.
  - Changes for yum-cron.


author: James Antill <james at fedoraproject.org> - 3.4.3-9
changelog:
  - update to latest HEAD
  - Update translations.
  - Minor UI tweaks for transaction output.
  - Minor tweak for update_reqs_on_install.


author: James Antill <james at fedoraproject.org> - 3.4.3-7
changelog:
  - update to latest HEAD
  - Fix syncing of yum DB data in history.
  - Add upgrade_requirements_on_install config. option.
  - Don't look for releasever if it's set directly (anaconda).
  - Expose ip_resolve urlgrabber option.


author: James Antill <james at fedoraproject.org> - 3.4.3-6
changelog:
  - update to latest HEAD
  - Add new yum DB data.
  - Add hack to workaround broken python readline in yum shell.
  - Make "yum -q history addon-info last saved_tx" valid input for load-ts.
  - Add "history packages-info/stats/sync" sub-commnands.


author: James Antill <james at fedoraproject.org> - 3.4.3-5
changelog:
  - update to latest HEAD
  - Lots of really minor changes. Docs. and yum-cron mainly.
  - Output yum_saved_tx file.


author: James Antill <james at fedoraproject.org> - 3.4.3-4
changelog:
  - update to latest HEAD
  - Weird old bugs fixed for new createrepo code.
  - Add --assumeno and an easter egg! Also allow remove to use alwaysprompt.
  - Fix \r appearing on serial console etc. BZ 720088.
  - Fix umask on mkdir() as well as open. BZ 719467.
  - Fix traceback when enabling/disabling repos. in GUI.


author: James Antill <james at fedoraproject.org> - 3.4.2-1
changelog:
  - update to 3.4.2
  - Lots of smallish bug fixes/tweaks.
  - Lookup erase transaction members, by their name, if we can.
  - Added pluralized translation messages.


author: James Antill <james at fedoraproject.org> - 3.4.1-4
changelog:
  - update to latest HEAD
  - Fix RepoStorage problem for pulp.
  - Add list of not found packages.
  - Minor bug fixes.


author: James Antill <james at fedoraproject.org> - 3.4.1-3
changelog:
  - update to latest HEAD
  - Tweak "yum provides"
  - Don't access the repos. for saved_tx, if doing a removal.
  - Fix a couple of old minor bugs:
  - Remove usage of INFO_* from yumcommands, as -q supresses that. BZ 689241.
  - Don't show depsolve failure messages for non-depsolving problems. BZ 597336.


author: James Antill <james at fedoraproject.org> - 3.2.28-17
changelog:
  - Allow kernel installs with multilib protection ... oops!
  - Don't conflict with fixed versions of Zif.
  - Add locks for non-root.


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.28-11
changelog:
  - latest head
  - depsolve enhancements on update/obsoletes
  - show recent pkgs in history package-list instead of a specific pkg
  - bz: 644432, 644265
  - make sure urlgrabber is using the right config settings for fetching gpg keys


author: James Antill <james at fedoraproject.org> - 3.2.28-10
changelog:
  - latest head 
  - Fix major breakage from the "list updates" speedup :).
  - Close curl/urlgrabber after downloading packages.
  - Allow remove+update in "yum shell".
  - Fix output of distro tags.


author: James Antill <james at fedoraproject.org> - 3.2.28-8
changelog:
  - latest head 
  - Speedup install/remove/etc a lot.
  - Add merged history.
  - Fix unique comps/pkgtags leftovers.


author: James Antill <james at fedoraproject.org> - 3.2.28-7
changelog:
  - latest head 
  - Fix PK/auto-close GPG import bug.
  - Fix patch for installonly_limit and enable it again.
  - Fix rpmlint warnings.
  - Remove color=never config.


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.28-3
changelog:
  - latest head
  - fix gpg key import
  - more unicode fixes
  - output slightly more clear depsovling error msgs


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.27-20
changelog:
  - latest head
  - minor fixes and doc updates
  - hardlink yumdb files to conserve spacde
  - cache yumdb results


author: James Antill <james@fedoraproject.org> - 3.2.27-18
changelog:
  - Latest head.
  - Add history addon-info.
  - Add new callbacks, verify and compare_providers.
  - Fix rpm transaction fail API break, probably only for anaconda.
  - Bug fixes.


author: James Antill <james@fedoraproject.org> - 3.2.27-17
changelog:
  - Latest head.
  - Allow reinstalls of kernel, etc.
  - Tweaks to some user output.
  - Allow Fedora GPG keys to be removed.
  - Add history extra data API, and history plugin hooks.
  - Bunch of minor bug fixes.


author: James Antill <james@fedoraproject.org> - 3.2.27-16
changelog:
  - Latest head.
  - Fix install being recorded as reinstall.
  - Make localinstall not install obsoleted only by installed.
  - Fix info -v, on available packages.
  - Fix man page stuff.
  - Deal with unicide on rpmdb problems.
  - Allow ipkg.repo.name to work.
  - Add ville's epoch None vs. 0 code, in compareEVR.


author: James Antill <james@fedoraproject.org> - 3.2.27-15
changelog:
  - Latest head.
  - Add filtering requires code for createrepo.
  - Add installed_by/changed_by yumdb values.
  - Tweak output for install/reinstall/downgrade callbacks.
  - Add plugin hooks for pre/post verifytrans.
  - Deal with local pkgs. which only obsolete.
  - No chain removals on downgrade.
  - Bunch of speedups for "list installed blah", and "remove blah".


author: Seth Vidal <skvidal at fedoraproject.org> - 3.2.27-14
changelog:
  - merge in latest yum head:
  - change decompressors to support lzma, if python module is available
  - finnish translation fixes
  - pyint vs pylong fix for formatRequire() so we stop spitting back the wrong requires strings to mock on newish rpm
  - add exit_on_lock option
  - Deal with RHEL-5 loginuid damage
  - Fix pkgs. that are excluded after being put in yb.up ... BZ#597853
  - Opt. for rpmdb.returnPackages(patterns=...). Drops about 30% from remove time.
  - Fix "remove name-version", really minor API bug before last patch


author: James Antill <james@fedoraproject.org> - 3.2.27-12
changelog:
  - Latest head.
  - History db version 2
  - Some bug fixes
  - More paranoid/leanient with rpmdb cache problems.


author: James Antill <james@fedoraproject.org> - 3.2.27-11
changelog:
  - Fix from head for mock, mtime=>ctime due to caches and fixed installroot
  - Fix for typo in new problems code, bug 589008


author: James Antill <james@fedoraproject.org> - 3.2.27-9
changelog:
  - Latest yum-3_2_X head.
  - Added protect packages.
  - Bug fixes from the yum bug day.
  - Added removed size output.
  - Added glob: to all list config. options.
  - Fix fsvars.


author: James Antill <james@fedoraproject.org> - 3.2.27-8
changelog:
  - Latest yum-3_2_X head.
  - Add deselections.
  - Add simple depsolve into compare_providers
  - Speedup distro-sync blah.


author: James Antill <james@fedoraproject.org> - 3.2.27-7
changelog:
  - Latest yum-3_2_X head.
  - Add the "big update" speedup patch.
  - Add nocontexts ts flag.
  - Add provides and obsoleted to "yum check".
  - Add new dump_xml stuff for createrepo/modifyrepo.
  - Move /var/lib/yum/vars to /etc/yum/vars


author: James Antill <james at fedoraproject.org> - 3.2.25-13
changelog:
  - A couple of bugfixes, most notably:
  -  you can now install gpg keys again!
  -  bad installed file requires don't get cached.


author: James Antill <james at fedoraproject.org> - 3.2.25-10
changelog:
  - latest head
  - Fixes for pungi, rpmdb caching and kernel-PAE-devel duplicates finding
  - among others.


author: Simone Caronni <negativo17@gmail.com> - 5.2.12-4
changelog:
  - Updated SysV init script according to Fedora template:
    https://fedoraproject.org/wiki/Packaging:SysVInitScript


author: Simone Caronni <negativo17@gmail.com> - 5.2.12-2
changelog:
  - Fix fedpkg checks. Requires fedpkg > 1.10:
    http://git.fedorahosted.org/cgit/fedpkg.git/commit/?id=11c46c06a3c9cc2f58d68aea964dd37dc028e349
  - Change systemd requirements as per new package guidelines.


author: Simone Caronni <negativo17@gmail.com> - 5.2.11-4
changelog:
  - Add a sleep timer for RHEL init scripts restart as Debian does.
    Problems verified on the sd exiting too early on VMs and slow boxes.


author: Simone Caronni <negativo17@gmail.com> - 5.2.10-6
changelog:
  - Remove user definition during prep so they are not used during the install
    phase (rhbz#852732).
  - Enforce permissions in default config files.


author: Simone Caronni <negativo17@gmail.com> - 5.2.10-2
changelog:
  - Add nss-lookup.target as required to service files (rhbz#838828).
  - Fix bsmtp upstream bug sending mails to ipv4/ipv6 hosts.


author: Simone Caronni <negativo17@gmail.com> - 5.2.8-1
changelog:
  - Update to 5.2.8.
  - Removed upstram xattr patch.
  - Added database backend detection to bacula-libs-sql for upgrades from
    <= 5.0.3-28-fc16 and 5.2.6-1.fc17.


author: Simone Caronni <negativo17@gmail.com> - 5.2.7-4
changelog:
  - Make a note about mt-st and mtx (bz#829888).
  - Update README.Fedora with current information.
  - Fix bacula-sd group on Fedora and RHEL >= 6 (bz#829509).


author: Simone Caronni <negativo17@gmail.com> - 5.2.7-3
changelog:
  - Final xattr patch from upstream for bz#819158.
  - Switch alternatives to point to the unversioned system libraries.
    Pointed out by the closely related bug #829219.


author: Simone Caronni <negativo17@gmail.com> - 5.2.7-1
changelog:
  - Updated to 5.2.7, removed patches included upstream.
  - Removed python-devel patch, fix included in python package.
  - Replaced tabs with blanks in spec file (rpmlint).


author: Simone Caronni <negativo17@gmail.com> - 5.2.6-6
changelog:
  - Even if pulled in by dependencies, re-add explict BR on systemd-units.
  - Remove .gz suffix for man pages in file lists as per packaging guidelines.


author: Simone Caronni <negativo17@gmail.com> - 5.2.6-5
changelog:
  - Patch for bug #819158.
  - Updated hostname patch with official fix.
  - Sorted all BuildRequires and removed useless systemd-units.


author: Simone Caronni <negativo17@gmail.com> - 5.2.6-3
changelog:
  - Removed _install, _mkdir and _make macro.
  - Added _isa to BuildRequires.
  - Removed lzo-devel option for RHEL 4 (EOL).


author: Simone Caronni <negativo17@gmail.com> - 5.2.6-2
changelog:
  - Move libbaccats and libbacsql into bacula-libs-sql package so only
    Director and Storage daemons pull in SQL dependencies:
    http://old.nabble.com/Standalone-client-question-td33495990.html


author: Simone Caronni <negativo17@gmail.com> - 5.2.5-2
changelog:
  - License has changed to AGPLv3 in 5.0.3. Thanks Erinn.
  - Fix ldconfig/alternatives symlinks on removal of packages and
    upgrades from recent f15/f16 changes.


author: Simone Caronni <negativo17@gmail.com> - 5.2.5-1
changelog:
  - Update to 5.2.5.
  - Change the alternative library to the base shared object name
    so the preference set is not lost when changing releases.


author: Simone Caronni <negativo17@gmail.com> - 5.2.3-5
changelog:
  - Trim changelog.
  - Merge bacula-director backends and move libbacats alternatives
    to bacula-libs.
  - Move bscan to bacula-storage now that is dependent only on
    bacula-libs.
  - Added README.Fedora.


author: Simone Caronni <negativo17@gmail.com> - 5.2.3-4
changelog:
  - Changing uid from 33 per previous discussion, static uid
    already allocated is 133:
    "cat /usr/share/doc/setup-2.8.36/uidgid | grep bacula"


author: Simone Caronni <negativo17@gmail.com> - 5.2.3-3
changelog:
  - Remove fedora-usermgmt entirely, see thread at:
    http://lists.fedoraproject.org/pipermail/packaging/2011-December/008034.html


author: Simone Caronni <negativo17@gmail.com> - 5.2.3-2
changelog:
  - Remove leftover users when removing bacula-common.
  - Allow building "--without fedora" to avoid RHEL dependency on EPEL:
    http://fedoraproject.org/wiki/PackageUserCreation


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-11
changelog:
  - Add bat html docs so the help button works.
  - Minor packaging changes.
  - Default permissions on bconsole and bat.
  - Use localhost as default on config files instead of patching fake
    example.com hostnames.
  - Add QT tray monitor.


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-8
changelog:
  - Fixed building on RHEL/CentOS 4.
  - Split out libs package to remove dependency on bacula-common for
    bconsole, bat and check_bacula.
  - Fix typo in post scriptlet for director-sqlite.


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-7
changelog:
  - Added libcap for POSIX.1e capabilities in bacula-fd (5.0.0 feature).
  - Allow systemd files to read options set in the sysconfig
    configuration files like SysV scripts to enable capabilities.
  - Set capabilities as optional for now.


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-6
changelog:
  - Removed leftover files and small rpmlint fixes.
  - Additional file moves between packages.
  - Enabled LZO compression (5.2.1 feature).


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-5
changelog:
  - Remove redundant user/group in service files.
  - Reduce patching for what can be passed through configure.
  - Remove dsolink patch, not needed anymore.


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-4
changelog:
  - Rename storage-common to storage and make it provide storage-common.
  - Move bscan to director-common.
  - Move storage scripts to storage.
  - Add html docs.
  - Install dummy catalogue library and mark it as ghost.


author: Simone Caronni <negativo17@gmail.com> - 5.2.2-3
changelog:
  - Add missing conditional for bat in the build section.
  - Make bat require qt4-devel on build (rhel 5 fix).
  - Bumped requirement for qt >= 4.6.2 for 5.2.2.
  - Renamed bacula-config.patch to bacula-5.2.2-config.patch as it
    always changes.
  - Fix installation of bat and check_bacula binaries. Enabling
    libtool for bpipe-fd.so produces binaries under .libs.
  - Removed fedora-usermgmt requirement for director-common.
  - Removed examples from docs and make them "noarch".
  - Fix bacula-console requirements.
  - Fix nagios plugin summary.
  - Removed checkconf functions from SysV init files and replace
    the call with the script used in systemd service files. Make
    the script available in all builds.
  - Make docs NoArch where supported.


author: Simone Caronni <negativo17@gmail.com> - 5.2.1-1
changelog:
  - Updated to 5.2.1.
  - Reworked and removed some patches for 5.2.1 codebase.
  - Reworked bat installation.
  - Removed sqlite2 support.
  - Removed all the fancy database backend rebuilding.
  - Disabled libtool for bpipe-fd.so.
  - Passed plugins dir as libdir/bacula.
  - Added sql libs to alternatives.
  - Disabled traymonitor.
  - Minor fixes to spec file, rpmlint fixes.
  - Nagios patch for Enterprise FDs.
  - Removed all gui/web stuff.
  - Removed a lot of comments.
  - Conditional on Fedora 11 / RHEL 6 for bat build.
  - Obsolete bacula-sysconfdir.
  - Removed bwxconsole.


author: Jan Görig <jgorig@redhat.com> - 5.0.3-6
changelog:
  - Fixed previous fix of alternatives
  - Changed initscript return value for non-configured service
  - Director address is required in tray-monitor config now (#626490)


author: Jan Görig <jgorig@redhat.com> - 5.0.3-5
changelog:
  - Fixed alternatives for dbcheck (#650224)
  - Moved director log file to /var/log/bacula/
  - Changed permission of bacula-dir.conf (RHEL #651786)
  - SQLite database is created as bacula user


author: Jan Görig <jgorig@redhat.com> - 5.0.3-4
changelog:
  - Fixed initscripts and changed default group of bacula-sd (#629697)
  - Better warning for non-configured password (#556669)


author: Jan Görig <jgorig@redhat.com> 5.0.2-5
changelog:
  - removed no longer needed sysconfig subpackage (#593307]
  - build with $RPM_OPT_FLAGS, show compiler commands in build log (#575425)
    fixed by Ville Skyttä
  - dropped tcp_wrappers build conditional (#537250)
  - fixed location of query.xml in config file (#556480)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8-1
changelog:
  - Resolves: rhbz#1673716 - Rebase k-h-c-i to version 0.8
  - The rebase also includes fixes for:
    - rhbz#1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe
                     /tmp log file in --log-file option in keycloak_cli.py
    - rhbz#1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe
                     use of -p/--admin-password on command line


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Matthias Clasen <mclasen@redhat.com> - 0.3.3-1
changelog:
  - Update to 0.3.3
  - Include gtk3 module
  - Drop gtk deps, since we don't want to depend on both gtk2 and gtk3;
    instead own the directories


author: Jeff Moyer <jmoyer@redhat.com> - 65.3.el7
changelog:
  - modify nvdimm-security.conf touse '&&' instead of ';'
    Without this change, the module doesn't load
  - Resolves: rhbz#1725405


author: Jeff Moyer <jmoyer@redhat.com> - 65.2.el7
changelog:
  - Remove 'daxctl migrate-device-model' command.  We won't
    support hot-plugging device dax into the memory hierarchy
    on RHEL 7.
  - Resolves: rhbz#1734153


author: Jeff Moyer <jmoyer@redhat.com> - 65.1.el7
changelog:
  - Rebase to v65
    - clear-errors: new command to clear errors on a namespace
    - monitor: remove the requirement of a default config
    - sanitize-dimm: allow a zero-key for secure-erase
    - sanitize-dimm: preserve keys after an overwrite
    - load-keys: fix for non-TPM keys
  - Fix test harness to run against the rhel7 test kernel modules
  - Related: rhbz#1722481


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: David Malcolm <dmalcolm@redhat.com> - 4.10.2-2
changelog:
  - enable "with_python3" in the build
  - use py3dir throughout, as provided by python3-devel
  - name the python 3 sip binary "python3-sip"
  - fix a typo in the name of the data dir: python-3sip -> python3-sip
  - split out macros.sip into a new subpackage


author: Alexander Larsson <alexl@redhat.com> - 0.1.7-5
changelog:
  - Use sigaction to reset old signal handler (from cvs)
  - New inotify backend from cvs (based on gnome-vfs code)
  - Only create timer on demand
  - This should fix #204906


author: Alexander Larsson <alexl@redhat.com> - 0.1.7-3
changelog:
  - Use /dev/null as stdin/out/err when spawning gam_server
  - This could help if there is stdout output somewhere.


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - Improvement of configuration, system wide configuration files and
    per filesystem type default
  - Rewrite of the inotify back-end, reduce resources usage, tuning in
    case of busy resources
  - Documentation updates
  - Changes to compile inotify back-end on various architectures
  - Debugging output improvements


author: Daniel Veillard <veillard@redhat.com> 0.1.3-1
changelog:
  - Fix to compile on older gcc versions
  - Inotify back-end changes and optimizations
  - Debug ouput cleanup, pid and process name reports
  - Dropped kernel monitor bugfix
  - Removed the old glist copy used for debugging
  - Maintain mounted filesystems knowledge, and per fstype preferences


author: Daniel Veillard <veillard@redhat.com> 0.1.2-1
changelog:
  - inotify back end patches, ready for the new inotify support in kernel
  - lot of server code cleanup patches
  - fixed an authentication problem


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - gamin_data_conn_event fix
  - crash from bug gnome #303932
  - Inotify and mounted media #171201
  - mounted media did not show up on Desktop #159748
  - write may not be atomic
  - Monitoring a directory when it is a file
  - Portability to Hurd/Mach and various code cleanups
  - Added support for ~ as user home alias in .gaminrc


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - Close inherited file descriptors on exec of gam_server
  - Cancelling a monitor send back a FAMAcknowledge
  - Fixed for big files > 2GB
  - Bug when monitoring a non existing directory
  - Make client side thread safe
  - Unreadable directory fixes
  - Better flow control handling
  - Updated to latest inotify version: 0.23-6


author: Daniel Veillard <veillard@redhat.com> 0.0.26-1
changelog:
  - Fix an include problem showing up with gcc4</li>
  - Fix the crash on failed tree assert bug #150471 based on patch from Dean Brettle
  - removed an incompatibility with SGI FAM #149822


author: Daniel Veillard <veillard@redhat.com> 0.0.25-1
changelog:
  - Fix a configure problem reported by Martin Schlemmer
  - Fix the /media/* and /mnt/* mount blocking problems from 0.0.24 e.g. #142637
  - Fix the monitoring of directory using poll and not kernel


author: Daniel Veillard <veillard@redhat.com> 0.0.24-1
changelog:
  - more documentation
  - lot of serious bug fixes including Gnome Desktop refresh bug
  - extending the framework for more debug (configure --enable-debug-api)
  - extending the python bindings for watching the same resource multiple times
    and adding debug framework support
  - growing the regression tests a lot based on python bindings
  - inotify-0.19 patch from John McCutchan
  - renamed python private module to _gamin to follow Python PEP 8


author: Daniel Veillard <veillard@redhat.com> 0.0.23-1
changelog:
  - memory corruption fix from Mark on the client side
  - extending the protocol and API to allow skipping Exists and EndExists
    events to avoid deadlock on reconnect or when they are not used.


author: Daniel Veillard <veillard@redhat.com> 0.0.20-1
changelog:
  - Frederic Crozat seems to have found the GList corruption which may fix
    - Frederic Crozat also fixed poll only mode


author: Daniel Veillard <veillard@redhat.com> 0.0.19-1
changelog:
  - still chasing the loop bug, made another pass at checking GList,
    added own copy with memory poisonning of GList implementation.
  - fixed a compile issue when compiling without debug


author: Daniel Veillard <veillard@redhat.com> 0.0.18-1
changelog:
  - still chasing the loop bug, checked and cleaned up all GList use
  - patch from markmc to minimize load on busy apps


author: Daniel Veillard <veillard@redhat.com> 0.0.14-1
changelog:
  - Found and fixed the annoying bug where update were not received
    should fix bugs ##132429, #133665 and #134413
  - new mechanism to debug on-the-fly by sending SIGUSR2 to client or server
  - Added documentation about internals


author: Daniel Veillard <veillard@redhat.com> 0.0.11-1
changelog:
  - update to the latest version of inotify
  - inotify support compiled in by default
  - fix ABI FAM compatibility problems #133162


author: Daniel Veillard <veillard@redhat.com> 0.0.10-1
changelog:
  - more documentation
  - Added support for a configuration file $HOME/.gaminrc
  - fixes FAM compatibility issues with FAMErrno and FamErrlist #132944


author: Daniel Veillard <veillard@redhat.com> 0.0.7-1
changelog:
  - add support for both polling and dnotify simultaneously
  - fixes monitoring of initially missing files
  - load control on very busy resources #124361, desactivating
    dnotify and falling back to polling for CPU drain


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Use %find_lang macro.
  - Add %doc files, including mandatory copy of the LGPL license.
  - Use -j12
  - Improve the descriptions


author: Caolán McNamara <caolanm@redhat.com> - 2.8.3-4
changelog:
  - Resolves: rhbz#813481 x86_64 valgrind spews, see rhbz#813780
  - Related: rhbz#813481 dump valgrind failure log


author: Petr Pisar <ppisar@redhat.com> - 1:0.56-3
changelog:
  - Do not set SSL ciphers at all by default (bug #1091316)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104243)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.46-1
changelog:
  - 0.46 bump
  - Should fix: RT#72108, RT#74572, RT#74759, RT#77180
  - Removed bundled libraries. Use perl(inc::Module::Install).


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Robin Norwood <rnorwood@redhat.com> - 1:0.33-3
changelog:
  - Bugzilla: 207430
  - Incorporate fixes from Jose Oliveira's patch
  - Add perl(IO::Socket::SSL) as a BuildRequires as well
  - Other cleanups from Jose


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.9.8-1
changelog:
  - upstream 1.9.8
  - fix issues with f15/rawhide (RHBZ #676878)
  - drop gtk-doc dependency (RHBZ #604169)


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.9.1-1
changelog:
  - New upstream release
  - Removed html docs from -devel package
  - Seperated requires into one per line
  - Fixed devhelp docs


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.4.2-1
changelog:
  - New upstream release
  - Changed install to preserve timestamps
  - Removed mv of docs/reference and include files directly


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.1.10-1
changelog:
  - First release for cairo 1.2
  - Adjusted cairo dependencies for new version
  - Docs were in html, moved to reference/html


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 0.6.0-1
changelog:
  - New upstream version should fix the upstream issues like AUTHORS and README
  - Added pkgconfig to cairomm BuildRequires and cairomm-devel Requires
  - Replaced makeinstall
  - Fixed devel package description
  - Modified includedir syntax
  - docs included via the mv in install and in the devel files as html dir


author: Robin Norwood <rnorwood@redhat.com> - 0.81-3
changelog:
  - fix various issues from package review:
  - remove || : from %check
  - remove tabs and fix spacing
  - fix encoding for README file


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
  - Correct URL and Source entries to point to pagure.io (#1502362)
  - Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
  - Update nss_pcache.8 to drop directory and prefix options (#1382102)

  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
  - Fail start start when there are invalid Protocols defined (#1389114)
  - Handle group membership when testing NSS database filesystem
    permissions (#1395300)
  - Add OCSP cache tuning directives (#1392582) 
  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
  - Check the NSS certificate database directory for read permissions
    by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-1
changelog:
  - Rebase to 1.0.14 (#1299063)
  - Add support for Server Name Indication (SNI) (#1053327)
  - Use upstream method to not execute live tests as root (#1256887)
  - Always call SSL_ShutdownServerSessionIDCache() in ModuleKill
    (#1263301, #1296685)
  - Don't require NSSProxyNickname (#1280287)
  - Make link to libnssckbi.so an absolute link (#1288471)
  - Fail for colons in credentials with FakeBasicAuth (#1295970)
  - Don't ignore NSSProtocol when NSSFIPS is enabled (#1312491)
  - Check filesystem permissions on NSS database at startup (#1312583)
  - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 (#1323913)
  - Patch to match available ciphers so tests pass (#1299063)
  - Patch to fix tests in brew (#1299063)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-6
changelog:
  - Add the supported NSS SHA384 ciphers (#1253570)
  - Add kECDH, AECDH, ECDSA and aECDSA macros (#1253570)
  - Bump the NSS BR and Requires so the new ciphers are available
  - Bump the NSPR Requires to match NSS


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-5
changelog:
  - Don't enable NULL ciphers in DEFAULT macro (#1253570)
  - Add OpenSSL cipher macro EECDH (#1160745)
  - Disable the live server testing in make check because it
    may run as root and fail horribly (#1160745)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-3
changelog:
  - Fix logical and support in cipher strings CVE-2015-3277
    (#1253570)
  - Add missing BuildRequires and small patch to use requests.urllib3
    to fix make check (#1253570)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-31
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires
  - corrected typo on date


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-30
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-28
changelog:
  - Resolves: rhbz #1030276
  - [mod_nss-usecases.patch]
  - Bugzilla Bug #1030276 - mod_nss not working in FIPS mode


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-27
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1024536 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-7.0] (rcritten)
  - Bugzilla Bug #1030845 - mod_nss: do not use %configure in %changelog
    (mharmsen)


author: Joe Orton <jorton@redhat.com> - 1.0.8-26
changelog:
  - [mod_nss-SSLEngine-off.patch]
  - Bugzilla Bug #1029042 - Implicit SSLEngine for 443 port breaks mod_nss
    configuration (jorton)
  - [mod_nss-unused-filter_ctx.patch]
  - Bugzilla Bug #1029665 - Remove unused variable 'filter_ctx' (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-24
changelog:
  - Add '--enable-ecc' option to %configure line under %build section of
    this spec file (mharmsen)
  - Bumped version build/runtime requirements for NSPR and NSS (mharmsen)
  - [mod_nss-PK11_ListCerts_2.patch]
  - Bugzilla Bug #1022295 - PK11_ListCerts called to retrieve all user
    certificates for every server (rcritten)
  - [mod_nss-array_overrun.patch]
  - Bugzilla Bug #1022298 - overrunning array when executing nss_pcache
    (rcritten)
  - [mod_nss-clientauth.patch]
  - Bugzilla Bug #1022921 - mod_nss: FakeBasicAuth authentication bypass
    [rhel-7.0] (rcritten)
  - [mod_nss-no_shutdown_if_not_init_2.patch]
  - Bugzilla Bug #1022303 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload (rrelyea)
  - [mod_nss-proxyvariables.patch]
  - Bugzilla Bug #1022309 - mod_nss insists on Required value NSSCipherSuite
    not set. (mharmsen)
  - [mod_nss-tlsv1_1.patch]
  - Bugzilla Bug #1022310 - current nss support TLS 1.1 so mod_nss should pick
    it up (mharmsen)
  - [mod_nss-sslmultiproxy_2.patch]
  - Fixes Bugzilla Bug #1021458 - [RFE] Support ability to share mod_proxy with
    other SSL providers (jorton, mharmsen, nkinder, & rcritten)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21.1
changelog:
  - Add the following explanation to the 'Dangling symlinks' textbox in rpmdiff:
    Symlink 'etc/httpd/alias/libnssckbi.so' is deliberate.
    This test does not belong in rpmdiff. This test belongs in TPS.
    Since the symlink points to a file in another package, e.g. a
    dependency or a system file, rpmdiff cannot detect this. Remember,
    rpmdiff does not install or even know about package dependencies.
    That's TPS's job.
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/nss.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/10-nss.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule nss_module modules/libmodnss.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bugzilla Bug #884115 - Package mod_nss-1.0.8-18.1.el7 failed RHEL7 RPMdiff
    testing
  - Bugzilla Bug #906082 - mod_nss requires manpages for gencert and nss_pcache
  - Bugzilla Bug #906089 - Fix dangling symlinks in mod_nss
  - Bugzilla Bug #906097 - Correct RPM Parse Warning in mod_nss.spec
  - Bugzilla Bug #948601 - Man page scan results for mod_nss


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-18
changelog:
  - Actually apply the patch to use memmove in place of memcpy since the
    buffers can overlap (#669118)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-9
changelog:
  - Revert mod_nss-wouldblock patch
  - Reset NSPR error before calling PR_Read(). This should fix looping
    in #620856


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4
changelog:
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Add file Requires on libnssckbi.so so symlink can't fail
  - Use _sysconfdir macro instead of /etc
  - Set minimum level of NSS to 3.12.6


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-7
changelog:
  - Don't inherit the MP cache in multi-threaded mode (454701)
  - Don't initialize NSS in each child if SSL isn't configured


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-6
changelog:
  - Update the patch for FIPS to include fixes for nss_pcache, enforce
    the security policy and properly initialize the FIPS token.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-4
changelog:
  - Apply patch so that mod_nss calls NSS_Init() after Apache forks a child
    and not before. This is in response to a change in the NSS softtokn code
    and should have always been done this way. (444348)
  - The location of libnssckbi moved from /usr/lib[64] to /lib[64]
  - The NSS database needs to be readable by apache since we need to use it
    after the root priviledges are dropped.


author: Rob Crittenden <rcritten@redhat.com> 1.0.7-1
changelog:
  - Update to 1.0.7
  - Remove Requires for nss and nspr since those are handled automatically
    by versioned libraries
  - Updated URL and Source to reference directory.fedoraproject.org


author: Rob Crittenden <rcritten@redhat.com> 1.0.6-2
changelog:
  - Patch to properly detect the Apache model and set up NSS appropriately
  - Patch to punt if a bad password is encountered
  - Patch to fix crash when password.conf is malformatted
  - Don't enable ECC support as NSS doesn't have it enabled (3.11.4-0.7)


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-38
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688417


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-33
changelog:
  - Only embed mime data for gray/rgb/cmyk colorspaces
  - if image decode map is identity
  - Resolves: #1636103


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-23
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1651305


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-5
changelog:
  - Remove PFB headers from embedded Type1 fonts
  - before embedding them into a PostScript file.
  - Resolves: #1241488


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-4
changelog:
  - Bump sonames of all frontends so that they loads symbols
  - from correct libpoppler.so.* when the compat-poppler022
  - package is installed.
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-1
changelog:
  - Update to 0.26.5
  - Remove unused patches
  - Rereview patches from fedora
  - Modify RHEL patches so that they apply
  - Disable Qt5 explicitly
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> 0.22.5-2
changelog:
  - Add poppler-0.22.5-CVE-2013-4473.patch
      (Limit length of output to pathName buffer)
  - Add poppler-0.22.5-CVE-2013-4474.patch
      (Check file pattern)
  - Resolves: #1025160


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649080):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649073)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649073)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649073)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649073)
    - Make error reporting consistent, introduce different severities (RHBZ#1649877)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1650297)
    - Fix covscan SC2166 warning in init script (RHBZ#1649073)
    - Hardcode triggerin, triggerun versions for ipset-service (RHBZ#1646666)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.11-1
changelog:
  - New upstream release.
  - Removed our patch, it has been integrated upstream. As such, we also don't
    need to re-run autoreconf any more.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.2-0.6.b1
changelog:
  - Add an icon for bzr.  This lets the gtk and qbzr plugins share the same icon
    for things like associating an image with a file type.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 2.1.0-0.6.rc2
changelog:
  - Build HTML documentation and package in separate bzr-doc package
    (Bug #562392, Patch by Cheese Lee)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 2.1.0-0.1.b1
changelog:
  - Highlights for this release include support for `bzr+ssh://host/~/homedir`
    style urls, finer control over the plugin search path via extended
    BZR_PLUGIN_PATH syntax, visible warnings when extension modules fail to
    load, and improved error handling during unlocking.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-0.1.rc1
changelog:
  - Update to 1.3.1rc1 to fix a bug when you have a pack based remote repo and
    knit based local branch.


author: Toshio Kuratomi <a.badger@gmail.com> - 1.1-1
changelog:
  - Upstream 1.1 bugfix and performance enhancement release.
  - Enable bash completion script from the contrib directory.


author: Toshio Kuratomi <a.badger@gmail.com> - 0.90-0.1.rc1
changelog:
  - Update to 0.90rc1.
  - 0.90 contains some pyrex code to speed things up.  bzr is now arch specific.
  - Update license tag.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.8.0-3
changelog:
  - Fix X11 even race with gtk (#589998)
  - Fix qt4 problems with creating window in the background (#589532)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Ville Skyttä <ville.skytta at iki.fi> - 0.7.2-1
changelog:
  - 0.7.2, docs patch applied upstream.
  - Switch to GTK2 in -gtk.
  - Fine tune dependencies.
  - Build with dependency tracking disabled.
  - Clean up obsolete pre-FC2 support.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.6.9-0.fdr.1
changelog:
  - Update to 0.6.9.
  - Smoother experience with --excludedocs.
  - Don't change alternative priorities on upgrade.


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Nils Philippsen <nils@redhat.com> - 0.9.1-1
changelog:
  - version 0.9.1, upstream feature and bugfix release
  - no need to use 2to3 for python 3.x anymore
  - build C extension for python 3.x
  - require python2-devel >= 2.6 for building


author: Nils Philippsen <nils@redhat.com> - 0.8.2-1
changelog:
  - version 0.8.2, upstream bugfix release
  - drop obsolete sqlalchemy-test-bidirectional-order patch
  - fix bogus date in changelog


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.8.1-1
changelog:
  - Upstream bugfix
  - Stop calling sa2to3 explicitly on the library.  It seems to break mapper.py's
    import of collections.deque


author: Nils Philippsen <nils@redhat.com> - 0.7.1-1
changelog:
  - 0.7.1 Upstream release
  - no need to fix examples/dynamic_dict/dynamic_dict.py anymore
  - use sqla_nose.py to fix %check


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.5-0.1.rc4
changelog:
  - Update to 0.5.0rc4 which works with the new pysqlite
  - And update test cases to work with the new pysqlite


author: Toshio Kuratomi <a.badger@gmail.com> - 0.4.0-0.3.beta4
changelog:
  - setuptools seems to be broken WRT having an active and inactive version
    of an egg.  Have to make both versions inactive and manually setup a copy
    that can be started via import. (Necessary for the sqlalchemy0.3 compat
    package.)


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.3.1-2
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - BuildRequire: python-devel as a header is missing otherwise.


author: Parag <pnemade AT redhat DOT com> - 0.003-13
changelog:
  - Resolves:rh#847621 - better enabling autohinting by default
  - Resolves:rh#847623 - fontconfig file isn't shipped in rpm
  - Resolves:rh#847627 - Malformed fontconfig config file


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:2.0.0-8
changelog:
  - Fix a heap-based buffer overflow vulnerability leading to
    remote code execution, CVE-2019-5544
    Resolves: #1781701


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-void to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for void input driver generated automatically
    by my xorg-driverspecgen script.


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Tomas Hozza <thozza@redhat.com> - 2.66-7
changelog:
  - use _hardened_build macro instead of hardcoded flags
  - include several fixies from upstream repo:
    - Allow constructed ranges from interface address at end of range
    - Dont BINDTODEVICE DHCP socket if more interfaces may come
    - Fix option parsing for dhcp host
    - Log forwarding table overflows
    - Remove limit in prefix length in auth zone


author: Tomas Hozza <thozza@redhat.com> - 2.66-6
changelog:
  - include several fixies from upstream repo:
    - Tighten hostname checks in legal hostname() function
    - Replace inet_addr() with inet_pton() in src/option.c
    - Use dnsmasq as default DNS server for RA only if it's doing DNS
    - Handle IPv4 interface address labels (aliases) in Linux (#962246)
    - Fix failure to start with ENOTSOCK (#962874)


author: Tomas Hozza <thozza@redhat.com> - 2.66-5
changelog:
  - dnsmasq unit file cleanup
    - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
    - drop After syslog.target as this is by default


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
changelog:
  - New Version 2.52
  - fix condrestart() in initscript bz 547605
  - fix sed to enable DBUS(the '*' need some escaping) bz 553161


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
changelog:
  - move initscript from patch to a plain text file
  - drop (dnsmasq-configuration.patch) and use sed instead
  - enable /etc/dnsmasq.d fix bz 526703
  - change requires to package name instead of file
  - new version 2.51


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Parag <pnemade@redhat.com> - 0.20050929-3
changelog:
  - Use aspell source instead to pull source as BR:aspell-te
  - Resolves:rh#511262 buildrequires aspell-te


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-6.git4391e5c
changelog:
  - Update the fix for CVE-2019-3816
    Resolves: #1668657
  - Remove Dist Tag from the oldest changelog entry


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-4.git4391e5c
changelog:
  - Explicitly disable build of java bindings
    Resolves: #1540723
  - Add support for ECDH key exchange algorithm
    Resolves: #1547144


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-1.git4391e5c
changelog:
  - Update to openwsman-2.6.3 from upstream VCS
    Resolves: #1208364 #1296198
  - Backport support for configuring used cipher suite
    Resolves: #1454607


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-14
changelog:
  - Backport option for disabling various SSL protocols
    Resolves: #1190689
  - Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
    Resolves: #1319949


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-7
changelog:
  - Fix bogus date in the %changelog
  - Build with full relro
  - Fix requires/provides
    Resolves: #881316


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.4-1
changelog:
  - Update to openwsman-2.2.4
  - Add help2man generated manpage for openwsmand binary
  - Add missing openwsman headers to libwsman-devel
  - Add configuration file to openwsman-client


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-7
changelog:
  - Moved the certificate generation from init script. The user will have to 
  -   generate the certificate manually.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-6
changelog:
  - Fixed the version checking of swig and forced all the ruby files to be 
  -   installed into site{lib,arch} dirs


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-3
changelog:
  - authors.patch: Moved all the AUTHORS info to AUTHORS file.
  - Corrected the Source tag.
  - Corrected the package dependencies to break cyclic dependencies.
  - Fixed the default attributes.
  - Fixed the preun & postun scripts, to make sure the openwsmand service
  -    is stopped before the package is removed.
  - Added 'condrestart' function to the init script.
  - Had to let the *.so files be part of the openwsman-server becuase
  -    some of the source files explicitly call out for *.so files.


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.3-2
changelog:
  - Updated the spec file to adhere to the upstream standard of breaking
  - the package in server, client, lib modules 
  - randfile.patch: when openwsmand daemon creates a certificate the
  - first time it needs a file which have random content it. This
  - is pointed to $HOME/.rnd in /etc/openwsman/ssleay.cnf. Changed this
  - random file to /dev/urandom. 
  - initscript.patch: patch to edit the init script so that the services
  - are not started by default.


author: Hans de Goede <hdegoede@redhat.com> - 0.4.0-4
changelog:
  - Drop Requires for gstreamer-plugins, as we may be used with both
    gstreamer-0.10 and 1.0. Instead apps using gnome-video-effects should add
    the necessary Requires themselves


author: Tomas Orsava <torsava@redhat.com> - 6-2
changelog:
  - Modifying python-rpm-generators from F29 to be used in RHEL7
  - The regex in pythondist.attr has been modified to only match Python 3
    modules, so that we do not affect the building of python2 files in RHEL7 at
    this late stage
  - Removed python.attr and pythondeps.sh files, because they are contained in
    rpm-build in RHEL7 and we do not want to modify them
  - the pythondist.attr and pythondistdeps.py are completely new, therefore we
    don't need to conflict with anything in RHEL7
  Resolves: rhbz#1660578


author: Tomas Orsava <torsava@redhat.com> - 4.14.0-1
changelog:
  - Rebase to rpm 4.14.0 final (http://rpm.org/wiki/Releases/4.14.0)
  - Re-synchronize version/release macros with the rpm Fedora package


author: Tomas Orsava <torsava@redhat.com> - 4.13.0.1-3
changelog:
  - Add patch 9: Generate requires and provides for platform-python(abi)
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 4.13.0.1-2
changelog:
  - Added a license file
  - Added a dependency on rpm for the proper directory structure
  - Properly owning the __pycache__ directory


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add hardlink man page
  - add -h option
  - use _sbindir instead of /usr/sbin directly
  - don't warn because of uninitialized variable
  - spec cleanup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Adam Jackson <ajax@redhat.com> 1.12.6-2
changelog:
  - *-x{c,li}b-Don-t-crash-when-swapping-a-0-sized-glyph.patch: Fix some
    crashes when client and server endian don't match.


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: Behdad Esfahbod <besfahbo@redhat.com> 1.2.2-3
changelog:
  - Remove unnecessary --disable-* arguments to configure, add --enable-*
    for those backends we really want to make sure are enabled.


author: Ray Strode <rstrode@redhat.com> - 1.2.2-2
changelog:
  - add lame libXt-devel BuildReq to get things building again.
  - small spec tweaks to follow conventions


author: Carl Worth <cworth@redhat.com> - 1.1.4-2
changelog:
  - Revert upstream commit that introduced a dependency on a newer
    poppler version for the PDF tests.


author: Carl Worth <cworth@redhat.com> - 1.1.4-1
changelog:
  - Update to new upstream 1.1.4
  - Drop both embedded-bitmaps and XRenderAddGlyphs patches as both now
    have upstream versions


author: Carl Worth <cworth@redhat.com> - 1.1.2-2
changelog:
  - Add suggested patch for XRenderAddGlyphs crash of bug #4705
    https://bugs.freedesktop.org/show_bug.cgi?id=4705


author: Carl Worth <cworth@redhat.com> - 1.1.2-1
changelog:
  - Update to new upstream 1.1.2
  - Port forward the embedded bitmaps patch (now committed upstream to
    1.1.3)
  - Drop build-fix and chunk-glyphs patches which now come from upstream


author: Kristian Høgsberg <krh@redhat.com> - 1.0.0-1
changelog:
  - Update to cairo-1.0.0.
  - Drop cairo-0.9.2-cache-eviction-fix.patch and
    cairo-0.9.2-dont-hash-null-string.patch.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-3
changelog:
  - Add cairo-0.9.2-dont-hash-null-string.patch to avoid crash when
    creating a cairo font from a FT_Face.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Also obsolete libpixman-debuginfo.
  - Add cairo-0.9.2-cache-eviction-fix.patch to fix ft font cache eviction.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Update to cairo 0.9.2.  Add Obsoletes: for libpixman <= 0.1.6.
  - Drop cairo-0.6.0-font-options-to-scaled-font.patch.


author: Kristian Høgsberg <krh@redhat.com> - 0.6.0-2
changelog:
  - Add cairo-0.6.0-font-options-to-scaled-font.patch to make sure font
    cache eviction works correctly (#164664).


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-4
changelog:
  - Add more missing devel package requires (libpng-devel and
    xorg-x11-devel) (#161688)
  - Add Owens patch (cairo-0.5.1-bitmap-fonts.patch) to make bitmap
    fonts work with cairo (#161653).


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-2
changelog:
  - Package gtk docs as part of devel package.
  - Nuke static library.
  - Update devel files so /usr/include/cairo is owned by devel package.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-1
changelog:
  - Update to cairo 0.5.1.
  - Remove gtk-doc files, since --disable-gtk-doc doesn't work.
  - Disable gtk-doc and add freetype and fontconfig BuildRequires.


author: Kristian Høgsberg <krh@redhat.com> - 0.2.0-1
changelog:
  - Incorporate changes suggested by katzj: Require: ldconfig and run it
    in %post and %postun, don't pass CFLAGS to make.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
  - Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.5.2-8
changelog:
  - Install LICENSE with javadoc package
  - Don't own _mavendepmapfragdir
  - Install POM in _mavenpomdir instead of _datadir/maven2/poms
  - Update to current packaging guidelines


author: Jiri Vanek <jvanek@redhat.com> - 2.5.2-6
changelog:
  - Fixed for JDK7 - https://fedoraproject.org/wiki/Java7_Package_Rebuild_Status
  - Added and aplied patch0, easymock2-nameClash.patch.
    This patch is removing (in easymock3 deprecated) methods, and is keeping new 
    easymock3 api in EasyMock.java for capture set of methods.
    Old methods cant be kept as deprecated as JDK7 can not compile them.
    Test was derived from easymock3' one too.


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.97-2
changelog:
  - Ark needs to know about application/x-source-rpm (#885316)
  - Improve subfolder autodetection (kde review 107634)
  - Don't delete the KPart in the MainWindow destructor (kde review 107635)


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to NSPR_4_10_2_RTM
  - Avoid unsigned integer wrapping in PL_ArenaAllocate
  - Resolves: rhbz#1031465 - CVE-2013-5607


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Pavel Šimerda <psimerda@redhat.com> - 3:2.1.15-23
changelog:
  - Resolves: #1232749 - fix bad subject of the welcome email when creating list
    using newlist command


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-18
changelog:
  - fix #1107652 - add support for DMARC
  - fix #1180981 - install tmpfiles.d into /usr/lib instead of /etc
  - fix #1188043 - set 2775 permission for /etc/mailman


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-10
changelog:
  - fix #921421 - fix /var/spool/mailman/ permissions
  - fix #921423 - move mm_cfg.py to /etc/mailman
  - move templates from /usr/lib/mailman to /etc/mailman


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-8
changelog:
  - fix #838580 - check if directories are 0755, there is no need to need
    02775 on all Mailman directories


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-13
changelog:
  - fix #751581 - changed systemd service file to create error log with proper
    permissions, changed logrotate conf to swifth to proper username/group


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-6
changelog:
  - fix #688435 - set proper permissions for private archive
  - fix badly rebased LC_CTYPE patch which caused newlist to fail with traceback


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-5
changelog:
  - fix #679644 - fixed CVE-2011-0707: three XSS flaws due improper
    escaping of the full name of the member


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.13-6
changelog:
  - fix #631881 - CVE-2010-3089: Multiple security flaws leading
    to cross-site scripting (XSS) attacks


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-7
changelog:
  - fix bz#512798 -  Mailman path in /usr/bin/mailman-update-cfg 
    is incorrect on x86_64.
  - added explanation comment in mailman-update-cfg, to justify
    why this script is needed


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-5
changelog:
  - hardcoded library path removed
  - mixed use of spaces and tabs fixed
  - added --libdir to configure
  - fixed URL to tarball
  - permissions of source files changed to 0644
  - got rid of "file listed twice" warnings: listing the files explicitly
  - all this were cleanups for merge review (#226117)


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.11-3
changelog:
  - fix #457388 - don't call "/usr/bin/python" from /etc/cron.d/mailman
  - fix #457389 - cron complains about bad username


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-8
changelog:
  - fix #333011 - withlist crashes with NameError
  - fix #350461 - init script prevents proper SELinux domain transitions
  - fix #303061 - broken multipart mail headers


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-7
changelog:
  - fix #242678 wrong init script
  - fix #247160 INSTALL.REDHAT references non-existent README.POSTFIX file,
    patch by Todd Zullinger
  - fix #132495 jp character encoding is not UTF8, patch by Todd Zullinger
  - update license, add dist to release


author: John Dennis <jdennis@redhat.com> - 3:2.1.6-1.fc4
changelog:
  - initial port of 2.1.6
    remove mailman-2.1.5-moderator-request.patch, present in new release
    remove mailman-2.1-CAN-2005-0202.patch,       present in new release
    remove mailman-2.1-CAN-2004-1177.patch,       present in new release


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-31.fc4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use %{__python} when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in %{_var}/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under %{contentdir}
  - move files from /usr/share to %{_datadir}
  - integrate spot-fixes from mailman lists via gnome.org


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
  - Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
  - Removed tests which fails due to changes openssl 1.0.1h and later


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.50-1
changelog:
  - update to 1.50
    - fixed a problem where t/handle/external/50_external.t would crash if any of
      the test sites were not contactable
    - now builds on VMS, added README.VMS
    - fixed a few compiler warnings in SSLeay.xs; most of them are just
      signed/unsigned pointer mismatches but there is one that actually fixes
      returning what would be an arbitrary value off the stack from
      get_my_thread_id if it happened to be called in a non-threaded build
    - added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type,
      SSL_CTX_set_tlsext_servername_callback for server side Server Name
      Indication (SNI) support
    - fixed a problem with C++ comments preventing builds on AIX and HPUX
    - perdition.org not available for tests, changed to www.open.com.au
    - added SSL_FIPS_mode_set
    - improvements to test suite so it succeeds with and without FIPS mode
      enabled
    - added documentation, warning not to pass UTF-8 data in the content
      argument to post_https


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - update to 1.49
    - fixed problem where on some platforms test t/local/07_tcpecho.t would bail
      out if it could not bind port 1212; it now tries a number of ports to bind
      to until successful
    - improvements to unsigned casting
    - improvements to Net::SSLeay::read to make it easier to use with
      non-blocking IO: it modifies Net::SSLeay::read() to return the result from
      SSL_read() as the second return value, if Net::SSLeay::read() is called in
      list context (its behavior should be unchanged if called in scalar or void
      context)
    - fixed a problem where t/local/kwalitee.t fails with
      Module::CPANTS::Analyse 0.86
    - fixed a number of typos
    - fixed a compiler warning from Compiling with gcc-4.4 and -Wall
    - Fixed problems with get_https4: documentation was wrong, $header_ref was
      not correctly set and $server_cert was not returned
    - fixed a problem that could cause a Perl exception about no blength method
      on undef (CPAN RT#79309)
    - added documentation about how to mitigate various SSL/TLS vulnerabilities
    - SSL_MODE_* are now available as constants
  - drop upstreamed pod encoding patch


author: Paul Howarth <paul@city-fan.org> - 1.48-1
changelog:
  - update to 1.48
    - removed unneeded Debian_CPANTS.txt from MANIFEST
    - fixed incorrect documentation about the best way to call CTX_set_options
    - fixed problem that caused "Undefined subroutine utf8::encode" in
      t/local/33_x509_create_cert.t (on perl 5.6.2)
    - in examples and pod documentation, changed #!/usr/local/bin/perl
      to #!/usr/bin/perl
    - t/local/06_tcpecho.t now tries a number of ports to bind to until
      successful
  - no longer need to fix shellbangs in examples


author: Paul Howarth <paul@city-fan.org> - 1.47-1
changelog:
  - update to 1.47
    - fixed overlong lines and spelling errors in pod
    - fixed extra "garbage" files in 1.46 tarball
    - fixed incorrect fail reports on some 64 bit platforms
    - fix to avoid FAIL reports from cpantesters with missing openssl
    - use my_snprintf from ppport.h to prevent link failures with perl 5.8 and
      earlier when compiled with MSVC


author: Paul Howarth <paul@city-fan.org> - 1.46-1
changelog:
  - update to 1.46 (see Changes file for details)
  - BR: openssl as well as openssl-devel, needed for building
  - no longer need help to find openssl
  - upstream no longer shipping TODO
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - update to 1.45 (see Changes file for full details)
    - added thread safety and dynamic locking, which should complete thread
      safety work, making Net::SSLeay completely thread-safe
    - lots of improved documentation
  - BR: perl(Test::Pod::Coverage)
  - install Net/SSLeay.pod as %doc


author: Paul Howarth <paul@city-fan.org> - 1.42-2
changelog:
  - use DESTDIR rather than PERL_INSTALL_ROOT
  - use %{_fixperms} macro rather than our own chmod incantation
  - BR: perl(AutoLoader), perl(Exporter), perl(Socket)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - update to 1.42
    - fixed incorrect documentation of how to enable CRL checking
    - fixed incorrect letter in Sebastien in Credits
    - changed order of the Changes file to be reverse chronological
    - fixed a compile error when building on Windows with MSVC6
  - drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - update to 1.41
    - fixed incorrect const signatures for 1.0 that were causing warnings; now
      have clean compile with 0.9.8a through 1.0.0
  - BR: perl(Carp)


author: Paul Howarth <paul@city-fan.org> - 1.40-1
changelog:
  - update to 1.40
    - fixed incorrect argument type in call to SSL_set1_param
    - fixed a number of issues with pointer sizes; removed redundant pointer cast
      tests from t/
    - added Perl version requirements to SSLeay.pm


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - update to 1.39
    - downgraded Module::Install to 0.93 since 1.01 was causing problems in the
      Makefile


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - update to 1.38
    - fixed a problem with various symbols that only became available in OpenSSL
      0.9.8 such as X509_VERIFY_PARAM and X509_POLICY_NODE, causing build
      failures with older versions of OpenSSL (CPAN RT#71013)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - update to 1.37
    - added X509_get_fingerprint
    - added support for SSL_CTX_set1_param, SSL_set1_param and selected
      X509_VERIFY_PARAM_* OBJ_* functions
    - fixed the prototype for randomize()
    - fixed an uninitialized value warning in $Net::SSLeay::proxyauth
    - allow net-ssleay to compile if SSLV2 is not present
    - fixed a problem where sslcat (and possibly other functions) expect RSA
      keys and will not load DSA keys for client certificates
    - removed SSL_CTX_v2_new and SSLv2_method() for OpenSSL 1.0 and later
    - added CTX_use_PKCS12_file
  - this release by MIKEM => update source URL


author: Paul Howarth <paul@city-fan.org> - 1.36-6
changelog:
  - BR: perl(Test::Kwalitee) if we're not bootstrapping
  - explicitly BR: pkgconfig
  - use a patch rather than a scripted iconv to fix the character encoding
  - modernize provides filter
  - stop running the tests in verbose mode
  - nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.32-1
changelog:
  - update to 1.32, incorporate new upstream URLs
  - cosmetic spec changes suiting new maintainer's preferences
  - fix argument order for find with -depth
  - remove patch for CVE-2005-0106, fixed upstream in 1.30 (#191351)
    (http://rt.cpan.org/Public/Bug/Display.html?id=19218)
  - remove test patch, no longer needed
  - re-encode Credits as UTF-8
  - include TODO as %doc
  - add buildreqs perl(Array::Compare), perl(MIME::Base64), perl(Sub::Uplevel),
    perl(Test::Exception), perl(Test::NoWarnings), perl(Test::Pod),
    perl(Test::Warn), perl(Tree::DAG_Node)
  - add patch needed to disable testsuite non-interactively
  - run test suite but disable external tests by default; external tests can be
    enabled by using rpmbuild --with externaltests
  - add patch to change hosts connected to in external tests


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
changelog:
  - CVE-2005-0106: patch from Mandriva
    http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
changelog:
  - Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
    enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
  - Bring outdated test14 up to date (bug 1859, test suite still not enabled).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
changelog:
  - Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
    with the rest of the world.


author: Bastien Nocera <bnocera@redhat.com> 0.10.30-3
changelog:
  - Make gstreamer.prov faster by avoiding non-"libgst" files early
    Patch from Dominique Leuenberger <dimstar@opensuse.org>


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-6
changelog:
  - Hopefully fix RPM provides problem when the GStreamer plugin
    requires a library installed by the package itself


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-5
changelog:
  - Update rpm provides script and patch to:
    - filter out errors
    - only run gst-inspect on gstreamer plugins
    - print out protocol handlers provides correctly


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.18-1
changelog:
  - Update to 0.10.18
  - Add patch to gst-inspect to generate RPM provides
  - Add RPM find-provides script


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.7-0.gst.1
  - new release, with 0.10 majorminor
  - removed compprep and complete
  - added plugins docs
  - renamed libgstcorelements, libgstcoreindexers
  - added libgstnet


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.8.10-0.gst.1
  - new release
  - up glib2 to 2.4 because disting on 2.4 builds marshalling code needing 2.4


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.8.4-0.fdr.1
  - update for new GStreamer release
  - unbreak the postun script by not removing the cache dir


author: Christian Schaller <uraeus@gnome.org>
changelog:
  - Remove docs build from RPM as the build is broken
  - Fix stuff since more files are versioned now
  - Remove wingo schedulers
  - Remove putbits stuff


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Updated to work better with default RH8 rpm
  - Added missing unspeced files
  - Removed .a and .la files from buildroot


author: Thomas Vander Stichele <thomas@apestaart.org>
changelog:
  - added release of gstreamer to req of gstreamer-devel
  - changed location of API docs to be in gtk-doc like other gtk-doc stuff
  - reordered SPEC file


author: Thomas Vander Stichele <thomas@apestaart.org>
changelog:
  - put html docs in canonical place, avoiding %doc erasure
  - added devhelp support, current install of it is hackish


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Split of more plugins from the core and put them into their own modules
  - Includes colorspace, xfree and wav
  - Improved package Require lines
  - Added mp3encode (lame based) to the SPEC


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Updated for 0.2.1 release
  - Split out the GUI packages into their own RPM
  - added new plugins (FLAC, festival, quicktime etc.)


author: Christian Schaller <Uraeus@linuxrising.org>
changelog:
  - Visualisation plugins bundled out togheter
  - Moved files sections up close to their respective descriptions


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.5-2
changelog:
  - Added export for MAVEN_LOCAL_REPO and mkdir
  - Added more add_to_maven_depmap to assure backward compatibility
  - Add symlink to short_name.jar


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.5-1
changelog:
  - Rename and rebase of jakarta-commons-lang
  - Re-did whole spec file to use maven, dropped gcj support


author: Bastien Nocera <bnocera@redhat.com> 1.5.0-1
changelog:
  - Disable vala, as it was disabled upstream:
  http://git.gnome.org/browse/libpeas/commit/?id=1031aaeeef282ab2bb65cb6ae48fa4abff453c4d


author: Brian Pepple <bpepple@fedoraproject.org> - 0.5.0-1
changelog:
  - Update to 0.5.0.
  - Drop media manager patch. Fixed upstream.
  - Bump minimum versions of libpurple and tp-glib needed.


author: Brian Pepple <bpepple@fedoraproject.org> - 0.4.0-2
changelog:
  - Add patch to instantiate the media manager only if the protocol support calls.
  - Drop buildroot and clean section. No longer needed.


author: Peter Gordon <peter@thecodergeek.com> - 0.3.3-1
changelog:
  - Update to new upstream release (0.3.3).
  - Remove upstream Yahoo! IM fix:
    - no-yahoo-japan.patch
  - Bump minimum telepathy-glib version.


author: Peter Gordon <peter@thecodergeek.com> - 0.3.1-3
changelog:
  - Add upstream patch to remove the Yahoo! Japan from the manager profile,
    which fixes Yahoo! IM connectivity issues as reported in GNOME bug #591381.
    + no-yahoo-japan.patch
  - Resolves: Fedora bug #514998 (Yahoo! Instant Messenger accounts do not work
    in empathy).


author: Peter Gordon <peter@thecodergeek.com> - 0.2.0-2
changelog:
  - Fix the ICQ Mission Control profile to properly use the "icq" configuration
    UI, rather than the one for jabber.
  - Resolves: bug #456565 (Wrong entry in haze-icq.profile)


author: Peter Gordon <peter@thecodergeek.com> - 0.1.4-2
changelog:
  - Add patch from upstream Darcs to fix bug 425870 (bad apostrophe escaping with
    Yahoo! messages).
    + fix-yahoo-apostrophe-escaping.patch


author: Peter Gordon <peter@thecodergeek.com> - 0.1.4-1
changelog:
  - Update to new upstream build-fix release (0.1.4).
  - Add Yahoo! IM support to the mission-control profiles, with default
    login/server information taken from Pidgin/Finch.


author: Peter Gordon <peter@thecodergeek.com> - 0.1.3-1
changelog:
  - Update to new upstream release (0.1.3), which fixes the accidental
    ~/.purple directory deletion with Pidgin 2.3.0+ (among other notable fixes
    and enhancements).
  - Drop compile fix with recent telepathy-glib releases (fixed upstream):
    - fix-deprecated-tp_debug-call.patch


author: Peter Gordon <peter@thecodergeek.com> - 0.1.2-4
changelog:
  - Add patch to fix build error due to calling deprecated
    tp_debug_set_flags_from_env function.
    + fix-deprecated-tp_debug-call.patch


author: Peter Gordon <peter@thecodergeek.com> - 0.1.2-2
changelog:
  - Add haze-msn.profile (based on the profile provided by the PyMSN-based
    Butterfly connection manager) so that MC-using applications (such as
    Empathy) can use the libpurple-based MSN connection manager instead of
    Butterfly, at the user's option.


author: Peter Gordon <peter@thecodergeek.com> - 0.1.2-1
changelog:
  - Update to new upstream release (0.1.2), which fixes sending messages with
    <, >, and & characters and properly cleans up zombie children.


author: Peter Gordon <peter@thecodergeek.com> - 0.1.1-1
changelog:
  - Update to new upstream release (0.1.1), which fixes segfaults when closing
    text and list channels, and some potential g_free corruptions.
  - Sync %description with upstream release announcements.


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-3.el7
changelog:
  - qemuga-qga-ignore-non-present-cpus-when-handling-qmp_guest_.patch [bz#1611062]
  - qemuga-qemu-guest-agent.spec-add-systemd-devel-dependency.patch [bz#1635571]
  - qemuga-configure-add-test-for-libudev.patch [bz#1635571]
  - qemuga-qga-linux-report-disk-serial-number.patch [bz#1635571]
  - qemuga-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1635571]
  - Resolves: bz#1611062
    ("virsh vcpucount --guest" fails after hotunplug a vcpu with intermediate order by "setvcpu")
  - Resolves: bz#1635571
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-2.el7
changelog:
  - qemuga-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1567041]
  - qemuga-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1567041]
  - Resolves: bz#1567041
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-1.el7
changelog:
  - Rebase to 2.12.0 base [bz#1562218]
  - Resolves: bz#1562218
    (Rebase qemu-guest-agent for RHEL-7.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-2.el7
changelog:
  - qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
  - Resolves: bz#1441999
    (Clean qemu-ga dependencies)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-1.el7
changelog:
  - Rebase to 2.8.0 base [bz#1414676]
  - Resolves: bz#1414676
    (Rebase qemu-guest-agent to 2.8.0 base)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-3.el7
changelog:
  - qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
  - Resolves: bz#1101556
    ([RFE] qemu-ga should have a config file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-2.el7
changelog:
  - qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
  - Resolves: bz#1340346
    (blacklist guest-exec in newer version of qemu-guest-agent)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-3.el7
changelog:
  - qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
  - Resolves: bz#1160930
    (The guest agent service in rhel7 guest will be stopped after run the init command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-2.el7
changelog:
  - synchronized with qemu-kvm-rhev-2.3.0-9.el7
  - qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
  - qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
  - Resolves: bz#1210707
    (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1211973
    ('guest-fstrim' failed for guest with os on spapr-vscsi disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-4.el7
changelog:
  - kvm-Mark-etc-sysconfig-qemu-ga-as-config-noreplace.patch [bz#1150924]
  - Resolves: bz#1150924
    (/etc/sysconfig/qemu-ga is replaced when updated)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-3.el7
changelog:
  - Allow building qemu-guest-agent on ppc64le
  - Synchronize with qemu-kvm-rhev-2.1.0-3.el7
  - Resolves: bz#1132718
    (qemu-guest-agent fails to build for ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-2.el7
changelog:
  - Create separate qemu-guest-agent package based on qemu-kvm-rhev-2.1.0-1.el7 [bz#1117096]
  - Resolves: #bz1117096


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-4
changelog:
  - changed configure portion
  - added Requires:  vala for devel
  - made the file section more precise
  - bugzilla #599097 
  - changed patch to include a default LIB setting


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-2
changelog:
  - some fixes in spec
  - moved *.vapi to devel
  - removed INSTALL from doc
  - added comment to yorba ticket link
  - corrected typo in description


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10.el7_3.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10
changelog:
  - fix binding to IPv6 address (#1298603)
  - enable SASL support (#1263696)
  - don't allow authentication with bad SASL credentials (CVE-2013-7239)


author: Joe Orton <jorton@redhat.com> - 0:1.4.15-1
changelog:
  - update to 1.4.15 (#782395)
  - switch to simple systemd service (#878198)
  - use systemd scriptlet macros (Václav Pavlín, #850204)


author: Paul Lindner <lindner@mirth.inuus.com> - 0:1.4.13-1
changelog:
  - Upgrade to memcached 1.4.13
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1413
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1412
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1411


author: Paul Lindner <lindner@inuus.com> - 0:1.4.7-1
changelog:
  - Upgrade to memcached 1.4.7 (http://code.google.com/p/memcached/wiki/ReleaseNotes147)
  - Fix some rpmlint errors/warnings.


author: Joe Orton <jorton@redhat.com> - 0:1.4.5-2
changelog:
  - LSB compliance fixes for init script
  - don't run the test suite as root
  - ensure a constant timestamp on the sysconfig file


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: root <lindner@inuus.com> - 1.2.3-2
changelog:
  - Upgrade to 1.2.3 upstream
  - Adjust make install to preserve man page timestamp
  - Conform with LSB init scripts standards, add force-reload


author: Paul Lindner <lindner@inuus.com> - 1.2.2-3
changelog:
  - Enable build-time regression tests
  - add dependency on initscripts
  - remove memcached-debug (not needed in dist)
  - above suggestions from Bernard Johnson


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Kyle McMartin <kyle@fedoraproject.org> 1.0.9-3
changelog:
  - Remove artificial kernel-drm-nouveau Requires, which dates from when
    nouveau.ko was out of tree.


author: Ernestas Kulik <ekulik@redhat.com> - 1.0-3
changelog:
  - Drop recordmydesktop sub-package (rhbz#1647170)
  - Load version 3.0 of Gtk namespace, silence a PyGObject warning (rhbz#1647170)


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-2
changelog:
  - Review fixes (#999153)
  - Drop ldconfig calls that are unnecessary now that the shared library is gone
  - Drop the build dep on gobject-introspection-devel
  - Include API-Documentation.txt in the -server subpackage


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-1
changelog:
  - Update to 1.99.2
  - The shared library is gone in this release and all users should use the
    dbus service directly


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Nicolas Chauvet <kwizart@gmail.com> - 1:0.2.999-18.20170607git80d9a87
changelog:
  - Update snapshot to 20170607
  - Default to asm and tls when available
  - Use the fixed tsd for armhfp and aarch64
    fixed in https://github.com/NVIDIA/libglvnd/issues/116


author: Simone Caronni <negativo17@gmail.com> - 1:0.2.999-12.20170308git8e6e102
changelog:
  - Update to latest snapshot, remove upstreamed patches.
  - Update release to packaging guidelines format.
  - Make sure that for Fedora 24 and RHEL the libraries are always private.


author: Hans de Goede <hdegoede@redhat.com> - 1:0.2.999-10.gitdc16f8c
changelog:
  - Drop 0007-GLX-Add-GLX_SGIX_fbconfig-functions.patch the bug this works
    around actually is in mesa


author: Hans de Goede <hdegoede@redhat.com> - 1:0.2.999-8.gitdc16f8c
changelog:
  - Fix GLX_SGIX_fbconfig extension, this fixes games such as "The Binding of
    Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam not working


author: Hans de Goede <hdegoede@redhat.com> - 1:0.2.999-7.gitdc16f8c
changelog:
  - Epoch:1 to provide upgrade path from negativo17.org rpms
  - New snapshot
  - Add patches to fix building on ARM (from Rob Clark)
  - Add BuildRequires: python
  - Add ldconfig scriptlets for library sub-packages


author: Adam Jackson <ajax@redhat.com>
changelog:
  - Don't hide libraries in a subdir (rhbz#1413579)
  - Split up libraries to appropriate subpackages
  - Make the req/prov filter catch more cases
  - Restore libGLESv1 for ABI compliance


author: Adam Jackson <ajax@redhat.com> - 0.2.999-3.git14f6283
changelog:
  - Restore hardened build
  - Remove ExclusiveArch
  - Remove some pointless Provides/Obsoletes
  - BuildRequires pkgconfig(xext) not pkgconfig(xv)
  - Update description to be a bit more confident
  - Dump make check errors into the build log


author: Nicolas Chauvet <kwizart@gmail.com> - 0.1.0-2.git509de0d
changelog:
  - Update to current snapshot
  - Remove unused dt-auxiliary
  - Add support for graphical make test
  - Undefine hardened build for xorg


author: Nicolas Chauvet <kwizart@gmail.com> - 0.0.0-8git20160217
changelog:
  - Update to git20160217
  - Introduce --with mesa-libglvnd-default build conditional
  - Avoid error on make check - testglxqueryversion.sh stil fails in mock
  - Filter on provided libGL until glvnd support is in upstream mesa
  - Use upstream tarball and use autoreconf


author: Nicolas Chauvet <kwizart@gmail.com> - 0.0.0-7git20160115
changelog:
  - Bump for 20160115
  - Enable make check
  - Description improvements
  - Enable libglvnd by default
  - Enable devel sub-package


author: Miroslav Lichvar <mlichvar@redhat.com> 0.6.9-2
changelog:
  - use correct group when dropping group privileges (#221107)
  - open also files without .info suffix
  - make scriptlets safer
  - make sure readline support isn't compiled in


author: Mike A. Harris <mharris@redhat.com> 0.6.8-11
changelog:
  - Work around an idiotic bug in rpm (#118780) by using multiple Requires
    lines instead of the Requires(foo,bar) syntax that rpm documentation
    states is valid.  This fixes reported pinfo kickstart issue (#155700)


author: Mike A. Harris <mharris@redhat.com> 0.6.8-9
changelog:
  - Replaced pinfo-0.6.0-mkstemp.patch with updated pinfo-0.6.8-mkstemp.patch
    to fix an additional insecure tempnam() usage detected by our buildsystem


author: Mike A. Harris <mharris@redhat.com> 0.6.8-8
changelog:
  - Added pinfo-0.6.8.memcorruption.patch and pinfo-0.6.8.memleak.patch by
    Sami Farin to fix a couple pinfo bugs reported in (#138770)


author: Mike A. Harris <mharris@redhat.com> 0.6.4-9
changelog:
  - Now how ironic is *this* one?...  The info documentation on pinfo has been
    missing from our packages.  Mass rebuild tests caught this.  Fixed now.
  - Added post/preun scripts for updating info dir db with install-info


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.02-0.80.0.2
changelog:
  - Enable common subpackage build for aarch64
  - Disable RHEL patch 0183-efinet-retransmit-if-our-device-is-busy.patch to comply with UEFI spec
  - increase timeout to 10ms in efinet.c, [Orabug: 27982684]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.02-0.81.0.1
changelog:
  - Update upstream references [Orabug: 30138841]
  - build with the updated Oracle certificate
  - Restore symlink to grub environment file, that was removed during grub2-efi update
    if grub2 package is also installed on UEFI machines [Orabug: 27345750]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Pack files in efidir with disabled rpm verification [Orabug: 27166026]
  - Fix comparison in patch for [Orabug: 18504756]
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev)
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]
  - changed efidir with 0700 access rights, redhat chose another approach in rhbz#1496952, [Orabug: 28622344]
  - revert orabug [Orabug: 27166026] changes


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79
changelog:
  - Ignore the modification time when doing RPM verification of /boot/efi files
    Resolves: rhbz#1496952


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78
changelog:
  - Prevent errors from diskfilter scan of removable drives
    Resolves: rhbz#1446418
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1497918
  - Remove glibc32 and glibc-static(x86-32) BuildRequires
    Resolves: rhbz#1614259


author: Peter Jones <pjones@redhat.com> - 2.02-0.74
changelog:
  - Fix symlink issues with grubenv
    Resolves: rhbz#1602773
    Related: rhbz#1497918
  - Make the common subpackage only build on x86_64 to avoid timestamp
    mismatches.
    Related: rhbz#1602773
    Related: rhbz#1497918


author: Peter Jones <pjones@redhat.com> - 2.02-0.71
changelog:
  - The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
    so one more build to avoid the regression.
    Related: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 2.02-0.68
changelog:
  - More work on /boot/efi/... permissions
    Resolves: rhbz#1496952
  - Rework grubenv symlinks and handle them on upgrades
    Resolves: rhbz#1497918
  - Make grub2-setpassword -o work
    Resolves: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 2.02-0.67
changelog:
  - Make the permissions on /boot/efi/... match the filesystem's requirements.
    Resolves: rhbz#1496952


author: Peter Jones <pjones@redhat.com> - 2.02-0.66
changelog:
  - Fix EFI UGA driver when the framebuffer is above 4G
    Resolves: rhbz#1457988
  - Handle XFS filesystems with sparse inodes
    Resolves: rhbz#1402716
  - Support HTTP booting
    Resolves: rhbz#1490981


author: Peter Jones <pjones@redhat.com> - 2.02-0.65.1
changelog:
  - More precise requires and obsoletes on the -tools* subpackages to avoid
    issues with mixing and matching repos the subpackages are split between.


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.58
changelog:
  - Add Aarch64 FDT #address-cells and #size-cells support
    Resolves: rhbz#1436745
  - Fix ppc64 "grub2.chrp" to be "grub.chrp"
    Resolves: rhbz#1442970


author: Peter Jones <pjones@redhat.com> - 2.02-0.57
changelog:
  - Make "grub2" require the grub2-efi-... package on arches where there's no
    legacy build.
    Related: rhbz#1440787


author: Peter Jones <pjones@redhat.com> - 2.02-0.54
changelog:
  - Make grub2-pc, grub2-ppc64le, etc, also have an Obsoletes for the old grub2
    packages.  Hoping this will solve Jira RCM-14929.
    Related: rhbz#1437450


author: Peter Jones <pjones@redhat.com> - 2.02-0.53
changelog:
  - Don't manually put an arch in a requires.
    The automatically generated provides won't have it, and all of the
    tools display the packages as if it were there, so you can't ever see
    that they never match up. Meanwhile the auto generator *will* add
    $name($arch)=$evr provides, which aren't quite the same.  We probably
    don't need it anyway.  Maybe.
    Resolves: rhbz#1437450


author: Peter Jones <pjones@redhat.com> - 2.02-0.52
changelog:
  - Fix our debuginfo filter to not accidentally discard the stripped versions of
    userland binaries.
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.51
changelog:
  - Also be sure to pull in grub2-tools-extras for now, to make upgrades work.
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.50
changelog:
  - Fix where the grub2-ofpathname man page lands
    Related: rhbz#1310763
  - Fix stripping of userland binaries
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.49
changelog:
  - Include unicode.pf2 in the grub-efi-ARCH-cdboot images
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.48
changelog:
  - grub2-efi-* don't actually need to require grub2-tools-efi (i.e. the mac
    tools), anaconda and lorax can know how to do that.
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.45
changelog:
  - Rework package to make multi-arch EFI easier.
    Resolves: rhbz#1310763
    Related: rhbz#1411748
  - Honor IO alignment on EFI systems
    Resolves: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: Peter Jones <pjones@redhat.com> - 2.02-0.36
changelog:
  - Better support for EFI network booting with dhcpv6.
    Resolves: rhbz#1154226
  - Back out a duplicate change resulting in some EFI network firmware drivers
    not working properly.
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765


author: Peter Jones <pjones@redhat.com> - 2.02-0.35
changelog:
  - Don't use legacy methods to make device node variables.
    Resolves: rhbz#1279599
  - Don't pad initramfs with zeros
    Resolves: rhbz#1219864


author: rmarshall@redhat.com 2.02-0.34
changelog:
  - Exit grub-mkconfig with a proper code when the new configuration would be
    invalid.
    Resolves: rhbz#1252311
  - Warn users if grub-mkconfig needs to be run to add support for GRUB
    passwords.
    Resolves: rhbz#1290803
  - Fix the information in the --help and man pages for grub-setpassword
    Resolves: rhbz#1290799
  - Fix issue where shell substitution expected non-translated output when
    setting a bootloader password.
    Resolves: rhbz#1294243
  - Fix an issue causing memory regions with unknown types to be marked available
    through a series of backports from upstream.
    Resolves: rhbz#1288608


author: Peter Jones <pjones@redhat.com> - 2.02-0.30
changelog:
  - Fix security issue when reading username and password
    Resolves: CVE-2015-8370
  - Do a better job of handling GRUB_PASSWORD
    Resolves: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.27
changelog:
  - Remove multiboot and multiboot2 modules from the .efi builds; they
    should never have been there.
    Resolves: CVE-2015-5281


author: Peter Jones <pjones@redhat.com> - 2.02-0.26
changelog:
  - Be more aggressive about trying to make sure we use the configured SNP
    device in UEFI.
    Resolves: rhbz#1257475


author: Peter Jones <pjones@redhat.com> - 2.02-0.19
changelog:
  - Rebuild for Aarch64
  - Deal with some coverity nits.
    Related: rhbz#1215839
    Related: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Handle ipv6 better
    Resolves: rhbz#1154226
  - On UEFI, use SIMPLE_NETWORK_PROTOCOL when we can.
    Resolves: rhbz#1233378
  - Handle rssd disk drives in grub2 utilities.
    Resolves: rhbz#1087962
  - Handle xfs CRC disk format.
    Resolves: rhbz#1001279
  - Calibrate TCS using the EFI Stall service
    Resolves: rhbz#1150698
  - Fix built-in gpg verification when using TFTP
    Resolves: rhbz#1167977
  - Generate better stanza titles so grubby can find them easier.
    Resolves: rhbz#1177003
  - Don't strip the fw_path variable twice when we're using EFI networking.
    Resolves: rhbz#1211101


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Document network boot paths better
    Resolves: rhbz#1148650
  - Use an rpm-based version sorted in grub2-mkconfig
    Resolves: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.11
changelog:
  - Fix grub2 segfault when root isn't set.
    Resolves: rhbz#1084536
  - Make the aarch64 loader be SB-aware.
    Related: rhbz#1100048
  - Enable regexp module
    Resolves: rhbz#1125916


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Make editenv utilities (grub2-editenv, grub2-set-default, etc.) from
    non-UEFI builds work with UEFI builds as well, since they're shared
    from grub2-tools.
    Resolves: rhbz#1119943
  - Make more grub2-mkconfig generate menu entries with the OS name and version
    included.
    Resolves: rhbz#996794
  - Minimize the sort ordering for .debug and -rescue- kernels.
    Resolves: rhbz#1065360
  - Add GRUB_DISABLE_UUID to disable filesystem searching by UUID.
    Resolves: rhbz#1027833
  - Allow "fallback" to specify titles like the documentation says
    Resolves: rhbz#1026084


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.5
changelog:
  - Add man pages for common grub utilities.
    Resolves: rhbz#948847
  - Fix shift key behavior on UEFI.
    Resolves: rhbz#1068215


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.3
changelog:
  - Don't emit "Booting <foo>" message.
    Resolves: rhbz#1023142
  - Don't require a password for booting, only for editing entries.
    Resolves: rhbz#1030176
  - Several network fixes from IBM
    Resolves: rhbz#1056324
  - Support NVMe device names
    Resolves: rhbz#1019660
  - Make control keys work on UEFI systems.
    Resolves: rhbz#1056035


author: Peter Jones <pjones@redhat.com> - 2.00-22.3
changelog:
  - Use linux16 when appropriate:
    Resolves: rhbz#880840
  - Enable pager by default:
    Resolves: rhbz#985860
  - Don't ask the user to hit keys that won't work.
    Resolves: rhbz#987443
  - Sign grub2 during builds
    Resolves: rhbz#1017855


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Peter Jones <pjones@redhat.com> - 9-6
changelog:
  - Rebuild to make some dependencies versioned, in order to make TPS's really
    broken builder setup work.
    Related: rhbz#1380825


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-12
changelog:
  - Fix a directory traversal bug
  - unzip-mem should now strip all "../" prefixes from the archived files
  - Resolves: CVE-2018-17828


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-11
changelog:
  - Fix CVE-2018-6541
  - Part of the original patch has already been applied in the past (CVE-2018-7726),
    so the bug should not be reproducible in a way described in the github 
    issue, even without this commit. Applying the rest of the original patch anyway.
  - https://github.com/gdraheim/zziplib/issues/16
  - Related: CVE-2018-6541


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: Matthias Saou <http://freshrpms.net/> 0.13.59-1
changelog:
  - Update to 0.13.59.
  - Remove no longer needed 'open' patch.
  - Rebase the multilib patch, still required.
  - Re-enable _smp_mflags, build works again with it apparently.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-4
changelog:
  - Include patch to fix fd.open calls with recent glibc.
  - Disable _smp_mflags since the docs fail to build.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-2
changelog:
  - Disable static lib build instead of excluding it later.
  - Remove rpath on 64bit archs.
  - Switch to using DESTDIR install method.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-1
changelog:
  - Update to 0.13.49 to fix CVE-2007-1614 (rhbz #233700).
  - Include new man3 pages to the devel sub-package.


author: Matthias Saou <http://freshrpms.net/> 0.13.45-3
changelog:
  - Split off -utils sub-package (#199467). Could have been plain "zzip"?
  - Have sub-packages require exact release too.
  - Build require automake to make the aclocal-1.9 check happy.
  - Use --enable-frame-pointer otherwise -g gets removed from the CFLAGS.


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Peter Hatina <phatina@redhat.com> - 0.9-21
changelog:
  - CWD is by default appended in search path
  - introduced CLI option --cwd-first-in-path which prepends
    CWD in search path
  - Related: #1072252


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Jindrich Novy <jnovy@redhat.com> 10.47.12-3
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)
  - fix documentation for pamperspective and pbmtoepson


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-3
changelog:
  - package docs in separate netpbm-doc package (#492437)
  - don't package patch backups in documentation
  - netpbm-progs package requires ghostscript


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-2
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-3
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - link against -lz (#564649)


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-1
changelog:
  - update to 10.47.09, fixes occassional crash in pamtosvg
  - fix documentation
  - fix ppmfade exit status


author: Jindrich Novy <jnovy@redhat.com> 10.47.06-1
changelog:
  - update to 10.47.06 - fixes the dumb pamtosvg mistake in 10.47.05
  - pnmmargin won't create leftovers in /tmp (#547888)


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.35.62-1
changelog:
  - update to 10.35.62
  - upstream fixes pamstereogram
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise
    so that they match their man pages (#483011, #483070, #483243, #483245)
  - avoid clashes with getline() from glibc


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-2
changelog:
  - remove two hunks from security patch breaking pbmclean and pbmlife (#493015)
  - fix ppmdfont and svgtopnm, thanks to Jiri Moskovcak


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-1
changelog:
  - update to 10.35.61
  - upstream fixes array bound violation in pbmtog3
  - drop .pbmtog3segfault patch, we fixed this some time ago already
    and it is in upstream now
  - use saner exit status in ppmfade


author: Jindrich Novy <jnovy@redhat.com> 10.35.60-1
changelog:
  - update to 10.35.60
  - update .security patch, minor cleanup
  - fixes xwdtopnm for at least some direct color 24/32 images
  - fixes memory leak and out of memory crash in libpammap


author: Jindrich Novy <jnovy@redhat.com> 10.35.59-1
changelog:
  - update to 10.35.59
  - fixes array bound violation in ilbmtoppm
  - fixes garbage output when input in fitstopnm is little endian
    floating point FITS


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-4
changelog:
  - fix segfault in ximtoppm (#482891), the utility lacked the
    command line parsing initialization code


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-3
changelog:
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-1
changelog:
  - update to 10.35.38
  - fixes crashes in picttoppm, pbmtomrf, mrftopbm
  - fixes bugs in leaftoppm, ilbmtoppm


author: Jindrich Novy <jnovy@redhat.com> 10.35.57-3
changelog:
  - unbreak ppmshadow and ppmrainbow (#476989)
  - pnmmontage won't crash because of uninitialized memory usage


author: Jindrich Novy <jnovy@rehdat.com> 10.35.54-1
changelog:
  - update to 10.35.54
  - adds better randomization for ppmforge, pgmnoise, pgmcrater
  - fixes array bounds violation in pnm_createBlackTuple() with PBM, PGM
  - fixes crash in pnmtoddif with any PGM input


author: Jindrich Novy <jnovy@redhat.com> 10.35.51-1
changelog:
  - update to netpbm-10.35.51
  - make it actually compilable by removing duplicated function
    in pamcomp.c


author: Jindrich Novy <jnovy@rehdat.com> 10.35.49-1
changelog:
  - update to 10.35.49
  - fixes crash in pamcut when cutting a region entirely to the
    left or right of the input image, with -pad


author: Jindrich Novy <jnovy@redhat.com> 10.35.48-1
changelog:
  - update to 10.35.48
  - fixes buffer overrun in pamperspective and pngtopnm output format
  - update .security2 patch so that it applies with fuzz==0


author: Jindrich Novy <jnovy@redhat.com> 10.35.32-1
changelog:
  - remove .svn directories from tarball to reduce its size
  - update fixes rhbz#337181 and likely others


author: Jindrich Novy <jnovy@redhat.com> 10.35-8
changelog:
  - remove bogus man pages (#220112, #220113)
  - overflow2() no more conflicts with libgd.so (#216116)
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-6
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1723008 - ECC Key recovery failure with
    CKR_TEMPLATE_INCONSISTENT (cfu)
  - Bugzilla Bug #1774282 - pki-server-nuxwdog template has pid file name with
    non-breakable space char encoded instead of 0x20 space char (ascheel)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-5
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client
    (cfu)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-3
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1445479 - KRATool does not support netkeyKeyRecovery
    attribute (dmoluguw)
  - Bugzilla Bug #1534013 - Attempting to add new keys using a PUT KEY APDU
    to a token that is loaded only with the default/factory keys (Key Version
    Number 0xFF) returns an APDU with error code 0x6A88. (jmagne)
  - Bugzilla Bug #1709585 - PKI (test support) for PKCS#11 standard
    AES KeyWrap for HSM support (cfu, ftweedal)
  - Bugzilla Bug #1748766 - number range depletion when multiple clones
    created from same master (ftweedal)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1520258 - TPS token search fails to find entries , LDAP filter
    - # Bugzilla Bug #1535671 - RFE to have the users be able to use the


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-2
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS
    client (cfu)
  - Bugzilla Bug #1597727 - CA - Unable to change a certificate’s revocation
    reason from superceded to key_compromised (rhcs-maint)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1470410 - TPS doesn't update revocation status when
    - # Bugzilla Bug #1470433 - Add supported transitions to TPS (rhcs-maint)
  - # Bugzilla Bug #1585722 - TMS - PKISocketFactory – Modify Logging to Allow
    - # Bugzilla Bug #1642577 - TPS – Revoked Encryption Certificates Marked as


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-1
changelog:
  - Updated jss, nuxwdog, and tomcatjss dependencies
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1718418 - Update RHCS version of CA, KRA, OCSP, and TKS so
    - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-3
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1638379 - PKI startup initialization process should not
    depend on LDAP operational attributes [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-2
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
    Certificate Request [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-1
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-13
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] [manpage] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-12
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-10
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
    configuration [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
    - # Added Batch Update Information to Product Version (mharmsen)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-9
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
    if enableOCSP is true [rhel-7.6.z] (jmagne)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-8
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
    (dmoluguw)
  - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
    log and audit log using REST [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1645429 - pkispawn fails due to name collision with
    /var/log/pki/<instance> [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
    keyID needs to be captured in file [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1656297 - Unable to install with admin-generated keys
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-7
changelog:
  - Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
    TLS client [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
    removed from the default ciphers list [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
    enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
    overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
  - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
    [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
    [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
    a password [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
    pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
  - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
    there is no space on the disk to write logs [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-6
changelog:
  - Updated nuxwdog dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #673182 - ECC keys not supported for signing
    audit logs (cfu)
  - Bugzilla Bug #1593805 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
  - Bugzilla Bug #1601071 - Certificate generation happens with
    partial attributes in CMCRequest file (cfu)
  - Bugzilla Bug #1601569 - CC: Enable all config audit events
    (cfu)
  - Bugzilla Bug #1608375 - CMC Revocations throws exception
    with same reqIssuer & certissuer (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-5
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
    with latest version (abokovoy)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-4
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1548203 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1494591 - keyGen fails when only Identity


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-2
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
    by CSR encoding (cfu)
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
    certificate (ftweedal)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
  - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
  - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
  - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
    authenticated through SharedToken (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-1
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd
    entry in a certifcate (ftweedal)
  - Bugzilla Bug #1544843 - ExternalCA: Installation failed during
    csr generation with ecc (rrelyea, gkapoor)
  - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
    upstream 10.5.x (RHEL) (mharmsen)
  - Bugzilla Bug #1580394 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC (cfu)
  - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access (ftweedal, cfu)
  - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1588655 - Cert validation for installation with
    external CA cert (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-13
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd
    entry in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1585945 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1587826 - ExternalCA: Installation failed during
    csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
  - Bugzilla Bug #1588944 - Cert validation for installation with
    external CA cert [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access [rhel-7.5.z] (ftweedal, cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-12
changelog:
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
    CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1572548 - IPA install with external-CA is failing when
    FIPS mode enabled. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue
    with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
    improvement [rhel-7.5.z] (jmagne)
  - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
    pkispawn configuration step [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
    input class_id [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
    9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-11
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1550581 - CMCAuth throws
    org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
    temporary database [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
    and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
    [rhel-7.5.z] (cheimes, mharmsen)
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
    in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
    by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
    StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1558919 - Not able to generate certificate request
    with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
  - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
    and FIPS (edewata)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-8
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1542210 - pki console configurations that involves ldap
    passwords leave the plain text password in debug logs (jmagne)
  - Bugzilla Bug #1543242 - Regression in lightweight CA key replication
    (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
    audit event logging at startup (jmagne)
  - Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
    (alee)
  - Bugzilla Bug #1525306 - CC: missing CMC request and response record
    (cfu)
  - Bugzilla Bug #1532933 - Installing subsystems with external CMC
    certificates in HSM environment shows import error (edewata)
  - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
    (edewata)
  - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
    permitted in fips mode (mharmsen)
  - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
    outcomes. (edewata)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
    revRequest.issuer (cfu)
  - Bugzilla Bug #1541853 - ProfileService: config values with
    backslashes have backslashes removed (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
    - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-6
changelog:
  - Updated jss, nuxwdog, and openssl dependencies
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
    few cases (ftweedal)
  - Bugzilla Bug #1428021 - CC: shared token storage and retrieval
    mechanism (cfu)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
    would cause error (cfu)
  - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
     (alee)
  - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
    pkispawn (alee)
  - Bugzilla Bug #1520526 - p12 admin certificate is missing when
    certificate is signed Externally (edewata)
  - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
     instance (alee)
  - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
    missing nextupdate field (ftweedal)
  - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
  - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
    in several different files after installation completes (alee)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
    (jmagne)
  - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
    setup with CMC signed certificates (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-14
changelog:
  - #Require "jss >= 4.4.0-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
  - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
    - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
    - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
    - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
    - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
    - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
    - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
  - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
    - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-13
changelog:
  - Resolves: rhbz #1463350
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1463350 - Access banner validation (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-12
changelog:
  - # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
        - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
      - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
      - # Bugzilla Bug #1463350 - Access banner validation (edewata)
    - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
        - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
    - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
      - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
      - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
      - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-11
changelog:
  - # Resolves: rhbz #1469432
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1469432 - CMC plugin default change
  - # Resolves CVE-2017-7537
  - # Fixes BZ #1470948


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1458043 - Key recovery on token fails with
    invalid public key error on KRA (alee)
  - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
    deleting the any of the subsystem certs from it (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
     revocation non-signing cert requests (cfu)
  - Bugzilla Bug #1458047 - change the way aes clients refer to
    aes keysets (alee)
  - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
    (alee)
  - Bugzilla Bug #1460028 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-8
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (edewata)
  - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
    ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - Bugzilla Bug #1454450 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
    is asking for password when already provided (edewata)
  - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
  - Bugzilla Bug #1458043 - Key recovery using externalReg fails
    with java null pointer exception on KRA (alee)
  - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
    (edewata)
  - Bugzilla Bug #1458429 - client-cert-import --ca-cert should
    import CA cert with trust bits "CT,C,C" (edewata)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1445519 - CA Server installation with HSM fails
    (jmagne)
  - Bugzilla Bug #1452617 - Unable to create IPA Sub CA
    (ftweedal)
  - Bugzilla Bug #1454471 - Enabling all subsystems on startup
    (edewata)
  - Bugzilla Bug #1455617 - Key recovery on token fails because
    key record is not marked encrypted (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
    CMC with identity proof (cfu)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (mharmsen)
  - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
    defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
  - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
  - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
  - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
  - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
    audit event. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
    HSM is used. (alee)
  - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
  - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
    the KRA (ftweedal)
  - Bugzilla Bug #1448204 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
    thales hsm (alee)
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-3
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
    startTime parameter is not working as expected. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
  - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
  - Bugzilla Bug #1445088 - profile modification cannot remove existing config
    parameters (ftweedal)
  - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHEL) (alee)
  - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
    pki CLI terminates SSL connection (edewata)
  - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHCS) (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-2
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1282504 - Installing pki-server in container reports
    scriptlet failed, exit status 1 (jpazdziora)
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHEL) (jmagne)
  - Bugzilla Bug #1437591 - cli authentication using expired cert throws an
    exception (edewata)
  - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
    request (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHCS) (jmagne)
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
  - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
    implementation (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-1
changelog:
  - Require "nss >= 3.28.3" as a build and runtime requirement
  - Require "jss >= 4.4.0-4" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement
  - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
    failure (edewata)
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
    implementation (cfu)
  - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
    cert requests (cfu)
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
    protection cert mechanism (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.0-1
changelog:
  - Require "jss >= 4.4.0-1" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate
    when --usages verify (vakwetu)
  - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does
    not show proper error message (vakwetu)
  - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN
    (ftweedal)
  - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1325071 - add options to enable/disable cert or crl
    publishing. (vakwetu)
  - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata)
  - Bugzilla Bug #1372052 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1375347 - Typo in comment line of
    UserPwdDirAuthentication.java (edewata)
  - Bugzilla Bug #1376226 - IPA replica-prepare failed with error
    "Profile caIPAserviceCert Not Found" (ftweedal)
  - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata)
  - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen)
  - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHEL 7) (edewata)
  - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA
    (vakwetu)
  - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata)
  - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL)
    (jmagne)
  - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate
    (vakwetu)
  - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website
    incorrect (vakwetu)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne)
  - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata)
  - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata)
  - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6
    environment. (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu)
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)
  - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHCS 9) (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (RHCS) (jmagne)
  - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata)
  - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS)
    (jmagne)
  - ############################################################################


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-18
changelog:
  - ## RHEL 7.3.z Batch Update 4
  - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN
    (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-17
changelog:
  - ## RHCS 9.1.z Batch Update 3
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - ## RHEL 7.3.z Batch Update 3
  - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1417064 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website
    incorrect (alee)
  - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6
    environment. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-16
changelog:
  - Separate original patches into RHEL and RHCS portions
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1404900 - RHCS logging properties (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-15
changelog:
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1404175 -  pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-base] (edewata)
  - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-tps] (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 -  TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-14
changelog:
  - Marked the following RHCS 9.1.z bug:
    Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
    as a duplicate of RHEL 7.3.z bug:
    Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-13
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    (added KRA key recovery via CLI in FIPS mode)
  - ## RHCS 9.1.z Batch Update 1
  - Reverted patches associated with
    Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-12
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does
    not show proper error message (alee)
  - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java
    (edewata)
  - ## RHCS 9.1.z Batch Update 1
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu)
  - Bugzilla Bug #1274096 -  [BUG] Add ability to disallow TPS to enroll a
    single user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-11
changelog:
  - PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a
    dependency package (mharmsen)
  - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar
    files (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-10
changelog:
  - Revert Patch:  PKI TRAC Ticket #2449 - Unable to create system certificates
    in different tokens (edewata)
  - Resolves:  rhbz #1374054 - ipa-replica-install fails setting up certificate
  - Restores:  rhbz #1319557 - pkispawn KRA instance is failing server
  - Removes from Errata:  rhbz #1372041 - Unable to create system certificates
    in different tokens


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-9
changelog:
  - PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion
    (ftweedal)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata)
  - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry
    deleted (ftweedal)
  - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if
    USN plugin enabled (ftweedal)
  - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per
    instance name (for shared HSM) (cfu)
  - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu)
  - PKI TRAC Ticket #2449 - Unable to create system certificates in different
    tokens (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-8
changelog:
  - PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne)
  - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor)
  - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open
  - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-7
changelog:
  - PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen)
    - CMCEnroll
  - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message
    "PKIException: LDAP error (21): error result" (edewata)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (cheimes, edewata, mharmsen)
  - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata, mharmsen)
  - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem
    format with/without header works while pkcs7 with header is not allowed
    (edewata)
  - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-5
changelog:
  - PKI TRAC Ticket #978  - TPS connector man page: add revocation routing
    info (cfu)
  - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from
    Firefox' workarounds to appropriate 'pki' man page (jmagne)
  - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu)
  - PKI TRAC Ticket #2381 - Throws exception while providing invalid module.
    (edewata)
  - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable
    should accept only boolean value (edewata)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements
    (akasurde, alee, cheimes, edewata, jmagne, mharmsen)
  - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not
    rpm-require hostname (mharmsen)
  - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and
    pki-server (cheimes)
  - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata)
  - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne)
  - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not
    apply the specified trust bits (alee)
  - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen
    during installation (alee)
  - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are
    not used (ftweedal)
  - PKI TRAC Ticket #2421 - Incorrect SELinux contexts
    Installation/Configuration (edewata)
  - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server
    is converted from CA-less to CA-full (edewata)
  - PKI TRAC Ticket #2428 - broken request links for CA's system certs in
    agent request viewing (cfu)
  - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial
    number in migration case (jmagne)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (mharmsen)
  - PKI TRAC Ticket #2433 - Lightweight CA GET <id>/chain returns bogus PEM
    data (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-3
changelog:
  - PKI TRAC Ticket #691  - [MAN] pki-server man pages (mharmsen)
  - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with
    key-generate when --usages verify is passed (jmagne)
  - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS
    (cfu)
  - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key
    generation for non-encryption token keys (cfu)
  - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to
    'pki_default.cfg' & 'pkispawn' man pages (mharmsen)
  - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for
    shared vs non shared tomcat instance installation (mharmsen)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws
    IOError (edewata, ftweedal)
  - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core
    update on upgraded system (ftweedal)
  - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing
    it to "internal" (mharmsen)
  - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared
    secret from remote TKS (jmagne)
  - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws
    attribute error (ftweedal)
  - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with
    --help option (edewata)
  - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust
    flags (edewata)
  - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while
    specifying invalid parameters. (edewata)
  - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password
    during silent installation (edewata)
  - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg
    (ftweedal)
  - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given
    (ftweedal)
  - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance
    fails (ftweedal)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements
    (akasurde, edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.0.a1-2
changelog:
  - PKI TRAC Ticket #1625 - Allow multiple ACLs of same name
    (union of rules) [ftweedal]
  - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap
    unconditionally [edewata]
  - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert
    request. [edewata]
  - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA
    certificates. [edewata]
  - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata]
  - PKI TRAC Ticket #1808 - Fixed illegal token state transition
    via TEMP_LOST. [edewata]


author: Dogtag Team <pki-devel@redhat.com> 10.2.7-0.3
changelog:
  - Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on
    tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools
  - Updated dep on tomcatjss [Fedora 23 and later]


author: Dogtag Team <pki-devel@redhat.com> 10.2.2-0.1
changelog:
  - Updated version number to 10.2.2-0.1
  - Moved web application deployment locations.
  - Updated Resteasy and Jackson dependencies.
  - Added missing python-lxml build dependency.


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.1-0.4
changelog:
  - PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2
  - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency.
  - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime
    dependencies


author: Christina Fu <cfu@redhat.com> 10.2.1-0.2
changelog:
  - Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by
    default and upgrade (cfu)
  - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen)
  - up the release number to 0.2


author: Dogtag Team <pki-devel@redhat.com> 10.2.1-0.1
changelog:
  - Updated version number to 10.2.1-0.1.
  - Added CLIs to simplify generating user certificates
  - Added enhancements to KRA Python API
  - Added a man page for pki ca-profile commands.
  - Added python api docs


author: Ade Lee <alee@redhat.com> 10.2.0-3
changelog:
  - Disable pylint dependency for RHEL builds
  - Added jakarta-commons-httpclient requirements
  - Added tomcat version for RHEL build
  - Added resteasy-base-client for RHEL build


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.9
changelog:
  - Merged jmagne@redhat.com's spec file changes from the stand-alone
    'pki-tps-client' package needed to build/run the native 'tpsclient'
    command line utility into this 'pki-core' spec file under the 'tps' package.
  - Original tps libararies must be built to support this native utility.
  - Modifies tps package from 'noarch' into 'architecture-specific' package


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.6
changelog:
  - Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires --
    drop dependency on java-atk-wrapper
  - Removed 'java-atk-wrapper' dependency from 'pki-server'


author: Dogtag Team <pki-devel@redhat.com> 10.2.0-0.1
changelog:
  - Added option to build without server packages.
  - Replaced Jettison with Jackson.
  - Added python-nss build requirement
  - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python
  - TRAC Ticket #840 - pkispawn requires policycoreutils-python
  - Updated requirements for resteasy
  - Added template files for archive, retrieve and generate key
    requests to the client package.


author: Ade Lee <alee@redhat.com> 10.1.0-1
changelog:
  - Trac Ticket 788 - Clean up spec files
  - Update release number for release build
  - Updated requirements for resteasy


author: Abhishek Koneru <akoneru@redhat.com> 10.1.0.0.9
changelog:
  - Listed new packages required during build, due to issues reported
    by pylint.
  - Packages added: python-requests, python-ldap, libselinux-python,
                    policycoreutils-python


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.0-0.2
changelog:
  - TRAC Ticket 606 - add restart / start at boot info to pkispawn man page
  - TRAC Ticket 610 - Document limitation in using GUI install
  - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-2
changelog:
  - Added default pki.conf in /usr/share/pki/etc
  - Create upgrade tracker on install and remove it on uninstall


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-0.7
changelog:
  - Added pki-server-upgrade script and pki.server module.
  - Call upgrade scripts in %post for pki-base and pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.1-9
changelog:
  - Renamed base/deploy to base/server.
  - Moved pki.conf into pki-base.
  - Removed redundant pki/server folder declaration.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-3
changelog:
  - TRAC Ticket #517 - Clean up theme dependencies
  - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-2
changelog:
  - Removed runtime dependency on 'pki-server-theme' to resolve
    Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme


author: Ade Lee <alee@redhat.com> 10.0.1-1
changelog:
  - TRAC Ticket 214 - Missing error description for duplicate user
  - TRAC Ticket 213 - Add nonces for cert revocation
  - TRAC Ticket 367 - pkidestroy does not remove connector
  - TRAC Ticket #430 - License for 3rd party code
  - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP
  - Fix spec file to allow f17 to work with latest tomcatjss
  - TRAC Ticket 466 - Increase root CA validity to 20 years
  - TRAC Ticket 469 - Fix tomcatjss issue in spec files
  - TRAC Ticket 468 - pkispawn throws exception
  - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes
  - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . .
  - TRAC Ticket 437 - Make admin cert p12 file location configurable
  - TRAC Ticket 393 - pkispawn fails when selinux is disabled
  - Punctuation and formatting changes in man pages
  - Revert to using default config file for pkidestroy
  - Hardcode setting of resteasy-lib for instance
  - TRAC Ticket 436 - Interpolation for pki_subsystem
  - TRAC Ticket 433 - Interpolation for paths
  - TRAC Ticket 435 - Identical instance id and instance name
  - TRAC Ticket 406 - Replace file dependencies with package dependencies


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-4
changelog:
  - TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and
    dogtag-pki.spec . . .
  - TRAC Ticket #468 - pkispawn throws exception


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.56.b3
changelog:
  - TRAC Ticket #315 - Man pages for pkispawn/pkidestroy.
  - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.


author: Ade Lee <alee@redhat.com> 10.0.0-0.53.b3
changelog:
  - Cleaned up spec file to provide only support rhel 7+, f17+
  - Added resteasy-base dependency for rhel 7
  - Update cmake version


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.32.a1
changelog:
  - TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances
    upon RPM "update" . . .
  - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy"
    from /usr/bin to /usr/sbin . . .


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.25.a1
changelog:
  - Merged pki-native-tools and pki-java-tools into pki-tools.
  - Modified pki-server to depend on pki-tools.


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.24.a1
changelog:
  - Split pki-common into pki-base and pki-server.
  - Merged pki-util into pki-base.
  - Merged pki-deploy into pki-server.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.23.a1
changelog:
  - Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17
  - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy'
  - Altered PKI Package Dependency Chain (top-to-bottom):
    pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.16.a1
changelog:
  - Integration of Tomcat 7
  - Addition of centralized 'pki-tomcatd' systemd functionality to the
    PKI Deployment strategy
  - Removal of 'pki_flavor' attribute


author: Ade Lee <alee@redhat.com> 10.0.0-0.11.a1
changelog:
  - BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes
  - Corrected patch selected for selinux f17 rules


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.9.a1
changelog:
  - Initial attempt at PKI deployment framework described in
    'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.7.a1
changelog:
  - For 'mock' purposes, removed platform-specific logic from around
    the 'patch' files so that ALL 'patch' files will be included in
    the SRPM.


author: Ade Lee <alee@redhat.com> 10.0.0-0.5.a1
changelog:
  - 'pki-selinux'
  -      Added platform-dependent patches for SELinux component
  -      Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16)
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.3.a1
changelog:
  - Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes
    in fundamental path structure in Fedora 17
  - 'pki-setup'
  -      Hard-code Perl dependencies to protect against bugs such as
         Bugzilla Bug #772699 - Adapt perl and python fileattrs to
         changed file 5.10 magics
  - 'pki-selinux'
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.2.a1
changelog:
  - Integrated 'pki-kra' into 'pki-core'
  - Integrated 'pki-ocsp' into 'pki-core'
  - Integrated 'pki-tks' into 'pki-core'
  - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.16-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after
         the in-place upgrade( CS 8.0->8.1) (cfu)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #746367 - Typo in the profile name. (jmagne)
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  -      Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17
         (rawhide) . . . (mharmsen)
  -      Bugzilla Bug #749945 - Installation error reported during CA, DRM,
         OCSP, and TKS package installation . . . (mharmsen)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.15-1
changelog:
  - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
  - Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-setup'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee)
  - 'pki-symkey'
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-native-tools'
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-util'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737218 - Incorrect request attribute name matching
         ignores request attributes during request parsing. (awnuk)
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-selinux'
  -      Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-silent'
  -      Bugzilla Bug #739201 - pkisilent does not take arch into account
         as Java packages migrated to arch-dependent directories (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.14-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-symkey'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-java-tools'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-common'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-silent'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .


author: Ade Lee <alee@redhat.com> 9.0.13-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-ca'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-common'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.12-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  -      Bugzilla Bug #717643 - Fopen without NULL check and other Coverity
         issues (awnuk)
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #700522 - pki tomcat6 instances currently running
         unconfined, allow server to come up when selinux disabled (alee)
  -      Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated
         correctly when subsystem cloned (using hsm) (alee)
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.11-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -      Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by
         renumbering "cn=<value>" (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like
         (jmagne, awnuk)
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  -      Bugzilla Bug #708075 - Clone installation does not work over NAT
         (alee)
  -      Bugzilla Bug #726785 - If replication fails while setting up a clone
         it will wait forever (alee)
  -      Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk)
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-ca'
  -      Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs
         in IPA profile (awnuk)
  - 'pki-silent'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.10-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #720510 - Console: Adding a certificate into nethsm
         throws Token not found error. (jmagne)
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  -      Bugzilla Bug #722989 - Registering an agent when a subsystem is
         created - does not log AUTHZ_SUCCESS event. (alee)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert
         (awnuk)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.9-1
changelog:
  - Updated release of 'jss'
  - Updated release of 'tomcatjss' for Fedora 15
  - 'pki-setup'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-symkey'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-native-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #717765 - TPS configuration: logging into security domain
         from tps does not work with clientauth=want. (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-util'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-java-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record
         processing) (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #695403 - Editing signedaudit or transaction, system
         logs throws 'Invalid protocol' for OCSP subsystems (alee)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (alee)
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (jmagne)
  -      Bugzilla Bug #698885 - Race conditions during IPA installation (alee)
  -      Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface:
         SubjectID=$Unidentified$ fails audit evaluation (jmagne)
  -      Bugzilla Bug #705914 - SCEP mishandles nicknames when processing
         subsequent SCEP requests. (awnuk)
  -      Bugzilla Bug #661142 - Verification should fail when a revoked
         certificate is added. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #707416 - additional audit messages for GetCookie (alee)
  -      Bugzilla Bug #707607 - Published certificate summary has list of
         non-published certificates with succeeded status (jmagne)
  -      Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
         for tps and ca on server shutdown (jmagne)
  -      Bugzilla Bug #697939 - DRM signed audit log message - operation should
         be read instead of modify (jmagne)
  -      Bugzilla Bug #718427 - When audit log is full, server continue to
         function. (alee)
  -      Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in
         CA's signedaudit log when a directory based user enrollment is
         performed (jmagne)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-selinux'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #720503 - RA and TPS require additional SELinux
         permissions to run in "Enforcing" mode (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-ca'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #699837 - service command is not fully backwards
         compatible with Dogtag pki subsystems (mharmsen)
  -      Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
         administrator group. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee
         pages (alee)
  -      Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs
         for a revocation invoked by EE user (awnuk)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-silent'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-2
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Added 'DRMTool.cfg' configuration file to inventory
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #532548 - Tool to do DRM re-key
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.7-1
changelog:
  - 'pki-setup'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -     Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs
        throws 'Invalid protocol' for OCSP subsystems
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #698885 - Race conditions during IPA installation
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #699837 - service command is not fully backwards compatible
        with Dogtag pki subsystems
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Bugzilla Bug #693327 - Missing requires: tomcatjss
  - 'pki-setup'
  -     Bugzilla Bug #690626 - pkiremove removes the registry entry for
        all instances on a machine
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.
  - 'pki-common'
  -     Bugzilla Bug #692990 - Audit log messages needed to match CC doc:
        DRM Recovery audit log messages
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Require "jss >= 4.2.6-15" as a build and runtime requirement
  - Require "tomcatjss >= 2.1.1" as a build and runtime requirement
    for Fedora 15 and later platforms
  - 'pki-setup'
  -     Bugzilla Bug #688287 - Add "deprecation" notice regarding using
        "shared ports" in pkicreate -help . . .
  -     Bugzilla Bug #688251 - Dogtag installation under IPA takes
        too much time - SELinux policy compilation
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple
        extensions
  - 'pki-common'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled
        on the EE port
  - 'pki-selinux'
  -     Bugzilla Bug #684871 - ldaps selinux link change
  - 'pki-ca'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.(profile and CS.cfg only)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
    instance
  - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found
  - 'pki-setup'
  -     Bugzilla Bug #678157 - uninitialized variable warnings from Perl
  -     Bugzilla Bug #679574 - Velocity fails to load all dependent classes
  -     Bugzilla Bug #680420 - xml-commons-apis.jar dependency
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath
  -     Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library
        name for SafeNet LunaSA
  - 'pki-common'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #678715 - netstat loop fixes needed
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  - 'pki-selinux'
  -     Bugzilla Bug #674195: SELinux error message thrown during token
        enrollment
  - 'pki-ca'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  -     Bugzilla Bug #676330 - init script cannot start service
  - 'pki-silent'
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath


