# changelog

author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-17
changelog:
  - Resolves: rhbz#1603311 - Enable generating user private groups only for
                             users with uid == gid where gid does not
                             correspond to a real LDAP group


author: Michal Židek <mzidek@redhat.com> - 1.16.2-16
changelog:
  - Resolves: rhbz#1602172 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 1.16.2-14
changelog:
  - Resolves: rhbz#1619706 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13
changelog:
  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12
changelog:
  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10
changelog:
  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8
changelog:
  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7
changelog:
  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6
changelog:
  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5
changelog:
  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4
changelog:
  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-3
changelog:
  - Resolves: rhbz#1494690 - kdcinfo files are not created for subdomains of a directly joined AD client
  - Resolves: rhbz#1583343 - Login with sshkeys stored in ipa not working after update to RHEL-7.5
  - Resolves: rhbz#1527662 - Handle conflicting e-mail addresses more gracefully
  - Resolves: rhbz#1509691 - Document how to change the regular expression for SSSD so that group names with an @-sign can be parsed


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Resolves: rhbz#1558498 - Rebase sssd to the latests upstream release of the 1.16 branch
  - Resolves: rhbz#1523019 - Reset password with two factor authentication fails
  - Resolves: rhbz#1534749 - Requesting an AD user's private group and then the user itself returns an emty homedir
  - Resolves: rhbz#1537272 - SSH public key authentication keeps working after keys are removed from ID view
  - Resolves: rhbz#1537279 - Certificate is not removed from cache when it's removed from the override
  - Resolves: rhbz#1562025 - externalUser sudo attribute must be fully-qualified
  - Resolves: rhbz#1577335 - /usr/libexec/sssd/sssd_autofs SIGABRT crash daily
  - Resolves: rhbz#1508530 - How should sudo behave without sudoHost attribute?
  - Resolves: rhbz#1546754 - The man page of sss_ssh_authorizedkeys can be enhanced to better explain how the keys are retrieved and how X.509 certificates can be used
  - Resolves: rhbz#1572790 - getgrgid/getpwuid fails in setups with multiple domains if the first domain uses mid_id/max_id
  - Resolves: rhbz#1561562 - sssd not honoring dyndns_server if the DNS update process is terminated with a signal
  - Resolves: rhbz#1583251 - home dir disappear in sssd cache on the IPA master for AD users
  - Resolves: rhbz#1514061 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set
  - Resolves: rhbz#1571466 - Utilizing domain_resolution_order in sssd.conf breaks SELinux user map
  - Resolves: rhbz#1571526 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-25
changelog:
  - Resolves: rhbz#1547782 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-24
changelog:
  - Related: rhbz#1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-23
changelog:
  - Resolves: rhbz#1578291 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-22
changelog:
  - Resolves: rhbz#1516266 - Give a more detailed debug and system-log message if krb5_init_context() failed
  - Resolves: rhbz#1503802 - Smartcard authentication fails if SSSD is offline and 'krb5_store_password_if_offline = True'
  - Resolves: rhbz#1385665 - Incorrect error code returned from krb5_child (updated)
  - Resolves: rhbz#1547234 - SSSD's GPO code ignores ad_site option
  - Resolves: rhbz#1459348 - extend sss-certmap man page regarding priority processing
  - Resolves: rhbz#1220767 - Group renaming issue when "id_provider = ldap" is set
  - Resolves: rhbz#1538555 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-20
changelog:
  - Resolves: rhbz#1566782 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-18
changelog:
  - Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
  - Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-17
changelog:
  - Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                             server


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-16
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-15
changelog:
  - Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                             subdomain initialization - IPA AD Trust
  - Related: rhbz#1482555 - sysdb index improvements - missing ghost
                            attribute indexing, unneeded objectclass index
                            etc..
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                             gidNumber = 0
  - Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                            a primed cache
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-13
changelog:
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked cert
                             on smart card


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-12
changelog:
  - Resolves: rhbz#1512027 - NSS by-id requests are not checked against
                             max_id/min_id ranges before triggering the
                             backend


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-11
changelog:
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked
                             cert on smart card
  - Resolves: rhbz#1520984 - getent output is not showing home directory
                             for IPA AD trusted user
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-10
changelog:
  - Resolves: rhbz#1421194 - SSSD doesn't use AD global catalog for
                             gidnumber lookup, resulting in unacceptable
                             delay for large forests


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-9
changelog:
  - Resolves: rhbz#1482231 - sssd_nss consumes more memory until
                             restarted or machine swaps
  - Resolves: rhbz#1512508 - SSSD fails to fetch group information after
                             switching IPA client to a non-default view


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-8
changelog:
  - Resolves: rhbz#1490120 - SSSD complaining about corrupted mmap cache
                             and logging error in /var/log/messages and
                             /var/log/sssd/sssd_nss.log


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-7
changelog:
  - Resolves: rhbz#1272214 - [RFE] Create a local per system report about
                             who can access that IDM client (attestation)
  - Resolves: rhbz#1482555 - sysdb index improvements - missing ghost
                             attribute indexing, unneeded objectclass index
                             etc..
  - Resolves: rhbz#888739 -  Enumerating large number of users makes sssd_be
                             hog the cpu for a long time.
  - Resolves: rhbz#1373547 - SSSD performance issue with malloc and brk
                             calls
  - Resolves: rhbz#1472255 - Improve SSSD performance in the 7.5 release


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-6
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1432010 - SSSD ships a drop-in configuration snippet in
                            /etc/systemd/system
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-5
changelog:
  - Resolves: rhbz#1507614 - Improve Smartcard integration if multiple
                             certificates or multiple mapped identities are
                             available
  - Related: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                            searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1408294 - SSSD authentication fails when two IPA
                             accounts share an email address without a
                             clear way to debug the problem
  - Resolves: rhbz#1502686 - crash - /usr/libexec/sssd/sssd_nss in
                             nss_setnetgrent_timeout


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-4
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1459609 - When sssd is configured with id_provider proxy
                            and auth_provider ldap, login fails if the LDAP
                            server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-3
changelog:
  - Resolves: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                             threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-2
changelog:
  - Resolves: rhbz#1484376 - [RFE] Add a configuration option to SSSD to
                             disable the memory cache
  - Resolves: rhbz#1327705 - Automatic creation of user private groups on
                             RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1505277 - Race condition between refreshing the cr_domain
                             list and a request that is using the list can
                             cause a segfault is sssd_nss
  - Resolves: rhbz#1462343 - document information on why SSSD does not use
                             host-based security filtering when processing
                             AD GPOs
  - Resolves: rhbz#1498734 - sssd_be stuck in an infinite loop after
                             completing full refresh of sudo rules
  - Resolves: rhbz#1400614 - [RFE] sssd should remember DNS sites from
                             first search
  - Resolves: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Resolves: rhbz#1459609 - When sssd is configured with id_provider proxy
                             and auth_provider ldap, login fails if the LDAP
                             server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-1
changelog:
  - Resolves: rhbz#1469791 - Rebase SSSD to version 1.16+
  - Resolves: rhbz#1132264 - Allow sssd to retrieve sudo rules of local
                             users whose sudo rules stored in ldap server
  - Resolves: rhbz#1301740 - sssd can be marked offline if a trusted domain
                             is not reachable
  - Resolves: rhbz#1399262 - Use TCP for kerberos with AD by default
  - Resolves: rhbz#1416150 - RFE: Log to syslog when sssd cannot contact
                             servers, goes offline
  - Resolves: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Resolves: rhbz#1454559 - python-sssdconfig doesn't parse hexadecimal debug
                             _level, resulting in set_option():
                             /usr/lib/python2.7/site-packages/SSSDConfig/__init__.py
                             killed by TypeError
  - Resolves: rhbz#1456968 - MAN: document that attribute 'provider' is not
                             allowed in section 'secrets'
  - Resolves: rhbz#1460689 - KCM/secrets: Storing many secrets in a rapid
                             succession segfaults the secrets responder
  - Resolves: rhbz#1464049 - Idle nss file descriptors should be closed
  - Resolves: rhbz#1468610 - sssd_be is utilizing more CPU during sudo rules
                             refresh
  - Resolves: rhbz#1474711 - Querying the AD domain for external domain's ID can
                             mark the AD domain offline
  - Resolves: rhbz#1479398 - samba shares with sssd authentication broken on 7.4
  - Resolves: rhbz#1479983 - id root triggers an LDAP lookup
  - Resolves: rhbz#1489895 - Issues with certificate mapping rules
  - Resolves: rhbz#1490501 - sssd incorrectly checks 'try_inotify' thinking it is
                             the wrong section
  - Resolves: rhbz#1490913 - MAN: Document that full_name_format must be set if
                             the output of trusted domains user resolution should
                             be shortnames only
  - Resolves: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1461899 - Loading enterprise principals doesn't work with a
                             primed cache
  - Resolves: rhbz#1482674 - SUDO doesn't work for IPA users on IPA clients after
                             applying ID Views for them in IPA server
  - Resolves: rhbz#1486053 - Accessing IdM kerberos ticket fails while id mapping
                             is applied
  - Resolves: rhbz#1486786 - sssd going in offline mode due to sudo search filter.
  - Resolves: rhbz#1500087 - SSSD creates bad override search filter due to AD
                             Trust object with parenthesis
  - Resolves: rhbz#1502713 - SSSD can crash due to ABI changes in libldb >= 1.2.0
                             (1.1.30)
  - Resolves: rhbz#1461462 - sssd_client: add mutex protected call to the PAC
                             responder
  - Resolves: rhbz#1489666 - Combination sssd-ad and postfix recieve incorrect
                             mail with asterisks or spaces
  - Resolves: rhbz#1525052 - sssd_krb5_localauth_plugin fails to fallback to otheri
                             localname rules


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-51
changelog:
  - Require the 7.5 libldb version which broke ABI
  - Related: rhbz#1469791 - Rebase SSSD to version 1.16+


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-41
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-40
changelog:
  - Resolves: rhbz#1449729 - org.freedesktop.sssd.infopipe.GetUserGroups
                             does not resolve groups into names with AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-39
changelog:
  - Resolves: rhbz#1450094 - Properly support IPA's promptusername config
                             option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-38
changelog:
  - Resolves: rhbz#1457644 - Segfault in access_provider = krb5 is set in
                             sssd.conf due to an off-by-one error when
                             constructing the child send buffer
  - Resolves: rhbz#1456531 - Option name typos are not detected with validator
                             function of sssctl config-check command in domain
                             sections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-37
changelog:
  - Resolves: rhbz#1428906 - sssd intermittently failing to resolve groups
                             for an AD user in IPA-AD trust environment.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-36
changelog:
  - Resolves: rhbz#1389796 - Smartcard authentication with UPN as logon name
                             might fail
  - Fix Coverity issues in patches for rhbz#1445445


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-34
changelog:
  - Resolves: rhbz#1446302 - crash in sssd-kcm due to a race-condition
                             between two concurrent requests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-32
changelog:
  - Resolves: rhbz#1306707 - Need better debug message when krb5_child
                             returns an unhandled error, leading to a
                             System Error PAM code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-31
changelog:
  - Resolves: rhbz#1446535 - Group resolution does not work in subdomain
                             without ad_server option


author: Sumit Bose <sbose@redhat.com> - 1.15.2-30
changelog:
  - Resolves: rhbz#1449726 - sss_nss_getlistbycert() does not return results from
                             multiple domains
  - Resolves: rhbz#1447098 - sssd unable to search dbus for ipa user by
                             certificate
  - Additional patch for rhbz#1440132


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-29
changelog:
  - Reapply patch by Lukas Slebodnik to fix upgrade issues with libwbclient
  - Resolves: rhbz#1439457 - SSSD does not start after upgrade from 7.3 to 7.4 
  - Resolves: rhbz#1449107 - error: %pre(sssd-common-1.15.2-26.el7.x86_64)
                             scriptlet failed, exit status 3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-28
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15
  - Also apply an additional patch for rhbz#1441545


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-24
changelog:
  - Resolves: rhbz#1434992 - Wrong pam return code for user from subdomain
                             with ad_access_filter


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.2-23
changelog:
  - Resolves: rhbz#1430494 - expect sss_ssh_authorizedkeys and
                             sss_ssh_knownhostsproxy manuals to be packaged
                             into sssd-common package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-22
changelog:
  - Resolves: rhbz#1427749 - SSSD in server mode iterates over all domains
                             for group-by-GID requests, causing unnecessary
                             searches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-21
changelog:
  - Resolves: rhbz#1446139 - Infopipe method ListByCertificate does not
                             return the users with overrides


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-20
changelog:
  - Resolves: rhbz#1441545 - With multiple subdomain sections id command
                             output for user is not displayed for both domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-19
changelog:
  - Resolves: rhbz#1428866 - Using ad_enabled_domains configuration option
                             in sssd.conf causes nameservice lookups to fail.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-18
changelog:
  - Remove an unused variable from the sssd-secrets responder
  - Related: rhbz#1398701 - [sssd-secrets] https proxy talks plain http
  - Improve two DEBUG messages in the client trust code to aid troubleshooting
  - Fix standalone application domains
  - Related: rhbz#1425891 - Support delivering non-POSIX users and groups
                            through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-17
changelog:
  - Allow completely server-side unqualified name resolution if the domain order is set,
    do not require any client-side changes
  - Related: rhbz#1330196 - [RFE] Short name input format with SSSD for users from
                            all domains when domain autodiscovery is used or when
                            IPA client resolves trusted AD domain users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-16
changelog:
  - Resolves: rhbz#1402532 - D-Bus interface of sssd is giving inappropriate
                             group information for trusted AD users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-15
changelog:
  - Resolves: rhbz#1431858 - Wrong principal found with ad provider and long
                             host name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-14
changelog:
  - Resolves: rhbz#1415167 - pam_acct_mgmt with pam_sss.so fails in
                             unprivileged container unless
                             selinux_provider = none is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-13
changelog:
  - Resolves: rhbz#1438388 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_pam killed by 6


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-12
changelog:
  - Resolves: rhbz#1432112 - sssctl config-check does not give any error
                             when default configuration file is not present


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-11
changelog:
  - Resolves: rhbz#1438374 - [abrt] [faf] sssd: vfprintf():
                             /usr/libexec/sssd/sssd_be killed by 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-10
changelog:
  - Resolves: rhbz#1427195 - sssd_nss consumes more memory until restarted
                             or machine swaps


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-9
changelog:
  - Resolves: rhbz#1414023 - Create troubleshooting tool to determine if a
                             failure is in SSSD or not when using layered
                             products like RH-SSO/CFME etc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-7
changelog:
  - Fix off-by-one error in the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-6
changelog:
  - Resolves: rhbz#1425891 - Support delivering non-POSIX users and groups
                             through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-5
changelog:
  - Resolves: rhbz#1434991 - Issue processing ssh keys from certificates in
                             ssh respoder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-4
changelog:
  - Resolves: rhbz#1330196 - [RFE] Short name input format with SSSD for
                             users from all domains when domain autodiscovery
                             is used or when IPA client resolves trusted AD
                             domain users
  - Also backport some buildtime fixes for the KCM responder
  - Related: rhbz#1396012 - [RFE] KCM ccache daemon in SSSD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-2
changelog:
  - Resolves: rhbz#1340711 - [RFE] Use one smartcard and certificate for
                             authentication to distinct logon accounts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-1
changelog:
  - Update to upstream 1.15.2
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
  - Resolves: rhbz#1418728 - IPA - sudo does not handle associated conflict
                             entries
  - Resolves: rhbz#1386748 - sssd doesn't update PTR records if A/PTR zones
                             are configured as non-secure and secure
  - Resolves: rhbz#1214491 - [RFE] Make it possible to configure AD subdomain
                             in the SSSD server mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream 1.15.1
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
  - Resolves: rhbz#1327085 - Don't prompt for password if there is already
                             one on the stack
  - Resolves: rhbz#1378722 - [RFE] Make GETSIDBYNAME and GETORIGBYNAME
                             request aware of UPNs and aliases
  - Resolves: rhbz#1405075 - [RFE] Add PKINIT support to SSSD Kerberos provider
  - Resolves: rhbz#1416526 - Need correction in sssd-krb5 man page
  - Resolves: rhbz#1418752 - pam_sss crashes in do_pam_conversation if no
                             conversation function is provided by the
                             client app
  - Resolves: rhbz#1419356 - Fails to accept any sudo rules if there are
                             two user entries in an ldap role with the same
                             sudo user
  - Resolves: rhbz#1421622 - SSSD - Users/Groups are cached as mixed-case
                             resulting in users unable to sign in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-2
changelog:
  - Fix several packaging issues, notably the p11_child is no longer setuid
    and the libwbclient used a wrong version number in the symlink


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-1
changelog:
  - Update to upstream 1.15.0
  - Resolves: rhbz#1393824 - Rebase SSSD to version 1.15
  - Resolves: rhbz#1407960 - wbcLookupSid() fails in pdomain is NULL
  - Resolves: rhbz#1406437 - sssctl netgroup-show Cannot allocate memory
  - Resolves: rhbz#1400422 - Use-after free in resolver in case the fd is
                             writeable and readable at the same time
  - Resolves: rhbz#1393085 - bz - ldap group names don't resolve after
                             upgrading sssd to 1.14.0 if ldap_nesting_level is set to 0
  - Resolves: rhbz#1392444 - sssd_be keeps crashing
  - Resolves: rhbz#1392441 - sssd fails to start after upgrading to RHEL 7.3
  - Resolves: rhbz#1382602 - autofs map resolution doesn't work offline
  - Resolves: rhbz#1380436 - sudo: ignore case on case insensitive domains
  - Resolves: rhbz#1378251 - Typo In SSSD-AD Man Page
  - Resolves: rhbz#1373427 - Clock skew makes SSSD return System Error
  - Resolves: rhbz#1306707 - Need better handling of "Server not found in
                             Kerberos database"
  - Resolves: rhbz#1297462 - Don't include 'enable_only=sssd' in the localauth
                             plugin config


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-45
changelog:
  - Resolves: rhbz#1378911 - No supplementary groups are resolved for users
                             in nested OUs when domain stanza differs from AD
                             domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-44
changelog:
  - Resolves: rhbz#1372075 - AD provider: SSSD does not retrieve a domain-local
                             group with the AD provider when following AGGUDLP
                             group structure across domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-42
changelog:
  - Resolves: rhbz#1371631 - login using gdm calls for gdm-smartcard when
                             smartcard authentication is not enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-40
changelog:
  - Resolves: rhbz#1375299 - sss_groupshow <user> fails with error "No such
                             group in local domain. Printing groups only
                             allowed in local domain"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-39
changelog:
  - Resolves: rhbz#1375182 - SSSD goes offline when the LDAP server returns
                             sizelimit exceeded


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-38
changelog:
  - Resolves: rhbz#1372753 - Access denied for user when access_provider =
                             krb5 is set in sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-37
changelog:
  - Resolves: rhbz#1373444 - unable to create group in sssd cache
  - Resolves: rhbz#1373577 - unable to add local user in sssd to a group in sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-35
changelog:
  - Fix permissions for the private pipe directory
  - Resolves: rhbz#1362716 - selinux avc denial for vsftp login as ipa user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-32
changelog:
  - Resolves: rhbz#1371152 - SSSD qualifies principal twice in IPA-AD trust
                             if the principal attribute doesn't exist on the
                             AD side


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-31
changelog:
  - Apply forgotten patch
  - Resolves: rhbz#1368496 - sssd is not able to authenticate with alias
  - Resolves: rhbz#1366470 - sssd: throw away the timestamp cache if
                             re-initializing the persistent cache
  - Fix deleting non-existent secret
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-28
changelog:
  - Resolves: rhbz#1364033 - sssd exits if clock is adjusted backwards
                             after boot


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-27
changelog:
  - Resolves: rhbz#1362023 - SSSD fails to start when ldap_user_extra_attrs
                             contains mail


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-26
changelog:
  - Resolves: rhbz#1368324 - libsss_autofs.so is packaged in two packages
                             sssd-common and libsss_autofs


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-25
changelog:
  - Fix RPM scriptlet plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-24
changelog:
  - Add socket-activation plumbing for the sssd-secrets responder
  - Related: rhbz#1311056 - Add a Secrets as a Service component


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-22
changelog:
  - Resolves: rhbz#1268874 - Add an option to disable checking for trusted
                             domains in the subdomains provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-21
changelog:
  - Resolves: rhbz#1271280 - sssd stores and returns incorrect information
                             about empty netgroup (ldap-server: 389-ds)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-20
changelog:
  - Resolves: rhbz#1290500 - [feat] command to manually list
                             fo_add_server_to_list information


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-19
changelog:
  - Add several small fixes related to the config API
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-18
changelog:
  - Resolves: rhbz#1349900 - gpo search errors out and gpo_cache file is
                             never created


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-17
changelog:
  - Fix regressions in the simple access provider
  - Resolves: rhbz#1360806 - sssd does not start if sub-domain user is used
                             with simple access provider
  - Apply a number of specfile patches to better match the upstream spefile
  - Related: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-16
changelog:
  - Cherry-pick patches from upstream that fix several regressions
  - Avoid checking local users in all cases
  - Resolves: rhbz#1353951 - sssd_pam leaks file descriptors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-15
changelog:
  - Resolves: rhbz#1364118 - [abrt] [faf] sssd: unknown function():
                             /usr/libexec/sssd/sssd_nss killed by 11
  - Resolves: rhbz#1361563 - Wrong pam error code returned for password
                             change in offline mode


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-13
changelog:
  - Resolves: rhbz#1304992 - Handle overriden name of members in the
                             memberUid attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-12
changelog:
  - handle unresolvable sites more gracefully
  - Resolves: rhbz#1346011 - sssd is looking at a server in the GC of a
                             subdomain, not the root domain.
  - fix compilation warnings in unit tests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-11
changelog:
  - fix capaths output
  - Resolves: rhbz#1344940 - GSSAPI error causes failures for child domain
                             user logins across IPA - AD trust
  - also fix Coverity issues in the secrets responder and suppress noisy
    debug messages when setting the timestamp cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-9
changelog:
  - Resolves: rhbz#1354414 - New or modified ID-View User overrides are not
                             visible unless rm -f /var/lib/sss/db/*cache*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-7
changelog:
  - Resolves: rhbz#1350520 - [abrt] sssd-common: ipa_dyndns_update_send():
                             sssd_be killed by SIGSEGV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-6
changelog:
  - Resolves: rhbz#1349882 - sssd does not work under non-root user
  - Also cherry-pick a few patches from upstream to fix config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-5
changelog:
  - Sync a few minor patches from upstream
  - Fix sssctl manpage
  - Fix nss-tests unit test on big-endian machines
  - Fix several issues in the config schema
  - Related: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-3
changelog:
  - Sync a few minor patches from upstream
  - Fix a failover issue
  - Resolves: rhbz#1334749 - sssd fails to mark a connection as bad on
                             searches that time out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-2
changelog:
  - Explicitly BuildRequire newer ding-libs
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0-1
changelog:
  - New upstream release 1.14.0
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#835492 - [RFE] SSSD admin tool request - force reload
  - Resolves: rhbz#1072458 - [RFE] SSSD configuration file test tool (sssd_check)
  - Resolves: rhbz#1278691 - Please fix rfc2307 autofs schema defaults
  - Resolves: rhbz#1287209 - default_domain_suffix Appended to User Name
  - Resolves: rhbz#1300663 - Improve sudo protocol to support configurations
                             with default_domain_suffix
  - Resolves: rhbz#1312275 - Support authentication indicators from IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0beta1-2
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - Resolves: rhbz#790113 - [RFE] "include" directive in sssd.conf
  - Resolves: rhbz#874985 - [RFE] AD provider support for automount lookups
  - Resolves: rhbz#879333 - [RFE] SSSD admin tool request - status overview
  - Resolves: rhbz#1140022 - [RFE]Allow sssd to add a new option that would
                             specify which server to update DNS with
  - Resolves: rhbz#1290380 - RFE: Improve SSSD performance in large
                             environments
  - Resolves: rhbz#883886 - sssd: incorrect checks on length values during
                            packet decoding
  - Resolves: rhbz#988207 - sssd does not detail which line in configuration
                            is invalid
  - Resolves: rhbz#1007969 - sssd_cache does not remove have an option to
                             remove the sssd database
  - Resolves: rhbz#1103249 - PAC responder needs much time to process large
                             group lists
  - Resolves: rhbz#1118257 - Users in ipa groups, added to netgroups are
                             not resovable
  - Resolves: rhbz#1269018 - Too much logging from sssd_be
  - Resolves: rhbz#1293695 - sssd mixup nested group from AD trusted domains
  - Resolves: rhbz#1308935 - After removing certificate from user in IPA
                             and even after sss_cache, FindByCertificate
                             still finds the user
  - Resolves: rhbz#1315766 - SSSD PAM module does not support multiple
                             password prompts (e.g. Password + Token) with sudo
  - Resolves: rhbz#1316164 - SSSD fails to process GPO from Active Directory
  - Resolves: rhbz#1322458 - sssd_be[11010]: segfault at 0 ip 00007ff889ff61bb
                             sp 00007ffc7d66a3b0 error 4 in
                             libsss_ipa.so[7ff889fcf000+5d000]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.14.0alpha-1
changelog:
  - Resolves: rhbz#1290381 - Rebase SSSD to 1.14.x in RHEL-7.3
  - The rebase includes fixes for the following bugzillas:
  - Resolves: rhbz#789477 - [RFE] SUDO: Support the IPA schema
  - Resolves: rhbz#1059972 - RFE: SSSD: Automatically assign new slices for
                             any AD domain
  - Resolves: rhbz#1233200 - man sssd.conf should clarify details about
                             subdomain_inherit option.
  - Resolves: rhbz#1238144 - Need better libhbac debuging added to sssd
  - Resolves: rhbz#1265366 - sss_override segfaults when accidentally adding
                             --help flag to some commands
  - Resolves: rhbz#1269512 - sss_override: memory violation
  - Resolves: rhbz#1278566 - crash in sssd when non-Englsh locale is used
                             and pam_strerror prints non-ASCII characters
  - Resolves: rhbz#1283686 - groups get deleted from the cache
  - Resolves: rhbz#1290378 - Smart Cards: Certificate in the ID View
  - Resolves: rhbz#1292238 - extreme memory usage in libnfsidmap sss.so
                             plug-in when resolving groups with many members
  - Resolves: rhbz#1292456 - sssd_be AD segfaults on missing A record
  - Resolves: rhbz#1294670 - Local users with local sudo rules causes
                             LDAP queries
  - Resolves: rhbz#1296618 - Properly remove OriginalMemberOf attribute in
                             SSSD cache if user has no secondary groups anymore
  - Resolves: rhbz#1299553 - Cannot retrieve users after upgrade from 1.12
                             to 1.13
  - Resolves: rhbz#1302821 - Cannot start sssd after switching to non-root
  - Resolves: rhbz#1310877 - [RFE] Support Automatic Renewing of Kerberos
                             Host Keytabs
  - Resolves: rhbz#1313014 - sssd is not closing sockets properly
  - Resolves: rhbz#1318996 - SSSD does not fail over to next GC
  - Resolves: rhbz#1327270 - local overrides: issues with sub-domain users
                             and mixed case names
  - Resolves: rhbz#1342547 - sssd-libwbclient: wbcSidsToUnixIds should not
                             fail on lookup errors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-50
changelog:
  - Build the PAC plugin with krb5-1.14
  - Related: rhbz#1336688 - sssd tries to resolve global catalog servers
                            from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-49
changelog:
  - Resolves: rhbz#1336688 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-48
changelog:
  - Resolves: rhbz#1290853 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-47
changelog:
  - Resolves: rhbz#1336706 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-46
changelog:
  - Resolves: rhbz#1296902 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-45
changelog:
  - Resolves: rhbz#1334159 - IPA provider crashes if a netgroup from a
                             trusted domain is requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-44
changelog:
  - Resolves: rhbz#1308913 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-42
changelog:
  - Resolves: rhbz#1300740 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-30
changelog:
  - Patches required for better handling of failover with one-way trusts
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA subdomain
                            code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-29
changelog:
  - Resolves: rhbz#1263587 - sss_override --name doesn't work with RFC2307
                             and ghost users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-26
changelog:
  - Resolves: rhbz#1256398 - sssd cannot resolve user names containing
                             backslash with ldap provider


author: Martin Kosek <mkosek@redhat.com> - 1.13.0-25
changelog:
  - Resolves: rhbz#1254189 - sss_override contains an extra parameter --debug
                             but is not listed in the man page or in
                             the arguments help


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-23
changelog:
  - Support import/export for local overrides
  - Support FQDNs for local overrides
  - Resolves: rhbz#1254184 - sss_override does not work correctly when
                             'use_fully_qualified_names = True'


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-22
changelog:
  - Resolves: rhbz#1244950 - Add index for 'objectSIDString' and maybe to
                             other cache attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-20
changelog:
  - Related: rhbz#1250135 - Detect re-established trusts in the IPA
                            subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-19
changelog:
  - Resolves: rhbz#1202724 - [RFE] Add a way to lookup users based on CAC
                             identity certificates


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-16
changelog:
  - Fix race condition in invalidating the memory cache
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-15
changelog:
  - Resolves: rhbz#1249015 - KDC proxy not working with SSSD krb5_use_kdcinfo
                             enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-14
changelog:
  - Bump release number
  - Related: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                            named pysss"


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-13
changelog:
  - Fix missing dependency of sssd-tools
  - Resolves: rhbz#1246489 - sss_obfuscate fails with "ImportError: No module
                             named pysss"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-12
changelog:
  - More memory cache related fixes
  - Related: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-11
changelog:
  - Remove binary blob from SC patches as patch(1) can't handle those
  - Related: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-10
changelog:
  - Resolves: rhbz#1244949 - getgrgid for user's UID on a trust client
                             prevents getpw*


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-9
changelog:
  - Fix memory cache integration tests
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups
  - Resolves: rhbz#854396 - [RFE] Support for smart cards


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-8
changelog:
  - Remove OTP from PAM stack correctly
  - Related: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                            user logs in with password and token code from IPA
  - Handle sssd-owned keytabs when sssd runs as root
  - Related: rhbz#1205144 - RFE: Support one-way trusts for IPA


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1206565 - [RFE] Add dualstack and multihomed support
  - Resolves: rhbz#1187146 - If v4 address exists, will not create nonexistant
                             v6 in ipa domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-3
changelog:
  - Add support for InfoPipe wildcard requests
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 upstream
  - Related: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Resolves: rhbz#910187 - [RFE] authenticate against cache in SSSD
  - Resolves: rhbz#1206575 - [RFE] The fast memory cache should cache initgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0.1alpha
changelog:
  - Resolves: rhbz#1205554 - Rebase SSSD to 1.13.x
  - Relax the libldb requirement
  - Resolves: rhbz#1221992 - sssd_be segfault at 0 ip sp error 6 in
                             libtevent.so.0.9.21
  - Resolves: rhbz#1221839 - SSSD group enumeration inconsistent due to
                             binary SIDs
  - Resolves: rhbz#1219285 - Unable to resolve group memberships for AD
                             users when using sssd-1.12.2-58.el7_1.6.x86_64
                             client in combination with
                             ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Resolves: rhbz#1217559 - [RFE] Support GPOs from different domain controllers
  - Resolves: rhbz#1217350 - ignore_group_members doesn't work for subdomains
  - Resolves: rhbz#1217127 - Override for IPA users with login does not list
                             user all groups
  - Resolves: rhbz#1216285 - autofs provider fails when default_domain_suffix
                             and use_fully_qualified_names set
  - Resolves: rhbz#1214719 - Group resolution is inconsistent with group
                             overrides
  - Resolves: rhbz#1214718 - Overridde with --login fails trusted adusers
                             group membership resolution
  - Resolves: rhbz#1214716 - idoverridegroup for ipa group with --group-name
                             does not work
  - Resolves: rhbz#1214337 - Overrides with --login work in second attempt
  - Resolves: rhbz#1212489 - Disable the cleanup task by default
  - Resolves: rhbz#1211830 - external users do not resolve with
                             "default_domain_suffix" set in IPA server sssd.conf
  - Resolves: rhbz#1210854 - Only set the selinux context if the context
                             differs from the local one
  - Resolves: rhbz#1209483 - When using id_provider=proxy with
                             auth_provider=ldap, it does not work as expected
  - Resolves: rhbz#1209374 - Man sssd-ad(5) lists Group Policy Management
                             Editor naming for some policies but not for all
  - Resolves: rhbz#1208507 - sysdb sudo search doesn't escape special characters
  - Resolves: rhbz#1206571 - [RFE] Expose D-BUS interface
  - Resolves: rhbz#1206566 - SSSD does not update Dynamic DNS records if
                             the IPA domain differs from machine hostname's
                             domain
  - Resolves: rhbz#1206189 - [bug] sssd always appends default_domain_suffix
                             when checking for host keys
  - Resolves: rhbz#1204203 - sssd crashes intermittently
  - Resolves: rhbz#1203945 - [FJ7.0 Bug]: getgrent returns error because
                             sss is written in nsswitch.conf as default
  - Resolves: rhbz#1203642 - GPO access control looks for computer object
                             in user's domain only
  - Resolves: rhbz#1202245 - SSSD's HBAC processing is not permissive enough
                             with broken replication entries
  - Resolves: rhbz#1201271 - sssd_nss segfaults if initgroups request is by
                             UPN and doesn't find anything
  - Resolves: rhbz#1200873 - [RFE] Allow smart multi step prompting when
                             user logs in with password and token code from IPA
  - Resolves: rhbz#1199541 - Read and use the TTL value when resolving a
                             SRV query
  - Resolves: rhbz#1199533 - [RFE] Implement background refresh for users,
                             groups or other cache objects
  - Resolves: rhbz#1199445 - Does sssd-ad use the most suitable attribute
                             for group name?
  - Resolves: rhbz#1198477 - ccname_file_dummy is not unlinked on error
  - Resolves: rhbz#1187103 - [RFE] User's home directories are not taken
                             from AD when there is an IPA trust with AD
  - Resolves: rhbz#1185536 - In ipa-ad trust, with 'default_domain_suffix' set
                             to AD domain, IPA user are not able to log unless
                             use_fully_qualified_names is set
  - Resolves: rhbz#1175760 - [RFE] Have OpenLDAP lock out ssh keys when
                             account naturally expires
  - Resolves: rhbz#1163806 - [RFE]ad provider dns_discovery_domain option:
                             kerberos discovery is not using this option
  - Resolves: rhbz#1205160 - Complain loudly if backend doesn't start due
                             to missing or invalid keytab


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-60
changelog:
  - Filter out domain-local groups during AD initgroups operation
  - Related: rhbz#1201840 - SSSD downloads too much information when fetching
                            information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-59
changelog:
  - Resolves: rhbz#1201840 - SSSD downloads too much information when fetching
                             information about groups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.6
changelog:
  - Initialize variable in the views code in one success and one failure path
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.5
changelog:
  - Resolves: rhbz#1202170 - sssd_be segfault on IPA(when auth with AD
                             trusted domain) client at
                             src/providers/ipa/ipa_s2n_exop.c:1605


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.4
changelog:
  - Handle case where there is no default and no rules
  - Resolves: rhbz#1192314 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.3
changelog:
  - Set a pointer in ldap_child to NULL to avoid warnings
  - Related: rhbz#1198759 - ccname_file_dummy is not unlinked on error


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-58.2
changelog:
  - Resolves: rhbz#1199143 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-57
changelog:
  - Run the restart in sssd-common posttrans
  - Explicitly require libwbclient
  - Resolves: rhbz#1187113 - sssd deamon was not running after RHEL 7.1 upgrade


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-55
changelog:
  - Fix endianess bug in fill_id()
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-53
changelog:
  - Resolves: rhbz#1187192 - IPA initgroups don't work correctly in
                             non-default view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-51
changelog:
  - Bump the release number
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-50
changelog:
  - Add a patch dependency
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-49
changelog:
  - Process ghost members only once
  - Fix processing of universal groups with members from different domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-48
changelog:
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-46
changelog:
  - Handle GID override in MPG domains
  - Handle views with mixed-case domains
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-45
changelog:
  - Open socket to the PAC responder in krb5_child before dropping root
  - Related: rhbz#1184140 - Users saved throug extop don't have the
                            originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-44
changelog:
  - Resolves: rhbz#1184140 - Users saved throug extop don't have the
                             originalMemberOf attribute


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-43
changelog:
  - Resolves: rhbz#1182183 - pam_sss(sshd:auth): authentication failure with
                             user from AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-40
changelog:
  - Resolves: rhbz#1177140 - gpo_child fails if "log level" is enabled in smb.conf
  - Related: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-39
changelog:
  - Resolves: rhbz#1175408 - SSSD should not fail authentication when only allow
                             rules are used
  - Resolves: rhbz#1175705 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Sumit Bose <sbose@redhat.com> - 1.12.2-38
changelog:
  - Resolves: rhbz#1171215 - Crash in function get_object_from_cache
  - Resolves: rhbz#1171383 - getent fails for posix group with AD users after
                             login
  - Resolves: rhbz#1171382 - getent of AD universal group fails after group users
                             login
  - Resolves: rhbz#1170300 - Access is not rejected for disabled domain
  - Resolves: rhbz#1162486 - Error processing external groups with
                             getgrnam/getgrgid in the server mode
  - Resolves: rhbz#1168904 - gid is overridden by uid in default trust view


author: Sumit Bose <sbose@redhat.com> - 1.12.2-37
changelog:
  - Resolves: rhbz#1169459 - sssd-ad: The man page description to enable GPO HBAC
                             Policies are unclear
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Rebuild to add several forgotten Patch entries
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-35
changelog:
  - Remove Coverity warnings in krb5_child code
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-34
changelog:
  - Resolves: rhbz#1173482 - MAN: Document that only user names are checked
                             for pam_trusted_users
  - Resolves: rhbz#1167324 - pam_sss domains option: User auth should fail
                             when domains=<emtpy value>


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-32
changelog:
  - Resolves: rhbz#1124320 - [FJ7.0 Bug]: getgrent returns error because sss
                             is written in nsswitch.conf as default.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-31
changelog:
  - Resolves: rhbz#1169739 - selinuxusermap rule does not apply to trusted
                             AD users
  - Enable running unit tests without cmocka
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-30
changelog:
  - krb5_child and ldap_child do not call Kerberos calls as root
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-28
changelog:
  - Fix typo in libwbclient-devel alternatives invocation
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-27
changelog:
  - Resolves: rhbz#1166727 - pam_sss domains option: Untrusted users from
                             the same domain are allowed to auth.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-26
changelog:
  - Handle migrating clients between views
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-25
changelog:
  - Use alternatives for libwbclient
  - Related: rhbz#1109331 - [RFE] Allow SSSD to be used with smbd shares


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-24
changelog:
  - Resolves: rhbz#1165794 - sssd does not work with custom value of option
                             re_expression


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-23
changelog:
  - Add an option that describes where to put generated krb5 files to
  - Related: rhbz#1135043 - [RFE] Implement localauth plugin for MIT krb5 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-22
changelog:
  - Handle IPA group names returned from the extop plugin
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-20
changelog:
  - Resolves: rhbz#1163742 - "debug_timestamps = false" and "debug_microseconds
                             = true" do not work after enabling journald
                             with sssd.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-19
changelog:
  - Resolves: rhbz#1153593 - Manpage description of case_sensitive=preserving
                            is incomplete


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-18
changelog:
  - Support views for IPA users
  - Related: rhbz#891984 - [RFE] ID Views: Support migration from the sync
                           solution to the trust solution


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-17
changelog:
  - Update man page to clarify TGs should be disabled with a custom search base
  - Related: rhbz#1161741 - TokenGroups for LDAP provider breaks in corner cases


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-16
changelog:
  - Use upstreamed patches for the rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-15
changelog:
  - Resolves: rhbz#1153603 - Proxy Provider: Fails to lookup case sensitive
                             users and groups with case_sensitive=preserving


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-12
changelog:
  - Move adding the user from pretrans to pre, copy adding the user to
    sssd-krb5-common and sssd-ipa as well in order to work around yum
    ordering issue
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-10
changelog:
  - Fix two regressions in the new selinux_child process
  - Related: rhbz#1113783 - sssd should run under unprivileged user
  - Resolves: rhbz#1132365 - Remove password from the PAM stack if OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-9
changelog:
  - Include the ldap_child and selinux_child patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-8
changelog:
  - Support overriding SSH public keys with views
  - Support extended attributes via the extop plugin
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137010 - disable midpoint refresh for netgroups if ptask
                             refresh is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1153518 - service lookups returned in lowercase with
                             case_sensitive=preserving
  - Resolves: rhbz#1158809 - Enumeration shows only a single group multiple
                             times


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-6
changelog:
  - Include the responder and packaging patches for rootless sssd
  - Related: rhbz#1113783 - sssd should run under unprivileged user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
changelog:
  - Amend the sssd-ldap man page with info about lockout setup
  - Related: rhbz#1109756 - Rebase SSSD to 1.12
  - Resolves: rhbz#1137014 - Shell fallback mechanism in SSSD 
  - Resolves: rhbz#790854 - 4 functions with reference leaks within sssd (src/python/pyhbac.c)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
changelog:
  - Fix regressions caused by views patches when SSSD is connected to a
    pre-4.0 IPA server
  - Related: rhbz#1109756 - Rebase SSSD to 1.12


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
changelog:
  - Add the low-level server changes for running as unprivileged user
  - Package the libsss_semange library needed for SELinux label changes
  - Related: rhbz#1113783 - sssd should run under unprivileged user 
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
changelog:
  - Use libsemanage for SELinux label changes
  - Resolves: rhbz#1113784 - sssd should audit selinux user map changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-70
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-69
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1097286 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68
changelog:
  - Resolves: rhbz#1097286 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1090653 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-60
changelog:
  - Resolves: rhbz#1075663 - SSSD should create the SELinux mapping file
                             with format expected by pam_selinux


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-59
changelog:
  - Related: rhbz#1075621 - Add another Kerberos error code to trigger IPA
                            password migration


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-58
changelog:
  - Related: rhbz#1073635 - IPA SELinux code looks for the host in the wrong
                            sysdb subdir when a trusted user logs in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-57
changelog:
  - Related: rhbz#1066096 - not retrieving homedirs of AD users with
                            posix attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-56
changelog:
  - Related: rhbz#1072995 -  AD group inconsistency when using AD provider
                             in sssd-1.11-40


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-55
changelog:
  - Resolves: rhbz#1073631 - sssd fails to handle expired passwords
                             when OTP is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-54
changelog:
  - Resolves: rhbz#1072067 - SSSD Does not cache SELinux map from FreeIPA
                             correctly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-53
changelog:
  - Resolves: rhbz#1071903 - ipa-server-mode: Use lower-case user name
                             component in home dir path


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-52
changelog:
  - Resolves: rhbz#1068725 - Evaluate usage of sudo LDAP provider together
                             with the AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-51
changelog:
  - Fix idmap documentation
  - Bump idmap version info
  - Related: rhbz#1067361 - Check IPA idranges before saving them to the cache


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-50
changelog:
  - Pull some follow up man page fixes from upstream
  - Related: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                            manually, if ID mapping configuration changes
  - Related: rhbz#1064908 - MAN: Remove misleading memberof example from
                            ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-49
changelog:
  - Resolves: rhbz#1060389 - Document that `sssd` cache needs to be cleared
                             manually, if ID mapping configuration changes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-48
changelog:
  - Resolves: rhbz#1064908 - MAN: Remove misleading memberof example from
                             ldap_access_filter example


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-45
changelog:
  - Resolves: rhbz#1067476 - SSSD pam module accepts usernames with leading
                             spaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-44
changelog:
  - Resolves: rhbz#1033069 - Configuring two different provider types might
                             start two parallel enumeration tasks


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-43
changelog:
  - Resolves: rhbz#1068640 - 'IPA: Don't call tevent_req_post outside _send'
                             should be added to RHEL7


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-41
changelog:
  - Resolves: rhbz#1064582 - sss_cache does not reset the SYSDB_INITGR_EXPIRE
                             attribute when expiring users


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-40
changelog:
  - Resolves: rhbz#1033081 - Implement heuristics to detect if POSIX attributes
                             have been replicated to the Global Catalog or not


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-39
changelog:
  - Resolves: rhbz#872177 - [RFE] subdomain homedir template should be
                            configurable/use flatname by default


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-38
changelog:
  - Resolves: rhbz#1059753 - Warn with a user-friendly error message when
                             permissions on sssd.conf are incorrect


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-37
changelog:
  - Resolves: rhbz#1037653 - Enabling ldap_id_mapping doesn't exclude
                             uidNumber in filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-36
changelog:
  - Resolves: rhbz#1059253 - Man page states default_shell option supersedes
                             other shell options but in fact override_shell does.
  - Use the right domain for AD site resolution
  - Related: rhbz#743503 -  [RFE] sssd should support DNS sites


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-35
changelog:
  - Resolves: rhbz#1028039 - AD Enumeration reads data from LDAP while
                             regular lookups connect to GC


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-34
changelog:
  - Resolves: rhbz#877438 - sudoNotBefore/sudoNotAfter not supported by sssd
                            sudoers plugin


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-32
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-31
changelog:
  - Resolves: rhbz#1054899 - explicitly suggest krb5_auth_timeout in a loud
                             DEBUG message in case Kerberos authentication
                             times out


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-29
changelog:
  - Resolves: rhbz#1051360 - [FJ7.0 Bug]: [REG] sssd_be crashes when
                             ldap_search_base cannot be parsed.
  - Fix a typo in the man page
  - Related: rhbz#1034920 - RHEL7 sssd not setting IPA AD trusted user homedir


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-28
changelog:
  - Resolves: rhbz#1054639 - sssd_be aborts a request if it doesn't match
                             any configured idmap domain
  - Fix return value when searching for AD domain flat names
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-26
changelog:
  - Resolves: rhbz#1048102 - Access denied for users from gc domain when
                             using format DOMAIN\user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-25
changelog:
  - Resolves: rhbz#1053106 - sssd ad trusted sub domain do not inherit
                             fallbacks and overrides settings


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-23
changelog:
  - Resolves: rhbz#1033133 - "System Error" when invalid ad_access_filter
                              is used


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-22
changelog:
  - Resolves: rhbz#1032983 - sssd_be crashes when ad_access_filter uses
                             FOREST keyword.
  - Fix two memory leaks in the PAC responder (Related: rhbz#991065)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-21
changelog:
  - Resolves: rhbz#1048184 - Group lookup does not return member with multiple
                             names after user lookup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-17
changelog:
  - Re-initialize subdomains after provider startup
  - Related: rhbz#1038637 - If SSSD starts offline, subdomains list is
                            never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-16
changelog:
  - The AD provider is able to resolve group memberships for groups with
    Global and Universal scope
  - Related: rhbz#1033096 - tokenGroups do not work reliable with Global
                            Catalog


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-15
changelog:
  - Resolves: rhbz#1033096 - tokenGroups do not work reliable with Global
                             Catalog
  - Resolves: rhbz#1030483 - Individual group search returned multiple
                             results in GC lookups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-14
changelog:
  - Resolves: rhbz#1040969 - sssd_nss grows memory footprint when netgroups
                             are requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-13
changelog:
  - Resolves: rhbz#1023409 - Valgrind sssd "Syscall param
                             socketcall.sendto(msg) points to uninitialised
                             byte(s)"


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-11
changelog:
  - Resolves: rhbz#1038637 - If SSSD starts offline, subdomains list is
                             never read


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-10
changelog:
  - Resolves: rhbz#1029631 - sssd_be crashes on manually adding a cleartext
                             password to ldap_default_authtok


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-9
changelog:
  - Resolves: rhbz#1036758 - SSSD: Allow for custom attributes in RDN when
                             using id_provider = proxy


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-7
changelog:
  - Resolves: rhbz#1036157 - sssd can't retrieve auto.master when using the
                             "default_domain_suffix" option in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-6
changelog:
  - Resolves: rhbz#1028057 - Improve detection of the right domain when
                             processing group with members from several domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-5
changelog:
  - Resolves: rhbz#1033084 - sssd_be segfaults if empty grop is resolved
                             using ad_matching_rule


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-4
changelog:
  - Resolves: rhbz#1031562 - Incorrect mention of access_filter in sssd-ad
                             manpage


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-3
changelog:
  - Resolves: rhbz#991549 - sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-2
changelog:
  - Skip netgroups that don't provide well-formed triplets
  - Related: rhbz#991549 -  sssd fails to retrieve netgroups with multiple
                            CN attributes


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
changelog:
  - Resolves: rhbz#1019882 - RHEL7 ipa ad trusted user lookups failed with
                             sssd_be crash
  - Resolves: rhbz#1002597 - ad: unable to resolve membership when user is
                             from different domain than group


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
changelog:
  - New upstream release 1.11.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
  - Resolves: rhbz#991065 - Rebase SSSD to 1.11.0


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
changelog:
  - New upstream release 1.11.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
  - Resolves: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
changelog:
  - New upstream release 1.11 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
  - Related: rhbz#991065


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-5
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-4
changelog:
  - Resolves: #983587 - sss_debuglevel did not increase verbosity in
                        sssd_pac.log


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-3
changelog:
  - Resolves: #983580 - Netgroups should ignore the 'use_fully_qualified_names'
                        setting


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-2
changelog:
  - Apply several important fixes from upstream 1.10 branch
  - Related: #966757 - SSSD failover doesn't work if the first DNS server
                       in resolv.conf is unavailable


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Natalya Naumova <natalya.naumova@oracle.com> 2.0.2-24.0.1
changelog:
  - Fix Empty UUID Workaround
  - Obsolete subscription-manager-plugin-container and subscription-manager-initial-setup-addon
  - Updated public-yum-ol7.repo [ OraBug 26241827 ] (Keshav Sharma)
  - Missing fixes for bug 24659077 [OraBug 24659077]
  - Update ULN-CA-CERT [OraBug 24825502]
  - update public-yum-ol7.repo file [Orabug 24659077]
  - added ceph repository to public-yum-ol7.repo file [Orabug 24910502]
  - enable UEKR4 repository in public-yum-ol7.repo file [Orabug 25031255]
  - Replace Redhat string with ULN
  - do not move repo files [orabug 22230790]
  - added repo entry for 7.2  base  in public-yum repo file.
  - replace up2date.png in tarball [bug 20542844]
  - fix public-yum-ol7.repo [orabug 20281779]
  - fix indentation error in rhnreg_ks/ulnreg_ks [bug 20369398]
  - remove --use-eus-channel option from rhnreg_ks/ulnreg_ks [bug 20369398]
  - Enable rhnreg_ks register to spacewalk server, BZ14791
  - Fixes for RHEL-> ULN Migration
  - Fixed public-yum-ol7.repo file [OraBug 19176214]
  - Added 7.1 entries to public-yum-ol7.repo file [OraBug 20281779]
  - Merge ksplice firstboot plugin from 1.0.0.1-17.0.3.el6
  - Fixed text in rh_register.glade [Orabug 19192726] (Keshav Sharma)
  - Fixed error text in rhnregGui.py [Orabug 19167535] (Keshav Sharma)
  - Added MySQL repositories to public-yum-ol7.repo file. (Keshav Sharma)
  - Fix text in up2date.config file [Orabug 18892489] (Keshav Sharma)
  - Fix url in public-yum.ol7.repo file (Keshav Sharma)
  - Fix firstboot issue [Orabug 18851116] (Keshav Sharma)
  - Fix display text [Orabug 19051197] (Keshav Sharma)
  - Fix public-yum.repo file [Orabug 18380583] (Keshav Sharma)
  - Fix bug 18910928 (Leon Wang)
  - Add ULN-specific changes (Jared Greenwald)
  - Updated public-yum-ol7.repo [Orabug 27696955]
  - Updated public-yum-ol7.repo file for aarch64 [OraBug 27029619] (keshav.sharma@oracle.com)
  - Updated public-yum-ol7.repo
  - Updated public-yum-ol7.repo [Orabug 28375712]
  - Updated replacement ULN-CA-CERT
  - updated public-yum-ol7.repo for 7.6 beta [Orabug 28624952]
  - updated public-yum-ol7.repo for 7.6


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
  - Related: #1494389 - detect if action has been picked up for 2nd time
    (tkasparek@redhat.com)
  - Resolves: #1494389 - revert previous reboot loop changes
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
  - Resolves: #1430298 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
  - Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists with certain identification" (michael.mraka@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
  - Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification1415742 - rhn-search traceback - immediateTrigger-
    server exists with certain identification (eherget@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
  - Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
    changelog (galt@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-14
changelog:
  - Related: #1378903 - fixed BZ ID in a changelog1378903 - fixed BZ ID in a
    changelog (grinrag@gmail.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-13
changelog:
  - Related: #1378903 - uptime report: respect xmlrpc's integer limits1378903 -
    uptime report: respect xmlrpc's integer limits (grinrag@gmail.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-12
changelog:
  - Resolves: #1378903 - uptime report: respect xmlrpc's integer limits994531 -
    uptime report: respect xmlrpc's integer limits (mzazrivec@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-11
changelog:
  - Resolves: #1444764 - sgmlop module might not be available on RHEL 7
    (tkasparek@redhat.com)
  - Resolves: #1439139 - fix import error (tkasparek@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-9
changelog:
  - Resolves: #1371871 - fix UnicodeDecodeError when running rhnreg_ks with a
    different locale than en_US (galt@redhat.com)
  - fix except to be compatible with Python 2.4 (galt@redhat.com)
  - 1260527,1409570 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-7
changelog:
  - Resolves: #1262780 - alow to use existing rpcServer when creating RhnServer
    (jdobes@redhat.com)
  - Resolves: #1292036 - don't mention Spacewalk in rhn-client-tools
    (tkasparek@redhat.com)


author: Milan Zazrivec <mzazrivec@redhat.com> 2.0.2-2
changelog:
  - Related: #1038694 - remove text from registration screen
  - Resolves: #1038694 - new error icon in gnome


author: Stephen Herr <sherr@redhat.com> 1.10.7-1
changelog:
  - 948337 - Make client tools only pass up cpu_socket if server has capability
  - man pages branding cleanup + misc branding fixes


author: Miroslav Suchý <msuchy@redhat.com> 1.10.1-1
changelog:
  - rpm macros must not be marked as config file
  - Bumping package versions for 1.9
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Milan Zazrivec <mzazrivec@redhat.com> 1.9.8-1
changelog:
  - fix reading cpuinfo on s390x
  - try to get the FQDN as hostname
  - Revert "Update rhn_check to send abrt data to the server"
  - Updating copyright for 2012
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Jan Pazdziora 1.9.7-1
changelog:
  - 885170 - provide translations of a new error recieved from Hosted
  - 882174 - read the hostname from /etc/hostname if needed


author: Jan Pazdziora 1.9.5-1
changelog:
  - 876328 - Merging the new translation work form RHEL 6.4
  - Revert "876328 - updating rhel client tools translations"


author: Jan Pazdziora 1.9.3-1
changelog:
  - 876740 - updating error message for rhn_register TUI if SSL cert missing
  - 876328 - updating rhel client tools translations
  - 823551 - Download icon in "Are you sure" screen of rhn_register is incorrect


author: Michael Calmer <mc@suse.de> 1.9.2-1
changelog:
  - check if system id has changed
  - check if /etc/sysconfig/network is a file
  - no hal for openSUSE >= 11.4


author: Jan Pazdziora 1.8.25-1
changelog:
  - Update the copyright year.
  - Update .po and .pot files for rhn-client-tools.
  - New translations from Transifex for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Jan Pazdziora 1.8.21-1
changelog:
  - 823551 - fixing problem with firstboot
  - 823551 - gui and text changes for firstboot and rhn_register
  - 810389 - rhn_register / firstboot gui minor updates
  - 810315 - New "updates availabe" screenshot for firstboot
  - 851657 - polish registration strings
  - 855992 - make rhn-channel smart enough to use proxy if configured
  - 855883 - rhn_check: use gettext correctly when needed


author: Miroslav Suchý 1.8.5-1
changelog:
  - fix files header, filese are not released under GPLv2+ but only GPLv2
  - fix files headers. our code is under gplv2 license
  - %defattr is not needed since rpm 4.4


author: Jan Pazdziora 1.8.2-1
changelog:
  - 804559 - not all msgs are CommunicationError objects (mzazrivec@redhat.com)
  - 804559 - correct string catenation (mzazrivec@redhat.com)


author: Miroslav Suchý 1.8.1-1
changelog:
  - fix typo in man page
  - 772070 - classic hosted alignment is no longer needed (mzazrivec@redhat.com)
  - 772070 - firstboot gui re-design (mzazrivec@redhat.com)
  - 772070 - correct button text (mzazrivec@redhat.com)
  - 772070 - new title for "cannot contact server" dialog (mzazrivec@redhat.com)
  - 799926 - correct path to rhsm's certlib (mzazrivec@redhat.com)
  - Bumping package versions for 1.8. (jpazdziora@redhat.com)


author: Jan Pazdziora 1.7.13-1
changelog:
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý 1.7.4-1
changelog:
  - 746983 - in spacewalk_channel print to STDERR only error message, TB + error
    goes to log file
  - 745095 - provide virtualization info when registering via rhn_register
    (tlestach@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.7.3-1
changelog:
  - 748876 - convert paths to absolute before saving
  - 748876 - simplify ConfigFile.save() loop
  - 751893 - fix typo


author: Miroslav Suchý 1.7.2-1
changelog:
  - 771167 - verify login/password just after user will file it in
  - do not print yum-rhn-plugin warning if zypp-plugin is used
  - removed dead remaining_subscriptions() (michael.mraka@redhat.com)


author: Miroslav Suchý 1.6.39-1
changelog:
  - IPv6: first try findHostByRoute() and then try getaddrinfo()
  - IPv6: assign to hostname only if we are unable to resolve it
  - IPv6: IPv4 is most probably set up better, lets overwrite IPv6 values (if
    mismatch)
  - 743259 - take hostname of client instead of server


author: Miroslav Suchý 1.6.38-1
changelog:
  - define __init__, __getattribute__, __setattr__ on Debian and workaround those
    mising methods on RHEL5


author: Miroslav Suchý 1.6.34-1
changelog:
  - call parent's constructor
  - 751760 - use attribute value, which our ancestor use
  - correctly assign converted unicode string
  - correctly check for unicode type


author: Miroslav Suchý 1.6.26-1
changelog:
  - 627809 - send xen virtual block devices to rhnParent
  - Revert "729161 - default to RHSM in firstboot registration"
    (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.25-1
changelog:
  - 743259 - RHEL5 now has python-ethtool 0.6 - simplify code
  - 743259 - get_ipv6_addresses does not return one item, but list
  - 745438 - up2date_config: use localhost to avoid confusion
    (mzazrivec@redhat.com)


author: Jan Pazdziora 1.6.12-1
changelog:
  - 729161 - default to RHSM in firstboot registration (mzazrivec@redhat.com)
  - 729468 - firstboot dialogs polishing (mzazrivec@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.6.6-1
changelog:
  - 710065 - handle unicode log messages
  - 710065 - handle unicode error messages
  - merged duplicated code to NoLogError class
  - moved duplicated code to base Error class
  - 684250 - correct priority for initial registration screen


author: Jan Pazdziora 1.6.2-1
changelog:
  - 713548 - enable running rhn-channel on RHEL5 (tlestach@redhat.com)
  - 713548 - enable running rhn-channel against both RHN and RHN Satellite
    (tlestach@redhat.com)


author: Jan Pazdziora 1.6.1-1
changelog:
  - The rhn-client-tools/doc/releases.txt is out of date, removing.
  - We only support version 5 and newer of RHEL, removing conditions for old
    versions.
  - We only support version 14 and newer of Fedora, removing conditions for old
    versions.


author: Jan Pazdziora 1.5.16-1
changelog:
  - Merging Transifex changes for rhn-client-tools.
  - Fixing the `msgid' and `msgstr' entries do not both end with '\n' bug.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý 1.5.13-1
changelog:
  - forward port translation from RHEL6 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)


author: Miroslav Suchý 1.5.11-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_TW (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_CN (msuchy@redhat.com)
  - fix typo in te.po (msuchy@redhat.com)


author: Jan Pazdziora 1.5.10-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - Download translations from Transifex for rhn-client-tools (msuchy@redhat.com)


author: Miroslav Suchý 1.5.8-1
changelog:
  - 683200 - u'foo'.decode('utf-8') does not work, while unicode(u'foo') works
    and is idempotent (msuchy@redhat.com)
  - 683200 - if I want url in unicode, I must us decode - remember that
    (msuchy@redhat.com)


author: Jan Pazdziora 1.5.3-1
changelog:
  - modify spec file to build rhn-client-tools on SUSE (mc@suse.de)
  - get model id from PRODUCT key (msuchy@redhat.com)
  - <type exceptions.UnboundLocalError>: local variable usb referenced before
    assignment (msuchy@redhat.com)


author: Jan Pazdziora 1.5.2-1
changelog:
  - Revert "some usb device may not return product" (msuchy@redhat.com)
  - fix typo in key "product" vs. "PRODUCT" (msuchy@redhat.com)
  - some usb device may not return product (msuchy@redhat.com)


author: Miroslav Suchý 1.5.1-1
changelog:
  - enhance getOSVersionAndRelease to find SUSE distributions (mc@suse.de)
  - Bumping package versions for 1.5 (msuchy@redhat.com)


author: Miroslav Suchý 1.4.13-1
changelog:
  - update copyright years (msuchy@redhat.com)
  - download spacewalk.rhn-client-tools from Transifex (msuchy@redhat.com)


author: Simon Lukasik <slukasik@redhat.com> 1.4.12-1
changelog:
  - Move code for enabling yum-rhn-plugin to separate module
    (slukasik@redhat.com)
  - Extract method: setDebugVerbosity (slukasik@redhat.com)
  - Introduce pkgUtils as an abstraction of either debUtils or rpmUtils
    (slukasik@redhat.com)
  - Introduce Debian equivalent of rpmUtils. (slukasik@redhat.com)
  - Removing packages.verifyAll capability; it was never used.
    (slukasik@redhat.com)
  - OS information is platform dependent; introducing a platform interface.
    (slukasik@redhat.com)
  - versionOverride applies only to version; moving to getVersion
    (slukasik@redhat.com)
  - Updated unittests (slukasik@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.6-1
changelog:
  - 684245 - lookup of the subscription-manager page via localized title is
    volatile, let's use its __module__ name. (jpazdziora@redhat.com)
  - 624748 - report virtual network interfaces (mzazrivec@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.4-1
changelog:
  - 683546 - optparse isn't friendly to translations in unicode
  - update .po files
  - 679217 - mention subscription manager as alternative to rhn_register


author: Miroslav Suchý <msuchy@redhat.com> 1.4.3-1
changelog:
  - Revert "provide path to puplet-screenshot.png" (msuchy@redhat.com)
  - 666860 - remove glade warnings (msuchy@redhat.com)
  - provide path to puplet-screenshot.png (msuchy@redhat.com)
  - move <accessibility> in front of <signal> (msuchy@redhat.com)
  - 580479 - do not let combo box to fill available space (msuchy@redhat.com)
  - 651792 - if system is not registered, print nice error insted of TB
    (msuchy@redhat.com)
  - 651857 - fix typo in variable name (msuchy@redhat.com)
  - 671039 - do not Traceback if system was never registered (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.1-1
changelog:
  - fix typo
  - 671039 - add warning about subsription manager to TUI part of rhn_register
  - 671039 - add warning about subsription manager to GUI part of rhn_register
  - l10n: Updates to German (de) translation (delouw@fedoraproject.org)
  - 671041 - substitute RHN with "RHN Satellite or RHN Classic"
  - 671032 - disable rhnplugin by default and enable it only after successful
    registration
  - Bumping package versions for 1.4 (tlestach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.11-1
changelog:
  - break circular import
  - 580479 - put new submodule into package
  - W: 28: Unused import glade
  - 580479 - Graphical firstboot should offer EUS channel selection
  - 581482 - make tui consistent with gui
  - 596108 - firstboot: don't allow multiple system registrations
  - 606222 - label could not have focus


author: Tomas Lestach <tlestach@redhat.com> 1.3.10-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhn-client-tools (tlestach@redhat.com)
  - 602609 - fix DeprecationWarning when using gtk.MessageDialog()
    (mzazrivec@redhat.com)
  - 617066 - fix "Why register" dialog size (msuchy@redhat.com)
  - 667739 - use accessibility tags (msuchy@redhat.com)
  - 626752 - correct virt. type detection for RHEL-6 FV Xen guests
    (mzazrivec@redhat.com)
  - 651403 - reference to RHEL6 as actuall system (msuchy@redhat.com)
  - dead code: removal of function foobar() (msuchy@redhat.com)
  - 649233 - reset busy mouse cursor back to arrow after unexpected error
    (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.9-1
changelog:
  - Revert "update .po and .pot files for rhn-client-tools"
  - Revert "removing msgctxt which rhel5 could not handle"


author: Miroslav Suchý <msuchy@redhat.com> 1.3.7-1
changelog:
  - update .po and .pot files for rhn-client-tools
  - 651789 - fail if adding/removal of channels fail
  - 651792 - list all available child channels related to system
  - localize spacewalk-channel script
  - 651857 - print error if you specify --add or --remove, but you do not specify
    any channel
  - 651857 - removing forgotten lines, which makes no sense and cause TB
  - 652424 - return back useNoSSLForPackages option
  - 668809 - mention the requirement to use FQDN


author: Miroslav Suchý <msuchy@redhat.com> 1.3.1-1
changelog:
  - 655310 - replace gethostbyname by getaddrinfo (msuchy@redhat.com)
  - 655310 - send IPv6 addresses to server (msuchy@redhat.com)
  - 481721 - _ts report epoch as int, but satelite and rhn use string, this does
    not work for comparement like pkg in [['name', 'version', 'release', 'epoch',
    'arch']..] (msuchy@redhat.com)
  - Bumping package versions for 1.3. (jpazdziora@redhat.com)


author: Jan Pazdziora 1.2.11-1
changelog:
  - Update copyright years in the rest of the repo.
  - update .po and .pot files for rhn-client-tools
  - require versions which can handle cache_only (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.2.8-1
changelog:
  - 638981 - encode smbios data before sending over xmlrpc (msuchy@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.2.7-1
changelog:
  - 632203 - fix comment to corespond with code, decoding unicode to unicode
    produce traceback (msuchy@redhat.com)
  - l10n: Updates to Oriya (or) translation (mgiri@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Jan Pazdziora 1.2.6-1
changelog:
  - 603028 - when checking package architecture during errata update, allow
    transition to and from noarch.


author: Michael Mraka <michael.mraka@redhat.com> 1.2.4-1
changelog:
  - 559797 - fixed configuration file name
  - Sort the available channels so that the listing is not random.


author: Michael Mraka <michael.mraka@redhat.com> 1.2.2-1
changelog:
  - 625778 - require newer yum-rhn-plugin
  - 554693 - networkRetries should be positive number
  - l10n: Updates to Russian (ru) translation
  - l10n: Updates to Telugu (te) translation


author: Milan Zazrivec <mzazrivec@redhat.com> 1.2.1-1
changelog:
  - 623137 - merge translated strings with .desktop file (mzazrivec@redhat.com)
  - update .po and .pot files for rhn-client-tools (msuchy@redhat.com)


author: Milan Zazrivec <mzazrivec@redhat.com> 1.1.14-1
changelog:
  - 618267 - all data in F12+ should be in unicode, lets decode it
  - 619098 - take manufacturer from system group
  - 618267 - add missing import and foo
  - update .po files
  - Revert "update .po files"
  - 618267 - encode latin-1 characters to unicode
  - 617425 - add missing 'the's
  - 617425 - point the user to the correct menu item
  - add man page for rhn-channel as alias for spacewalk-channel
  - default for kwargs should be {}
  - update .po files
  - 616371 - typo fix
  - add parameter cache_only to up2date_config.* actions
  - enable caching for action errata.update


author: Miroslav Suchý <msuchy@redhat.com> 1.1.13-1
changelog:
  - add parameter cache_only to all client actions (msuchy@redhat.com)
  - simplify code (msuchy@redhat.com)
  - put parser of action xml to separate function (msuchy@redhat.com)
  - l10n: Updates to Italian (it) translation (fvalen@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.12-1
changelog:
  - we want to pre-cache if server *has* staging ability (msuchy@redhat.com)
  - use correct rhnserver class (msuchy@redhat.com)
  - l10n: Updates to Swedish (sv) translation (goeran@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.11-1
changelog:
  - 614389 - add missing import (msuchy@redhat.com)
  - basic framework for prefetching content from spacewalk (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.10-1
changelog:
  - 604106 - finish page should be loaded even without network
    (msuchy@redhat.com)
  - 612547 - update copyright clauses up until 2010. (jpazdziora@redhat.com)
  - 607599 - prevent firstboot from show_all()-ing what we have hidden.
    (jpazdziora@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.9-1
changelog:
  - Clean up a few remaining references to kbase 6227
    (joshua.roys@gtri.gatech.edu)
  - 604101 - kbase article 6227 changed name & location (mzazrivec@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.7-1
changelog:
  - l10n: Updates to Chinese (China) (zh_CN) translation
    (leahliu@fedoraproject.org)
  - 601683 - properly import get_computer_info routine (mzazrivec@redhat.com)
  - 596237 - use correct constant in HardwareWindow (tui) (mzazrivec@redhat.com)
  - 596237 - use constants in SendingWindow (mzazrivec@redhat.com)
  - 596237 - use constants in SendWindow (mzazrivec@redhat.com)
  - 596237 - use constants in PackagesWindow (mzazrivec@redhat.com)
  - 596237 - use constants in HardwareWindow (mzazrivec@redhat.com)
  - 596237 - use constants in OSReleaseWindow & AlreadyRegisteredWindow
    (mzazrivec@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - 600316 - don't traceback for zero subscribed channels (mzazrivec@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Spanish (Castilian) (es) translation
    (gguerrer@fedoraproject.org)
  - 598890 - always return product version as string (mzazrivec@redhat.com)
  - l10n: Updates to Spanish (Castilian) (es) translation
    (gguerrer@fedoraproject.org)
  - Remove three more exceptions that are not used in our code base.
    (jpazdziora@redhat.com)
  - The rhn-client-tools ChangeLog has't been updated since 2002, removing.
    (jpazdziora@redhat.com)
  - Removing WarningDialog, OkDialog, and QuestionDialog that are not used in our
    code. (jpazdziora@redhat.com)
  - Remove 23 exceptions that are not used in our code base.
    (jpazdziora@redhat.com)
  - Method resetServerList not used in our code, removing.
    (jpazdziora@redhat.com)
  - When startRhnCheck was replaced by spawnRhnCheckForUI, it became unused,
    removing. (jpazdziora@redhat.com)
  - Method getFailedSystemSlots not used in our code, removing.
    (jpazdziora@redhat.com)
  - get_device_property not used in our code, removing. (jpazdziora@redhat.com)
  - termsAndConditions not used in our code, removing. (jpazdziora@redhat.com)
  - sat_supports_virt_guest_registration not used in our code, removing.
    (jpazdziora@redhat.com)
  - finishMessage not used in our code, removing. (jpazdziora@redhat.com)
  - When autoActivateNumbersOnce was removed, autoActivatedHardwareInfo was made
    unused, removing. (jpazdziora@redhat.com)
  - When ActivateSubscriptionPage was removed, activatedRegistrationNumber was
    made unused, removing. (jpazdziora@redhat.com)
  - 597263 - give the focus to the ButtonBar (and thus to the Yes button), to
    behave as RHEL 5 did. (jpazdziora@redhat.com)
  - 596101 - skip the chooseChannelPage when going Back as well, if it should not
    be shown. (jpazdziora@redhat.com)
  - 596102 - fit hw profile into a 2x6 table (mzazrivec@redhat.com)
  - 595688 - cancel busy cursor after ValidationError (michael.mraka@redhat.com)
  - 595837 - write nice error in case of "connection reset by peer" and xmlrpc
    protocol error (msuchy@redhat.com)
  - 585188 - we need to implement fatalError for loginPageApply and
    createProfilePageApply. (jpazdziora@redhat.com)
  - Remove except which cannot be reached. (jpazdziora@redhat.com)
  - 585188 - refactor the RHN Register firstboot code to match firstboot 1.110 on
    Fedora 12 and RHEL 6. (jpazdziora@redhat.com)
  - 585188 - only install legacy firstboot on RHEL 5 (and earlier), the new
    firstboot for other systems. (jpazdziora@redhat.com)
  - 585188 - the firstboot modules for RHEL 5 shall retire in firstboot-legacy-
    rhel5. (jpazdziora@redhat.com)
  - 593194 - fix creating the $(PREFIX)/usr/share/setuptool/setuptool.d when
    building the package. (jpazdziora@redhat.com)
  - 595669 - fix regexp and do not fail if regexp do not match
    (msuchy@redhat.com)
  - whitespace cleanup (msuchy@redhat.com)
  - We don't need hwdata target anymore (mzazrivec@redhat.com)
  - 580493 - use correct product logos in rhn_register (gui)
    (mzazrivec@redhat.com)
  - 557059 - do not fail on IBM-ESXS controler where ID_PATH is not set
    (msuchy@redhat.com)
  - 580489 - fix requires for rhn-setup-gnome (mzazrivec@redhat.com)
  - python-hwdata finaly made it into Fedora and Epel so we can remove from this
    package and depend on python-hwdata (msuchy@redhat.com)
  - 593194 - 99rhn_register to add RHN Register to setup's list of tools.
    (jpazdziora@redhat.com)
  - The bugzilla 556290 had errata released, python-setuptools should be pulled
    in by python-coverage. (jpazdziora@redhat.com)
  - 584780 - move the firstboot _gui.* files to rhn-setup-gnome.
    (jpazdziora@redhat.com)
  - 557059 - we cannot have class None. (jpazdziora@redhat.com)
  - 591798  - Completly remove hal code from rhn-client-tools for F-13 and RHEL-6
    (msuchy@redhat.com)
  - 591422 - add hwdata.py to rhn-client-tools. (jpazdziora@redhat.com)
  - l10n: Updates to German (de) translation (ttrinks@fedoraproject.org)
  - l10n update .pot and .po files for rhn-client-tools (msuchy@redhat.com)
  - l10n - translate desktop file too (msuchy@redhat.com)
  - cleanup - removing translation file, which does not match any language code
    (msuchy@redhat.com)
  - update po files for rhn-client-tools (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.0.1-1
changelog:
  - 585386 - set properly acl for /var/spool/up2date/loginAuth.pkl
  - make read_cpuinfo() more readable


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
changelog:
  - Update to 1.4.22 (CVE-2012-2942, #824544)
  - Use linux2628 build target
  - No separate x86_64 build target for halog
  - halog build honors rpmbuild optflags
  - Specfile cleanup


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
changelog:
  - update to 1.3.15.6
  - use new build targets from upstream
  - add in recommended build options for x86 from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
changelog:
  - update to 1.3.14.6
  - remove gcc 4.3 patch, it has been applied upstream
  - remove MIT license as that code has been removed from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
changelog:
  - update to 1.3.14.2
  - update make flags that changed with this upstream release
  - added man page installation


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
changelog:
  - switch to 1.3.12.1 branch
  - add patch from upstream with O'Reilly licensing updates.
  - convert ISO-8859-1 doc files to UTF-8


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Tom Lane <tgl@redhat.com> 1.2.3-0.1.c1
changelog:
  - Update to release candidate 1.2.3c1 for better mysql 5.1 and python 2.6
    compatibility
  Resolves: #505611
  - Use python-setuptools instead of distutils, stop using old setup.py
  Resolves: #467510
  - Remove unnecessary manual Requires: specifications
  Resolves: #507750


author: Tom Lane <tgl@redhat.com> 1.2.2-3
changelog:
  - Ooops, previous fix for quoting bug was wrong, because it converted the
    version_info tuple to a string in Python's eyes
  Resolves: #246366


author: Karsten Hopp <karsten@redhat.de> 1.2.0-2
changelog:
  - package all python files. INSTALLED_FILES doesn't contain files created
    by the brp-python-bytecompile script


author: Patrick Macdonald <patrickm@redhat.com> 0.9.1-7
changelog:
  - explicitly define the constants directory in case a more
    restrictive umask is encountered (#74019)


author: Petr Pisar <ppisar@redhat.com> 0.003-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Do not build-require File::Find, Socket, and warnings::register which are
    not exercised by tests
  - Sort provides by English rules


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
  - New version
    Resolves: rhbz#966639
  - Updated and defuzzified patches
  - Still use lua-5.1 (fedoras < f20)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.4-2
changelog:
  - Fixed mixed tabs and spaces rpmlint warning
  - Fixed tcl-site configure option (upstream ticket #281)
  - Removed Rpath from Ruby
  - Enabled Lua bindings (#656080), thanks to Tim Niemueller


author: Jarod Wilson <jwilson@redhat.com> 1.3.2-1
changelog:
  - Update to rrdtool 1.3.2
    * fixes a data corruption bug when rrd wraps around
    * make imginfo behave the same as docs say it does
    * fixes for numerous memory leaks


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.15.rc1
changelog:
  - Update to rrdtool 1.3 rc1
  - Fix versioning in changelog entries, had an extra 0 in there...
  - Drop cairo and python patches, they're in 1.3 rc1
  - Add Requires: gettext and libxml2-devel for new translations


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.3.beta3
changelog:
  - Update to rrdtool 1.3 beta3
  - Return properly from errors in RRDp.pm (Resolves: #427040)
  - Requires: dejavu-lgc-fonts (Resolves: #426935)


author: Jarod Wilson <jwilson@redhat.com> 1.2.15-3
changelog:
  - One more addition to initrrdtool patch, to fully revert
    and correct upstream changeset 839
  - Fix for no python in minimal fc4 buildroots


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-2
changelog:
  - Remove explicit perl dep, version grabbing using rpm during
    rpmbuild not guaranteed to work (fails on ppc in plague),
    and auto-gen perl deps are sufficient


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-1
changelog:
  - Update to release 1.2.13
  - Merge spec changes from dag, atrpms and mdk builds
  - Additional hacktastic contortions for lib64 & rpath messiness
  - Add missing post/postun ldconfig
  - Fix a bunch of rpmlint errors
  - Disable static libs, per FE guidelines
  - Split off docs


author: Matthias Saou <http://freshrpms.net/> 1.0.49-4
changelog:
  - Fix for the php module patch (Joe Pruett, Dag Wieers), #156716.
  - Update source URL to new location since 1.2 is now the default stable.
  - Don't (yet) update to 1.0.50, as it introduces some changes in the perl
    modules install.


author: Matthias Saou <http://freshrpms.net/> 1.0.46-1
changelog:
  - Update to 1.0.46.
  - Use system libpng and zlib instead of bundled ones.
  - Added php-rrdtool sub-package for the php4 module.


author: Matthias Saou <http://freshrpms.net/> 1.0.45-4
changelog:
  - Added epoch to the perl dependency to work with rpm > 4.2.
  - Fixed the % escaping in the perl dep.


author: Jan Grulich <jgrulich@redhat.com> - 19-23.9
changelog:
  - Check if we have write access to home directory before creating default folders
    Resolves: bz#1579764


author: Martin Briza <mbriza@redhat.com> 19-17.2
changelog:
  - so depending on /lib/systemd/systemd-multi-seat-x is considered a broken dependency - kdm depends on systemd instead


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 19-7
changelog:
  - port 11-fedora-kde-policy from old pkla format to new polkit-1 rules (#829881)
  - nepomukstrigirc: index translated xdg-user-dirs (dvratil, #861129)


author: Rex Dieter <rdieter@fedoraproject.org> - 19-1
changelog:
  - reset Version to match target fedora release (19)
  - kdm.pam: pam_gnome_keyring.so should be loaded after pam_systemd.so (#852723)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8-15
changelog:
  - qt-settings does NOT fully quallify path to lspci in /etc/profile.d/qt-graphicssystem.{csh,sh} (#827440)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8-4
changelog:
  - kdmrc: GreetString=Fedora 17 (Beefy Miracle)
  - kdmrc, ksplashrc, plasmarc: s/Verne/BeefyMiracle/g (for the artwork themes)
  - bump system_kde_theme_ver to 16.91


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8-2
changelog:
  - allow org.kde.kcontrol.kcmclock.save without password for wheel again
  - Requires: polkit (instead of polkit-desktop-policy)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7-13.3
changelog:
  - -ksplash: Requires: system-ksplash-theme >= 15.90
  - -plasma: Requires: system-plasma-desktoptheme >= 15.90


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.7-7
changelog:
  - ship the Plasma RPM dependency generators only on F17+
  - use xz tarball
  - don't rm Makefile, no longer in the tarball
  - set up a folder view on the desktop by default for new users (#740676)
  - kdmrc: set MinShowUID=-1 (use /etc/login.defs) instead of 500 (#717115)
  - -kdm: Requires: kdm >= 4.7.1-2 (required for MinShowUID=-1)


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-10
changelog:
  - konq webbrowsing profile: start.fedoraproject.org
  - konq tabbedbrowsing : start.fedoraproject.org, fedoraproject.org/wiki/KDE


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-6
changelog:
  - use lovelock-kdm-theme
  - /var/log/kdm.log is never clean up (logrotate) (#682761)
  - -kdm, move xterm dep to comps (#491251)


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-4
changelog:
  - de-Laughlin-ize theming, be genericish/upstream (for now)
  - kcminputrc: theme=dmz-aa, Requires: dmz-cursor-themes (#675509)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4-10
changelog:
  - move /etc/kde/kdm/backgroundrc => /var/lib/kdm/backgroundrc (#522513)
  - own /var/lib/kdm (regression, #442081)


author: Jon Ciesla <limburgher@gmail.com> - 0.50.2-1
changelog:
  - Latest stable release.
  - Merge review BZ 225902 fixes:
  - Removed Obsoletes/Provides for xml-i18n-tools.
  - Swapped gettext/gettext-devel Requires, BuildRequires.
  - Added %check section.


author: Alon Levy <alevy@redhat.com>
changelog:
  - Update to 0.50.0
  - Drop patch carried for bz#568845 (schemas-merge) per last comment
    in that bug.


author: Matthias Clasen <mclasen@redhat.com> - 0.36.0-1
changelog:
  - Update to 0.36.0
  - Update license field
  - Drop patch rejected, obsolete and upstreamed patches
  - Some spec file cleanups
  - Require automake


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 0.14
  - Try again on DBM fix
  - Patch to use AnyDBM_File rather than NDBM_File for caching
  - Version 0.14


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - Shorter summary
  - Remove empty post/postun scripts
  - Don't define name and ver on the top and use this in the headers later


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up files list so that there aren't non-standard dirs and so
    that it owns the xml-i18n-tools dir


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
  - attempt to fix segfault while passing messages to widgets (#907045, #912033)
  - fix possible segfault when freeing a VFS (#923415)


author: Jindrich Novy <jnovy@redhat.com> 4.8.6-2
changelog:
  - sanitize of MC_EXT_SELECTED variable when viewing
    multiple files, CVE-2012-4463 (#862814)
    https://www.midnight-commander.org/ticket/2913


author: Jindrich Novy <jnovy@redhat.com> 4.7.5-0.2.pre1
changelog:
  - fix crash in opening mc VFS (#661290, #588795, #653156)
  - fix crash while creating a VFS timestamp (#660308)


author: Jindrich Novy <jnovy@redhat.com> 4.7.3-4
changelog:
  - fix segfault when pressing Cancel in Replace String dialog (#629847)
  - show proper contents in history and fix memleak (ticket #2299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.3-3
changelog:
  - fix broken directory copying, backport from upstream (#624973)
  - backport patch fixing crash while copying files to directory
    with '?' letters in its name (#576622)


author: Jindrich Novy <jnovy@redhat.com> 4.7.1-3
changelog:
  - patches from upstream:
    - fix crash in mcedit ran stand-alone (#571570)
    - fix segfault when trying to panelize find results (#569823)


author: Jindrich Novy <jnovy@redhat.com> 4.7.0-0.9.pre4.20091221git
changelog:
  - provide yum-repo.syntax (#549014)
  - avoid occasional crash while reading panels (#548987)
  - remove duplicates from filelist
  - enable mcvfs, disable rpath


author: Jindrich Novy <jnovy@redhat.com> 4.6.99-0.20090731git
changelog:
  - update to latest GIT mc
  - forwardport prompt fix and exit patch, keep IPv6 patch and drop the others


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-11
changelog:
  - update to mc-4.6.2 release
  - drop .8bit-hex, .preserveattrs, .cloexec, .7zip and part of
    .utf8-look-and-feel patch, applied upstream
  - sync the rest of patches, adopt upstream version of UTF8 patch
  - update URL and source links
  - add required BR


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-10.pre1
changelog:
  - fix segfault in mc editor when pressing ctrl+right (skip one word)
    in binary file (#500818)
  - don't use dpkg tools for *.deb files (#495649), thanks to Dan Horak


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-7.pre1
changelog:
  - allow switching of trailing spaces/tab highlighting with crtl-v,
    patch from Jan Engelhardt (#464738)
  - update the UTF-8 patch accordingly


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-6.pre1
changelog:
  - do not change directory in panel to subshell directory
    when switched back from subshell (#460633)


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-5.pre1
changelog:
  - don't try to parse obsolete RPM tags in RPM VFS (#457912),
    thanks to Milan Broz
  - use correct extension for lzma and regenerate so that it applies
    with fuzz==0


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-3.pre1
changelog:
  - don't segfault when hint or help files are missing (#439025),
    thanks to Tomas Heinrich
  - fix displaying of 8bit encoded files in UTF-8 (#426756),
    thanks to Andrew Zabolotny
  - don't gzip man pages, leave it to brp-compress


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-1.pre1
changelog:
  - update to 4.6.2-pre1
  - forwardport the UTF-8 patch to 4.6.2-pre1 and convert new
    functionality to support UTF-8


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-50
changelog:
  - don't preserve attributes in copy/move while the option is
    switched off (#195614)
  - rebuild to fix iso9660 vfs because of missing gawk in
    buildroot(#381751, #363611)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-46
changelog:
  - update to new upstream CVS snapshot (2007-06-04-22)
  - don't print prompts multiple times when switching
    between mc and subshell


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-43
changelog:
  - display free space correctly for multiple filesystems (#225153)
    (thanks to Tomas Heinrich for patch)
  - fix up configs


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-40
changelog:
  - update to new upstream CVS snapshot
  - drop upstreamed tmpcrash patch
  - reenable gpm support as it is now fixed (#168076)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-37
changelog:
  - update bindings
  - attempt to fcntl() descriptors appropriatelly so that subshell
    doesn't leave them open while execve()ing commands (#217027)
  - more general fix for #215909


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-35
changelog:
  - update to new CVS snapshot
  - drop .fishfix, .rpmconf patches, applied upstream
  - fix IPv6 patch (should fix #206234 and #213212)
  - don't crash when directory ending with newline is listed (#215909),
    disable support for directories with '\n' in name to avoid
    further issues (remove .uglydir patch) and report chdir error


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-34
changelog:
  - fix #214255 - sh vfs disconnects with special character in filename
  - drop fish-upload patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-27.fc6
changelog:
  - display hex values correctly even for non-UTF8 locales, thanks
    to Egmont Koblinger
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-24.fc6
changelog:
  - fix segfault caused by improper parsing of ls output while
    deleting files via shell link (#202623)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-23.fc6
changelog:
  - update to new mc CVS snapshot
  - drop .case, .rpmobsolete patches - applied upstream
  - allow exit command even on non-local filesystems (#202440)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-22
changelog:
  - use less ugly UTF-8 special characters for scrollbars
  - properly highlight RPM tags that differ in case while
    editing spec file


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-21
changelog:
  - update to new mc snapshot (fixes #195810)
  - drop .segfault patch, applied upstream
  - highlight "Serial:" and "Copyright:" obsolete RPM tags so that
    everyone is aware it's obsolete


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-18
changelog:
  - apply 00-74, 00-78 patches from Egmont Koblinger with
    UTF-8 fixes related to filename truncation and file search


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-17
changelog:
  - apply UTF-8 fixes from Vladimir Nadvornik
  - move the free space widget to the bottom of the main panel
    and don't use highlighting


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-16
changelog:
  - fix the free space widget patch: stat()s filesystem less
    frequently, display correct info in all circumstances


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-13
changelog:
  - comment fallback to use only dd in FISH upload patch
  - drop .promptfix patch so that prompt is displayed only
    once while in panels


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-9
changelog:
  - fix hotkey conflict in Layout options (#183282)
  - move syntax configuration file from /usr/share/mc to /etc/mc
  - save layout settings pernamently for showing free space, not
    only for current session (#182127)
  - fix audio bindings, make firefox default html binding


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-8
changelog:
  - make mc FHS compliant: store config files in /etc/mc and
    extfs/*.ini files in /etc/mc/extfs instead of /usr/share/mc
    (#2188) - the oldest open Red Hat bug is now gone ;)
  - fix warnings


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-7
changelog:
  - update from CVS - fixes syntax file for PHP
  - make displaying of free space configurable
  - fix permission highlighting (#177100)
  - redirect stdout and stderr of several apps run on background
    to /dev/null to not to mess up mc interface (#178833)
  - refresh directories to avoid errors caused by copying
    files to non-existent directories (#177111)
  - add an option to insert changelog entry in mcedit,
    thanks to Radek Vokal


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-6
changelog:
  - display free space on a device assigned to current directory in
    main panels
  - correctly diplay characters in mcview for non-UTF-8 LANG set (#174007)
    thanks to Dmitry Butskoy


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-5
changelog:
  - correctly concatenate directory and file in concat_dir_and_file()
  - highlight PHP files correctly (#174802)
  - use evince instead of gv to view ps files
  - align mini status bar with main panels


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-4
changelog:
  - don't segfault when LANG is not set, thanks to Andy Shevchenko (#174070)
  - drop specsyntax patch, applied upstream
  - sync NVRE with Fedoras
  - depend on external slang [now updated to 2.0.5] (#174662)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.23
changelog:
  - update from CVS to fix the usage of glibc private symbols
  - don't try to display UTF8ized characters in hex viewing mode
    and display the characters correctly (#173309)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.22
changelog:
  - update from upstream CVS for the new slang support
  - use internal slang-2.0.5 in mc for now
  - temporarily drop slang-devel dependency
  - don't use gpm to avoid hangs caused by it (#168076, #172921),
    console mouse support works even without gpm
  - display scrollbars correctly even if UTF-8 locale isn't set (#173014)
  - add slang2 support to utf8 patch (Leonard den Ottolander)
  - update %description


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.21
changelog:
  - add vertical scrollbars to main panels and listboxes
  - fix memleak in menu.c caused by UTF-8 patch
  - display UTF-8 characters corectly in mcview (#172571)
  - fix extensions patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.19
changelog:
  - update from CVS
  - convert spec to UTF-8
  - sync utf8, promptfix, 64bit patches
  - drop upstreamed gcc4, ftpcrash, find, symcrash, cstrans, searchfix patches
  - drop ctrl-t patch
  - update userhost patch to let the edited/viewed file name be displayed in
    xterm title


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.18
changelog:
  - fix off-by-one highlighting when searching backwards in mcedit (#169823)
  - fix yet another duplicates in menus for Czech locale


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.17
changelog:
  - fix duplicated keyboard shortcuts in menus for Czech locale (#169734)
  - fix ctrl-t page code recoding for Russian locale, thanks to
    Andy Shevchenko (#163594)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.16
changelog:
  - fix memory leak in mc-utf8 patch, thanks to Marcin Garski (#169549)
  - fix mc-find patch to support UTF-8, thanks to Victor Abramoff (#169531)
  - remove bogus condition from mc-symcrash patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.15
changelog:
  - fix segfault when copying symlinks of a particular type and
    fix creation of dangled symlinks (#168184)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.14
changelog:
  - backport the new Find dialog from upstream (#167493)
  - disable Xorg usage and drop the dependency
  - enable samba vfs
  - highlight "%check" in spec files (Mike A. Harris)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.13
changelog:
  - don't hang when ftpfs connection times out - Hans de Goede (#166976)
  - fix extension file to better fit FC (xpdf->evince, lynx->links)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.10
changelog:
  - update from CVS
  - sync with .utf8 patch and some minor gcc4 fixups
  - add .fixes patch
  - drop upstreamed .spaceprompt patch
  - update .userhost, .64bit patch
  - add mcview


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.9
changelog:
  - update from CVS
  - sync with .utf8 patch
  - fix broken charset conversion feature in the .utf8 patch, 
    Andrew V. Samoilov (#154516)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.6
changelog:
  - fix refusal to chdir/start file action when spaces are typed in
    command prompt and Enter is pressed (#151637)
  - undefinition of umode_t for ppc64 is no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.5
changelog:
  - update from CVS
  - sync the .utf8 patch with upstream
  - fix infinite loop hang when copying/deleting some strangely
    named files (#150569)
  - drop BuildRequires to gettext, XFree86-devel -> xorg-x11-devel
  - don't define umode_t on ppc64


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.4
changelog:
  - update from CVS (fixes #143586)
  - merge all UTF-8 related patches to single .utf8 patch
  - drop BuildRequires gettext-devel, autopoint no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.3
changelog:
  - rewrote mbstrlen() in utf8 patch, this fixes:
    - dir name truncation in command prompt for ja_JP, ko_KR locales (#142706)
    - localized texts will fit dialog windows and pull-down menus - tweak create_menu()
    - dialog titles are centered correctly
  - fix bad displaying of mc logo in help (#143415)
  - merge msglen patch with utf8 patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.2
changelog:
  - update from CVS - problem in uzip.in fixed by upstream (#141844)
  - fix msglen patch to deal with wide UTF-8 characters (#141875)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.1
changelog:
  - update from CVS
  - sync UTF-8 patches with upstream
  - drop upstreamed badsize, growbuf patches
  - faster FISH upload support (#140750) - from Dmitry Butskoj


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add msglen patch to calculate message length correctly in UTF-8 (#141875)
    (thanks to Nickolay V. Shmyrev)
  - convert hints for ru, uk, zh, man page conversion fix


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.11
changelog:
  - update from CVS
    - fix #141095 - extraction of symlinks from tarfs is now fine
  - add growbuf patch from Roland Illig #141422 to view files
    in /proc and /sys properly


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.10
changelog:
  - update from CVS
  - update promptfix patch, drop upstreamed strippwd patch
  - add badsize patch to fix displaying of filesizes >2GB
  - sync UTF-8 patches with upstream
  - replace autogen.sh style with configure


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.9
changelog:
  - update from CVS
  - convert help files in /doc to UTF-8
  - add --enable-charset (#76486)
  - drop upstreamed 8bitdefault, extfs patch
  - update partially upstreamed strippwd and extension patches
  - add UTF-8 help patch from Vladimir Nadvornik (#136826)
  - add promptfix patch


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - drop upstreamed smallpatches patch
  - install non-en man pages and fix encoding (#137036)
  - fix possible mem leak in strippwd patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.8
changelog:
  - update from CVS
  - drop mc-php.syntax, more recent version in upstream
  - add utf8-input patch
  - sync strippwd, uglydir, extensions patches with upstream
  - add 8bitdefault patch to enable 8-bit input by default


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.7
changelog:
  - update from CVS
  - sync strippwd patch with upstream
  - merged hp48.in patch to extfs patch (from Leonard den Ottolander)
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.6
changelog:
  - update from CVS
  - drop upstreamed vcsa and xtermaliases patches
  - sync the rest of the patches with upstream
  - update strippwd patch to eliminate passwords from dir hotlist
    and chdir error messages
  - update perl scripts (Leonard den Ottolander, #127973, CAN-2004-0494)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.3
changelog:
  - patch to prevent displaying passwords in ftp paths (#131088)
    - also removes pswd from Delete/Copy/Error dialogs, etc.
  - added patch to fix/add extensions in mc.ext.in (#124242)


author: Karel Zak <zakkr@zf.jcu.cz>
changelog:
  - patch to prevent hangs on directory with '\n' in name, (#127164)
  - UTF8 hints support
  - original hint files conversion to UTF8 in the spec file


author: Jakub Jelinek <jakub@redhat.com> 4.6.1-0.1
changelog:
  - update from CVS
    - handle INFO/LICENSE and INFO/OBSOLETES in rpm vfs (#67341)
  - remove mc-cvs-unzip (#85073)
  - fix hotkey handling when not UTF-8 (Leonard den Ottolander, #120735)
  - allow terminal aliases for keys in mc.lib and ~/mc/ini,
    add gnome, xterm-new and rxvt aliases for xterm (#128163)


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-12
changelog:
  - fix a bug in complete.c introduced by last patch
  - export MC_TMPDIR env variable
  - avoid integer overflows in free diskspace % counting
  - put temporary files into $MC_TMPDIR tree if possible,
    use mktemp/mkdtemp


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-11
changelog:
  - fix a bunch of buffer overflows and memory leaks (CAN-2004-0226)
  - fix hardlink handling in cpio filesystem
  - fix handling of filenames with single/double quotes and backslashes
    in %{_datadir}/mc/extfs/rpm
  - update php.syntax file (#112645)
  - fix crash with large syntax file (#112644)
  - update CAN-2003-1023 fix to still make vfs symlinks relative,
    but with bounds checking


author: Warren Togami <wtogami@redhat.com> 4.6.0-7
changelog:
  - BuildRequires glib2-devel, slang-devel, XFree86-devel,
    e2fsprogs-devel, gettext
  - Copyright -> License
  - PreReq -> Requires
  - Explicit zero epoch in versioned dev dep
  - /usr/share/mc directory ownership
  - Improve summary
  - (Seth Vidal QA) fix for CAN-2003-1023 (Security)


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-2
changelog:
  - kill unneeded patches, update the rest for 4.6.0
  - build with system slang
  - first part of UTF-8ization


author: Havoc Pennington <hp@redhat.com> 4.6.0pre3-3
changelog:
  - drop our translations, they are surely out of date
  - ugh, due to spec file weirdness hadn't actually used the new pre3
    tarball. disabled patches that no longer apply.
  - patch for #78506


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 4.6.0-pre1
  - comment out the patches that don't apply, 
    if someone wants to spend time fixing them 
    that'd be great


author: Karsten Hopp <karsten@redhat.de> 4.5.55-10
changelog:
  - support large files (#65159, #65160)
  - own /usr/lib/mc/extfs and /usr/lib/mc/syntax
  - fix NL translation (#63495)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - don't build --with-included-slang on upstream recommendation
  - add uzip method from cvs, fixes some sort of format string problem
  - get fix for breaking zip files while browsing them from upstream


author: Havoc Pennington <hp@redhat.com>
changelog:
  - cons.saver rewrite to use vcsa user from Jakub, #61149
  - make cons.saver attr(4711, vcsa, root)
  - require new dev package


author: Havoc Pennington <hp@redhat.com>
changelog:
  - rebuild in rawhide
  - fix prefix/share -> datadir
  - comment out gmc/mcserv subpackages, place order for asbestos suit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - run %configure in the build phase, not the setup
  - modify Tim's patch to always just edit one file


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - builtin cpio vfs, change rpm extfs to use it -
    should speed up e.g. copyout from rpm by orders of magnitude
    patch by Jan Hudec <jhud7196@artax.karlin.mff.cuni.cz>
  - fix buglet in the patch


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - updated mc to work with mc 4.5.36.  Thanks to Brian Ryner
    <bryner@uiuc.edu> for providing the patch.


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - removed rpm menu defs - we depend on gnorpm for these
  - fixed bug that caused crash if group doesnt exist for file


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - version pre-4.5.30 with patch to make this link on alpha properly
    Mark as version 0.7 to denote not the official 4.5.30 release


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - version 4.5.29
  - added default desktop icons for Red Hat desktop
  - added redhat-logos to requirements
  - added README.desktop to doc list for gmc
  - added locale data


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added --without-debug to configure,
  - modification in %build and %install and cosmetic modification in packages
    headers,
  - added %{PACKAGE_VERSION} macro to Buildroot,
  - removed "rm -rf $RPM_BUILD_ROOT" from prep section
  - removed Packager field.


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - Merged spec file with that from RedHat-5.0 distribution
    (now a Hurricane-based distribution is needed)
  - Added patch for RPM script (didn't always work with rpm-2.4.10)
  - Corrected patch for mcserv init file (chkconfig init levels)
  - Added more documentation files on termcap, terminfo, xterm


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - updated to 4.1.6
  - added %attr macros in %files,
  - a few simplification in %install,
  - removed glibc patch,
  - fixed installing %{_sysconfdir}/X11/wmconfig/tkmc.


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - added support for mc alias in %{_sysconfdir}/profile.d/mc.csh (for csh and tcsh)
  - lowered number of SysV init scripts in %{_sysconfdir}/rc.d/rc[0,1,6].d
    (mcserv needs to be killed before inet)
  - removed all references to RPM_SOURCE_DIR
  - restored $RPM_OPT_FLAGS when compiling
  - minor cleanup of spec file: redundant directives and comments removed


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - removed all references to non-existent mc.rpmfs
  - added mcedit.1 to the %files section
  - reverted to un-gzipped man pages (RedHat style)
  - removed double install line for mcserv.pamd


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added new rpmfs script,
  - removed mcfn_install from mc (adding mc() to bash enviroment is in
    %{_sysconfdir}/profile.d/mc.sh),
  - %{_sysconfdir}/profile.d/mc.sh changed to %config,
  - removed %{prefix}/lib/mc/bin/create_vcs,
  - removed %{prefix}/lib/mc/term.


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - new version 3.5.27,
  - %dir %{prefix}/lib/mc/icons and icons removed from tkmc,
  - added commented xmc part.


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - FIX spec:
     - added URL field,
     - in mc added missing %{prefix}/lib/mc/mc.ext, %{prefix}/lib/mc/mc.hint,
       %{prefix}/lib/mc/mc.hlp, %{prefix}/lib/mc/mc.lib, %{prefix}/lib/mc/mc.menu.


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added making packages: tkmc, mcserv (xmc not work yet),
  - gziped man pages,
  - added %{_sysconfdir}/pamd.d/mcserv PAM config file.
  - added instaling icons,
  - added %{_sysconfdir}/profile.d/mc.sh,
  - in %doc added NEWS README,
  - removed %{prefix}/lib/mc/FAQ,
  - added mcserv.init script for mcserv (start/stop on level 86).


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Rafael Fonseca <rdossant@redhat.com> - 0.4.0-1
changelog:
  - Resolves #1460482 - rebase to new release
  - Resolves #1505506 - add support for LLVM 5.0
  - Resolves #1460482 - BPF module compilation issue
  - Partially address #1479990 - location of man pages
  - Enable ppc64(le) support without lua
  - Soname versioning for libbpf by ignatenkobrain


author: Nils Philippsen <nils@redhat.com> - 2:2.8.10-5
changelog:
  - remove BRs contained in the minimal build environment
  - group BRs into libraries and tools
  - remove various old cruft
  - ship RPM macros for packaging plug-ins e.a. (#1063144)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.4-4
changelog:
  - fix upstream commit ids
  - fix double-free crashes when selecting gradients from script-fu (#964470)
  - fix crash in unsharp-mask plug-in (#966987)
  - hardcode python interpreter in python plug-ins (#952227)
  - fix crash when selecting text with multiple colors etc. (#919795, #951815)
  - don't crash upon not applying a color profile to a grayscale image (#922622)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.2-3
changelog:
  - don't trip over too much installed memory, reenable all tests
  - realign selection after "Crop to Selection" (#873212, fix by Michael
    Natterer)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-3
changelog:
  - fix crash in fits loader (#834627)
  - fix overflow in CEL plug-in (CVE-2012-3403)
  - fix overflow in GIF loader (CVE-2012-3481)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-0.1.RC1
changelog:
  - version 2.8.0-RC1 (release candidate):
   - Add our own GimpOperationBrightnessContrast because GEGL one is different
   - Fix some GFig rendering issues
   - Depend on Babl 0.1.10, GEGL 0.2.0 and some other new library versions
   - Bug fixes
   - Translation updates


author: Nils Philippsen <nils@redhat.com> - 2:2.7.5-1
changelog:
  - version 2.7.5 (unstable, see http://developer.gimp.org/NEWS for details)
  - add BR: atk >= 2.0.1, bzip2-devel, ghostscript-devel, zlib-devel
  - package tool presets


author: Nils Philippsen <nils@redhat.com> - 2:2.7.4-1
changelog:
  - version 2.7.4 (unstable, see http://developer.gimp.org/NEWS for details)
  - update dependency versions
  - don't suppress abrt reporting, don't redirect bug reports to upstream


author: Nils Philippsen <nils@redhat.com> - 2:2.7.3-1
changelog:
  - version 2.7.3 (unstable, see http://developer.gimp.org/NEWS for details)
    - change license to GPLv3+/LGPLv3+
    - update required versions of dependencies
    - build with cairo-pdf, jasper, require jasper-devel for building
    - build without poppler as that currently is GPLv2 only, thus incompatible
      with LGPLv3 gimp libraries (use postscript plugin for PDF import
      meanwhile), future poppler versions will be "GPLv2 or GPLv3", i.e.
      compatible again
    - clean up configure options, compiler/linker flags
    - suppress abrt bug reporting for unstable releases
    - remove all patches (obsolete, woo!)
    - add new files, remove files that are not installed any longer
  - use %global instead of %define
  - replace hal, minorver, microver, interfacever, gimp_lang_ver macros with
    gudev, lib_minor, lib_micro, lib_api_version, gettext_version macros
  - compute more version macros (ugly, but convenient)
  - use gudev from Fedora 15 on
  - use convenience macro for hardening binaries from F-16 on


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-21
changelog:
  - actually apply startup-warning patch
  - fix heap corruption and buffer overflow in file-gif-load plugin
    (CVE-2011-2896)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-14
changelog:
  - fix buffer overflows in sphere-designer (CVE-2010-4541),
    gfig (CVE-2010-4542), lighting (CVE-2010-4540) plugins


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-10
changelog:
  - don't use poppler/gdk_pixbuf API removed in poppler >= 0.17 (#698157)
  - remove obsolete configure options


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-1
changelog:
  - version 2.6.11

    Overview of Changes from GIMP 2.6.10 to GIMP 2.6.11
    ===================================================

    * Bugs fixed:

     631199 - Printing and Print preview broken with cairo 1.10
     572865 - Parasite handling had problems and can cause crashing
     628893 - Error with string-append and gimp-drawable-get-name
     623850 - (Paco) Recursive Gaussian Filter error
     624487 - Fix incorrect "wrap mode" documentation values in Edge plug-in
     557380 - Difference of Gaussians gives blank doc if "Invert" selected
     627009 - Image type filter doesn't include .rgba SGI files
     626020 - Console window opening on file-ps-load
     624698 - Wood 1 and Wood 2 have bad alpha value
     624275 - Image saved from google docs generates a
              'gimp-image-set-resolution' error message

    * Updated translations:

     German (de)
     Spanish (es)
     Italian (it)
     Japanese (ja)
     Romanian (ro)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.10-1
changelog:
  - version 2.6.10

    Overview of Changes from GIMP 2.6.9 to GIMP 2.6.10
    ==================================================

    * Bugs fixed:

     613328 - TGA files saved with incorrect header yOrigin data
     623290 - Save As... does not save Windows Bitmap as default in dialog
     621363 - CMYK decompose broken
     595170 - brush - color from gradient works wrong in greyscale
     613838 - Error in gimp-hue-saturation PDB call
     622608 - GIMP crashes when clicking any scroll bar from combo boxes
     565459 - newly opened images are put into the background

    * Updated translations:

     German (de)
     Italian (it)
     Romanian (ro)
     Portuguese (pt)

  - remove obsolete combo-popup patch
  - update script-fu-ipv6 patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Nils Philippsen <nils@redhat.com> - 2:2.6.8-1
changelog:
  - version 2.6.8

    Overview of Changes from GIMP 2.6.7 to GIMP 2.6.8
    =================================================

    * Bugs fixed:

     470698 - MapObject cannot modify highlight
     593848 - FG color changed to black when FG-BG Editor tab created
     594651 - layer.scale() raises RuntimeError
     594998 - Keyboard shortcuts does not work for first image when dock
              is focused
     599765 - F1 key on gimp-tool-align in menu have wrong link and it
              open gimp-tool-move
     600484 - Gimp BMP Integer Overflow Vulnerability
     600741 - "read_channel_data()" Integer Overflow Vulnerability
     601891 - gimp_image_get_selection returns None
     602761 - plug-in-grid: Parameters Horizontal/Vertical Spacing and
              Horizontal/Vertical Offset are reversed.
     603995 - PCX plugin doesn't sanitize input to avoid allocation overflows.
     603998 - PCX: Calculating amount of memory to allocate may overflow.
     604000 - SGI: sanitize input
     604001 - SGI: Calculating amount of memory to allocate may overflow.
     604002 - SGI: RLE encoded input data may write beyond allocated buffers
     604004 - SGI: allocate memory consistently
     604008 - GBR, PAT: sanitize input data
     604078 - Crash when pressing Backspace with Free Select Tool

    * Updated and new translations:

     Basque (eu)
     British English (en_GB)
     Czech (cs)
     French (fr)
     Greek (el)
     Italian (it)
     Japanese (ja)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)
     Russian (ru)
     Simplified Chinese (zh_CN)

  - remove obsolete bmp-hardening, psd-hardening patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-3
changelog:
  - avoid overflow in the BMP image file plugin (#537356)
  - avoid overflow in the PSD image file plugin (#537370)
  - update jpeg-units patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-1
changelog:
  - version 2.6.7

    Overview of Changes from GIMP 2.6.6 to GIMP 2.6.7
    =================================================

    * Bugs fixed:

     591017 - Tablet pan is not working as fast as it should
     577581 - Crashes when using any colors tool/function on Windows
     589667 - GIMP crashes when clicking GEGL Operation on Windows
     569833 - file-jpeg-save erroneous with small quality values
     590638 - Changing palettes from list to grid view loses "locked to dock"
              status
     589674 - "Send by Email" does not update "Filename"
     589674 - "Send by Email" does not update "Filename"
     586851 - Transparent BMP files fail to load
     589205 - help-browser uses deprecated (and sometimes broken) webkit call
     582821 - 'Sphere Designer' does not reset correctly...
     570353 - first time open of .svg file ignores the requested units
     555777 - Export to MNG animation fails
     577301 - Dithering with transparency is broken for "positioned" method
     493778 - metadata plug-in crashes on some images
     567466 - PNG comment not found if more than 1 tEXt chunks
     585665 - Exporting to PSD with a blank text layer creates a corrupt file
     586316 - Levels tool does not adjust output levels correctly if input
              levels are changed
     569661 - Import from PDF throws errors when entering resolution in
              pixels per millimetre
     567262 - Black pixels appear in "Spread" filter preview
     554658 - Path Dialog: Path preview pics not to see constantly
     167604 - gimp_gradient_get_color_at() may return out-of-bounds values
     567393 - Rectangle select tool size shrinks to 0 if size is larger than
              the image and the up or down arrow is pressed
     587543 - crash when invoking certain actions by keyboard shortcut
     563029 - Closing maximized image doesn't restore document window size
     585488 - Perspective transformation on a layer with a mask causes crash
     586008 - GIMP crashes when right-click canceling a drawing action initiated
              outside layer boundaries
     584345 - when printing, the number of copies should be reset to 1
     557061 - Alpha to Logo
     472644 - Rotate with clipping crops the whole layer
     577575 - transform tool fills underlying extracted area wrongly
     555738 - Image display is wrong after undoing canvas size
     577024 - help-browser plugin crashes when used with webkit 1.1.3
     555025 - Action GEGL box widgets weirdness

    * Updated and new translations:

     Czech (cs)
     Danish (da)
     German (de)
     Spanish (es)
     Basque (eu)
     Finnish (fi)
     Hungarian (hu)
     Italian (it)
     Gujarati (gu)
     Japanese (ja)
     Kannada (kn)
     Marathi (mr)
     Norwegian bokmål (nb)
     Oriya (or)
     Portuguese (pt)
     Romanian (ro)
     Sinhala (si)
     Swedish (sv)
     Simplified Chinese (zh_CN)
     Traditional Chinese - Hong Kong (zh_HK)
     Traditional Chinese - Taiwan (zh_TW)

  - remove obsolete gegl-babl-versions-check, help-browser-webkit patches
  - comment/explain patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-2
changelog:
  - minimize dialogs with single image window (#492796, backported from trunk,
    original patch by Sven Neumann)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-1
changelog:
  - version 2.6.6

    Overview of Changes from GIMP 2.6.5 to GIMP 2.6.6
    =================================================

    * Bugs fixed:

     571117 - lcms plug-in crashes on broken profile
     575154 - changing the help browser preference may not work
     573542 - blur plugin: bug in the first line
     572403 - gimp-2.6 crashed with SIGSEGV in IA__g_object_get()
     573695 - 1-bit white background saved as PBM becomes all black
     573488 - Small bug in Filter>Distorts>Ripple
     572156 - top left pixel position/coordinate is not 0,0 but 1,1
     472644 - Rotate with clipping crops the whole layer

    * Updated translations:

     German (de)
     Spanish (es)
     Estonian (et)
     Basque (eu)
     French (fr)
     Italian (it)
     Portuguese (pt)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-4
changelog:
  - use correct fix from upstream to avoid crashes (#486122)
  - use -fno-strict-aliasing, PIC/PIE compilation flags


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-1
changelog:
  - version 2.6.5

    Overview of Changes from GIMP 2.6.4 to GIMP 2.6.5
    =================================================

    * Bugs fixed:

     571628 - Scaling image to 25% turn background from white to grey
     567840 - GIMP's GtkScaleButton conflicts with GTK's
     569043 - GEGL tool - missing Operation Settings for all sub-tools
     568890 - don't rely on GtkAction implementation details
     568909 - wrong RGB values for color names in libgimpcolor/gimprgb-parse.c
     568839 - wrong hex RGB value for the color names slategrey and slategray
     559408 - Brushes dragged to the image window look strange
     563337 - Rectangle Select Tool does not allow 1:1 fixed ratio
     568016 - Black pullout parameter of plug-in-newsprint has no effect
     562818 - First image opened in GIMP offset
     562213 - Align Tool doesn't work properly if it is the active tool
              at startup

    * Updated translations:

     Spanish (es)
     Estonian (et)
     Hindi (hi)
     Italian (it)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Russian (ru)
     Serbian (sr)
     Tamil (ta)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-3
changelog:
  - split off gimptool into new gimp-devel-tools subpackage to avoid multilib
    conflicts (#477789)
  - require poppler-glib-devel for building from F9 on (#478691)
  - fix gimp-devel package group


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-1
changelog:
  - version 2.6.4

    Overview of Changes from GIMP 2.6.3 to GIMP 2.6.4
    =================================================
    
    * Bugs fixed:
    
     565223 - Perspective transformation jagged edges / comb effect
     563985 - jpg save dialog: "cancel" is treated like "commit"
              for settings
     564087 - Using clone tool on a layer with a part out of canvas
              causes crashes
     564593 - crash when the drawable is changed while a color tool
              is active
     564869 - GIMP crashes on selecting Tools->GEGL operation
     565138 - python-fu-foggify does not check if image is in rgb mode
     563130 - Hue selection mode does not cross the 0-360 degrees line
     563179 - Scrollbars not resized when we extend the canvas size
     562459 - PF_PALETTE: 'TypeError' when used in a plugin that is
              registered in <Image>
     562427 - Compilation with --as-needed
     562386 - PF_SLIDER and PF_SPINNER 'Step' values do not change
              consistently...
     562366 - Default image dimensions are not correctly
              transferred in the file/new dialog box
     561899 - GIMP can't save to mounted filesystem if file exists
    
    * Updated translations:
    
     Greek (el)
     Hindi (hi)
     Hungarian (hu)
     Italian (it)
     Japanese (ja)
     Korean (ko)
     Slovenian (sl)
     Swedish (sv)
     Tamil (ta)
     Simplified Chinese (zh_CN)
  - add BuildRequires: aalib-devel


author: Nils Philippsen <nils@redhat.com> - 2:2.6.3-1
changelog:
  - version 2.6.3

    Overview of Changes from GIMP 2.6.2 to GIMP 2.6.3
    =================================================

    * Bugs fixed:

     558454 - Plugin Map Color Range disappears from GIMP
     559239 - Error while loading psd-data
     560903 - Explicit zooming with e.g. '1' should handle
              zoom-focus better
     560245 - Zoom selection always centered in the Navigation tab
     559490 - Wrong lang tags for 'no'
     559292 - SOTA Chrome cannot accept different textures
     560375 - Clearing an already empty document history crashes GIMP
     559580 - Image windows need better default locations
     560283 - "Scale image..." causes distortion around edges
     559716 - Changing crop size in Crop Tool Options can make UI
              unresponsive
     558549 - Stroking a single-point path with a paint tool
              crashes GIMP
     559015 - Move tool gives bad information about px moved
     558660 - help behavior for locales without manual translation

    * Updated translations:

     Belarusian (be)
     Dutch (nl)
     German (de)
     Japanese (ja)
     Lithuanian (lt)
     Norwegian Bokmål (nb)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.2-1
changelog:
  - version 2.6.2

    Overview of Changes from GIMP 2.6.1 to GIMP 2.6.2
    =================================================

    * Bugs fixed:

     557950 - Scaling in Gimp 2.6 is much slower than in Gimp 2.4
     558215 - unit and zoom entries in Statusbar not visible
     558451 - Cannot build GIMP using Sun CC on Solaris 2.8
     558420 - projection incorrect with alpha-less layers
     556603 - Zoom region always zooms in center of image
     557870 - "Qmask" message popping up here and there
     557705 - compatibility with GEGL > 0.0.20
     556248 - Scaling gives 'jagged' edges
     556804 - Zoom drop down doesn't update
     524615 - Print not to scale
     555246 - gimp crashes when a file is opened while a preview is generating
     556741 - Alpha layer automatically added (in psd format)
     556182 - Could you please explain a few strings [I18N]
     555697 - build fails if configured with --without-libjpeg
     134956 - Curves tool doesn't save free curves

    * Updated translations:

     Czech (cs)
     Danish (da)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Polish (pl)
     Brazilian Portuguese (pt_BR)
     Swedish (sv)
     Simplified Chinese (zh_CN)
  - update xdg-open patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.1-1
changelog:
  - version 2.6.1

    Overview of Changes from GIMP 2.6.0 to GIMP 2.6.1
    =================================================

    * Bugs fixed:

     555587 - PSD file crashes PSD plug-in
     555222 - PSD Load Plugin: unsupported compression mode
     555362 - gimp-remote is not working properly
     555280 - some gif files will not be open
     554890 - JPEG Save Options Dialog does not remember
     554966 - Gimp crashes creating a new image using a template
     554785 - Compile failure on uri-backend-libcurl
     554646 - Opening Help crashes GIMP with lqr-plugin installed
     553534 - centering issues after image scaling and setting zoom
     554898 - Compile failure on uri-backend-wget.c

    * Updated translations:

     Belarusian (be)
     Catalan (ca)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Macedonian (mk)
     Punjab (pa)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Slovenian (sl)
     Swedish (sv)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-3
changelog:
  - split off help browser plugin
  - let gimp and gimp-help-browser obsolete older gimp versions to allow seamless
    upgrades


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-2
changelog:
  - move gimptool to devel subpackage
  - make gimp-plugin-mgr not require gimptool/pkg-config (#465869)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-1
changelog:
  - version 2.6.0
  - remove obsolete htmlview patch
  - remove obsolete distro version dependent defaults
  - don't use custom CFLAGS


author: Nils Philippsen <nils@redhat.com> - 2:2.4.7-2
changelog:
  - Merge review:
    - convert spec file to UTF-8
    - remove unneeded gimp2, gimp-beta obsoletes
    - quote macros in changelog
    - use only spaces, not tabs
    - make pyconsole.py plug-in executable (upstream bug #552601)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.7-1
changelog:
  - version 2.4.7

    Changes in GIMP 2.4.7
    =====================

    - fixed issue in GIF load plug-in (bug #535888)
    - fixed event handling in MIDI controller (bug #537960)
    - fixed handling of the 'Highlight' tool option in Crop and Rectangle
      Select tools (bug #536582)
    - various fixes to the Python bindings:
      - fixed crash with Python 2.5 on 64 bit systems (bug #540629)
      - added missing validity checks (bug #536403)
      - allow to pass None for PDB_DISPLAY
    - plugged a memory leak in gimp-text-get-extents-fontname PDB call
    - fixed potential timeout issues in org.gimp.GIMP.UI D-Bus service
    - fixed endianness issue in the ICO save plug-in (bug #529629)
    - translation fixes and updates (be, it, lt, nn, vi)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.6-1
changelog:
  - version 2.4.6

    Changes in GIMP 2.4.6
    =====================

    - fixed handling of the "antialias" tool option (bug #521069)
    - when loading a TIFF image, always set a filename on it (bug #521436)
    - fixed initial state of curve type in Curves tool (bug #523873)
    - fixed potential crash in the Dicom load plug-in
    - respect the brush mask in the Heal tool (bug #521433)
    - plugged some minor memory leaks
    - fixed a glitch in the DND code (bug #317992)
    - gimp-image-convert() must not accept palettes with > 256 colors (bug
        - fixed parameter description in the Map Object plug-in (bug #526679)
    - fixed compilation of unit tests on Mac OS X (bug #528160)
    - fixed handling of "argc-lower-val-y" PDB parameter in Curve Bend plug-in
    - fixed overlap problem in Hue-Saturation tool (bug #527085)
    - fixed asymmetry in Unsharp Mask plug-in (bug #530077)
    - don't show non-existant color profiles in the selector (bug #528958)
    - fixed issues with default aspect ratio in the Crop tool (bug #532057)
    - fixed compilation of the PDF import plug-in with libpoppler 0.8
    - fixed bug in clipboard brush code (bug #532886)
    - corrected layer mask flag in PSD save plug-in (bug #526811)
    - fixed an issue with tablets and newer X.Org releases
    - keep the JPEG save plug-in from writing an empty EXIF tag (bug #529469)
    - fixed crash in Selective Gaussion Blur plug-in (bug #529280)
    - added new translations (Belarusian, Catalan, Norwegian Nynorsk)
    - translation fixes and updates
      (ar, ca, de, el, es, fi, fr, hu, it, ko, pl, pt_BR, ro, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.5-1
changelog:
  - version 2.4.5

    Changes in GIMP 2.4.5
    =====================

    - fixed a regression introduced by the brush cursor optimization
      (bug #514309)
    - fixed bug in transform tool preview (bug #340965)
    - fixed PSD export of images with layer masks
    - fixed base64 encoding routine of the Mail plug-in
    - use the correct background color when creating a new image
      (bug #514082)
    - explicitly link libgimpthumb with GLib (bug #515566)
    - improved selection of the font sample string (bug #514021)
    - unified handling of "Enter" and "Space" keysyms (bug #516544)
    - fixed bug in the Glossy script when used with a pattern (bug #517285)
    - correctly record dimensions in Exif data when saving as JPEG
      (bug #517077)
    - fixed sensitivity of plug-in menu items (bug #517683)
    - fixed potential crashes in Wind, Warp, Small Tiles and Apply Canvas
      plug-ins (bug #516369)
    - added default keyboard shortcut for "Paste As New Image"
      (Ctrl-Shift-V)
    - added default keyboard shortcut for "Copy Visible" (Ctrl-Shift-C)
    - fixed missing preview update in Curves tool (bug #518012)
    - fixed a bug in the Frosty Logo script (bug #472316)
    - fixed backward transformations using the PDB (bug #518910)
    - translation fixes and updates (de, eu, eo, fr, he, hu, it, ja, ko)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.4-1
changelog:
  - version 2.4.4

    Changes in GIMP 2.4.4
    =====================

    - fixed typo in stock icon name
    - fixed handling of PSD files with empty layer names (bug #504149)
    - merged TinyScheme bug-fixes
    - removed duplicate entry from Tango palette
    - corrected parameter range in Chip Away script (bug #506110)
    - reduced redraw priority and speed of the marching ants (bug #479875)
    - fixed out-of-bounds array access in Convolution Matrix plug-in
    - reduced rounding errors in Convolution Matrix plug-in (bug #508114)
    - fixed potential crash on missing CMYK color profile
    - fixed crash in Bumpmap plug-in when called from some scripts (bug #509608)
    - Equalize should not equalise the alpha channel (bug #510210)
    - increased the number of points the ImageMap plug-in can handle (bug #511072)
    - adjusted the priority of the projection renderer (bug #511214)
    - smooth the brush mask to get a simpler cursor boundary (bug #304798)
    - show the selection even if the image window is invisible (bug #505758)
    - allow to commit a pending rectangular selection using Enter (bug #511599)
    - fixed bug in image dirty state logic (bug #509822)
    - improved GIMPressionist preformance and reduced startup time (bug #512126)
    - fixed a crash in the Convert to Color Profile plug-in (bug #512529)
    - merged some other minor fixes from trunk
    - translation updates (de, it, lt, ru, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.3-1
changelog:
  - version 2.4.3

    Changes in GIMP 2.4.3
    =====================

    - avoid filename encoding problems in the WMF import plug-in (bug #499329)
    - fixed horizontal flipping of linked layers (bug #499161)
    - fixed a missing update in the Lighting plug-in UI (bug #500317)
    - fixed a potential crash in the projection code (bug #500178)
    - fixed a minor Makefile issue (bug #500826)
    - removed some pointless warnings from the JPEG and TIFF load plug-ins
    - fixed size calculation for the image size warning dialog (bug #329468)
    - fixed loading of tool options for the rectangle tools (bug #498948)
    - push/pop a context in the Fog filter
    - fixed potential crashes in the Python binding
    - corrected grid drawing with non-integer spacing (bug #502374)
    - fixed grid snapping for coordinates less than the grid offset
    - made the healing brush work properly when dragged (bug #492575)
    - update tool state when a device change happens (bug #493176)
    - improved validation of strings sent over the wire (bug #498207)
    - fixed integer check in Script-Fu (bug #498207)
    - fixed potential out-of-memory problem in Script-Fu
    - translation updates (ca, cs, de, gl, it, ko, lt, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.2-1
changelog:
  - version 2.4.2

    Changes in GIMP 2.4.2
    =====================

    - removed broken and useless HSV Graph script (bug #491311)
    - update the histogram when a color correction tool is cancelled (bug #493639)
    - fixed a crash with certain plug-in or script descriptions (bug #492718)
    - corrected a tooltip (bug #495564)
    - fixed a crash when GIMP is run without any modules (bug #495863)
    - fixed error handling in the TIFF plug-in
    - fixed a problem with Sample points
    - fixed a crash when merging layers in indexed image (bug #495990)
    - update the histogram when painting (bug #494049)
    - fixed another problem with merge operations on indexed images (bug #496437)
    - fixed crash in TIFF plug-in when saving indexed images (bug #497103)
    - changed defaults so that a system monitor profile is only used when the
      user explicitely enabled this feature (bug #496890)
    - fixed endless loop when running equalize on transparent areas (bug #497291)
    - fixed heap corruption in GimpColorScale widget that caused a crash in the
      Compose plug-in (bug #399484)
    - fixed use of background color in Particle Trace script (bug #498282)
    - set the image menu insensitive when there's no image opened (bug #498511)
    - translation updates (ca, et, it, lt, pt, pt_BR, sr, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.1-1
changelog:
  - version 2.4.1

    Changes in GIMP 2.4.1
    =====================

    - fixed a minor display rendering problem
    - improved the workaround for broken graphics card drivers (bug #421466)
    - fixed a crash with broken scripts and plug-ins (bug #490055)
    - fixed potential syntax error in configure script (bug #490068)
    - fixed parsing of floating point numbers in Script-Fu (bug #490198)
    - fixed potential crash when converting an indexed image to RGB (bug #490048)
    - update the histogram while doing color corrections (bug #490182)
    - fixed another crash with broken plug-ins (bug #490617).
    - translation updates


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-1
changelog:
  - version 2.4.0
  - use xdg-open instead of htmlview on Fedora 7 and later
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - don't let gtk-update-icon-cache fail scriptlets


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-0.rc1.1
changelog:
  - version 2.4.0-rc1
  - change license tags to GPLv2+ (main app), LGPLv2+ (libs and devel)
  - drop libXt-devel build requirement
  - build-require pygobject2-devel directly
  - don't let %postun fail
  - remove obsolete buildroot, gimphelpmissing, icontheme, gifload, gimptool
    patches
  - update htmlview patch
  - use more distinct build root
  - use %buildroot consistently
  - explicitely enable configure options
  - more versionized build requirements
  - don't rebuild autofoo files
  - reformat spec file a bit


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.17-1
changelog:
  - version 2.2.17

    Bugs fixed in GIMP 2.2.17
    =========================

    - fixed regression in PSD load plug-in (bug #456042)
    - fixed crash when loading a corrupt PSD file (bug #327444)
    - work around for Pango appending " Not-Rotated" to font names


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.16-1
changelog:
  - version 2.2.16

    Bugs fixed in GIMP 2.2.16
    =========================

    - improved input value validation in several file plug-ins (bug #453973)
    - improved handling of corrupt or invalid XCF files
    - guard against integer overflows in several file plug-ins (bug #451379)
    - fixed handling of background alpha channel in XCF files (bug #443097)
    - improved forward compatibility of the config parser
    - fixed crash when previewing some animated brushes (bug #446005)

  - remove obsolete psd-invalid-dimensions patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.15-1
changelog:
  - version 2.2.15

    Bugs fixed in GIMP 2.2.15
    =========================
    
    - fixed parsing of GFig files with CRLF line endings (bug #346988)
    - guard against a possible stack overflow in the Sunras loader (bug #433902)
    - fixed definition of datarootdir in gimptool-2.0 (bug #436386)
    - fixed Perspective tool crash on Mac OS X (bug #349483)
    - fixed area resizing in the Image Map plug-in (bug #439222)
    - added missing library in gimptool-2.0 --libs output
    - added new localizations: Occitan and Persian

  - remove obsolete sunras-overflow patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.14-1
changelog:
  - version 2.2.14
    
    Bugs fixed in GIMP 2.2.14
    =========================
    
    - avoid crashing on newer versions of the winicon format (bug #352899)
    - fixed crash in Postscript plug-in (bug #353381)
    - fixed handling of TABs in the text tool (bug #353132)
    - fixed bug in Depth Merge plug-in (bug #355219)
    - fixed bug in GimpDrawablePreview widget (bug #353639)
    - fixed bug in Line Nove script (bug #357433)
    - fixed bug in Ripple plug-in (bug #357431)
    - save locale independent files from Fractal Explorer plug-in (bug #360095)
    - fixed bug in Super Nova plug-in (bug #340073)
    - be more robust against broken XCF files (bug #357809)
    - fixed drawing issues in Image Map plug-in (bug #311621)
    - fixed smoothing option in Fractal Explorer plug-in (bug #372671)
    - load channels in the proper order when opening an XCF file (bug #378003)
    - deal with floating selections in the Burn-In Animation script (bug #384096)
    - fixed clipping in the GimpPreviewArea widget (bug #392692)
    - fixed a potential crash in gimp-remote (bug #392111)
    - work around a file-chooser problem on Windows (bug #398726)
    - fixed markup of the gimp(1) manual page (bug #401145)
    - fixed the fix for the right-to-left layout in layers dialog (bug #348347)
    - fixed PSD save plug-in on 64bit architectures (bug #335130)
    - added missing dependency in gimpui-2.0.pc file (bug #356394)
    - fixed a crash in the PSD save plug-in (bug #395385)
    - improved robustness of transform tool preview code (bug #420595)
    - improved forward compatibility of XCF loader (bug #316207)
    - don't crash in the Compressor plug-in if files can't be opened (bug #422444)
    - fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

  - don't BuildRequire gimp-print/gutenprint anymore


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-3
changelog:
  - use gutenprint per default for current development/future distribution
    versions (Fedora >= 7, RHEL >= 6)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Tim Waugh <twaugh@redhat.com> 5.50-22
changelog:
  - Further changes from package review (bug #225794):
    - Don't use umask in scriptlet.
    - Don't use 'which' in scriptlet.


author: Tim Waugh <twaugh@redhat.com> 5.50-21
changelog:
  - Changes from package review (bug #225794):
    - Requires xorg-x11-font-utils, not mkfontscale/mkfontdir.
    - Use macro for /etc.
    - Don't own catalogue directory.


author: Tim Waugh <twaugh@redhat.com> 5.50-16
changelog:
  - Fixed URL again (bug #225794).
  - Fixed requires tags (bug #225794).
  - Preserve timestamps on installed files (bug #225794).
  - Added empty %build section (bug #225794).
  - Use FHS macros for file manifest (bug #225794).
  - Fixed summary (bug #225794).
  - Fixed description (bug #225794).
  - Fixed license (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-15
changelog:
  - Fixed URL (bug #225794).
  - Fixed build root tag (bug #225794).
  - This package does not require ghostscript (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-10
changelog:
  - Rebuilt. (The 8.11 package which briefly appeared in rawhide should
    not be used.)  Bug #99323, bug #113866.


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Rex Dieter <rdieter@fedoraproject.org> 1.6.1-8
changelog:
  - CVE-2009-1720 OpenEXR: Multiple integer overflows (#513995)
  - CVE-2009-1721 OpenEXR: Invalid pointer free by image decompression (#514003)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.4.0a-5
changelog:
  - -libs: new subpkg to be multilib friendly
  - -utils: package exrdisplay separately (separate fltk dep)


author: Ignacio Vazquez-Abrams <ivazquez@ivazquez.net> 1.2.2-4
changelog:
  - Removed -devel dep on zlib-devel (#165729)
  - Added --disable-static to %configure
  - Fixed build with GCC 4.0.1
  - Added .so links to -devel


author: Ignacio Vazquez-Abrams <ivazquez@ivazquez.net> 1.2.2-2
changelog:
  - Fix BuildRequires
  - Fix Requires on -devel
  - Add %post[un] scriptlets
  - Fix ownership in -devel
  - Don't have .deps files in %doc


author: Miro Hrončok <mhroncok@redhat.com> - 3-32
changelog:
  - %python_provide: Obsolete and provide python36- from python3-
  - %python_provide: Provide python3- from python36-
  Resolves: rhbz#1702719


author: Lumír Balhar <lbalhar@redhat.com> - 3-31
changelog:
  - Converting specfile from F28 to RHEL7
  - Move the macros to the standard RHEL7 macro location at /etc/rpm/,
    instead of Fedora's location at /usr/lib/rpm/macros.d/
  - Import the macros.python{,2} files from the python-devel package where they
    resided until now, and Conflict with that old version of python-devel
  - Import the macros.pybytecompile from Fedora rawhide / RHEL8
  Resolves: rhbz#1660579


author: Tomas Orsava <torsava@redhat.com> - 3-28
changelog:
  - Fix the %py_dist_name macro to not convert dots (".") into dashes, so that
    submodules can be addressed as well Resolves: rhbz#1564095


author: Michal Cyprian <mcyprian@redhat.com> - 3-20
changelog:
  - Revert "Switch %__python3 to /usr/libexec/system-python"
    after the Fedora Change https://fedoraproject.org/wiki/Changes/Making_sudo_pip_safe
    was postponed


author: Tomas Orsava <torsava@redhat.com> - 3-16
changelog:
  - Added macros for Build/Requires tags using Python dist tags:
    https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages


author: Orion Poplawski <orion@cora.nwra.com> 3-13
changelog:
  - Add missing sleeps to other build macros
  - Fix build_egg macros
  - Add %py_build_wheel and %py_install_wheel macros


author: Orion Poplawski <orion@cora.nwra.com> 3-12
changelog:
  - Add %py_build_egg and %py_install_egg macros
  - Allow multiple args to %py_build/install macros
  - Tidy up macro formatting


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-2.20140901git9329daf
changelog:
  - Rebase to latest upstream commit
  - Remove unnecessary sources and patches
  - Specfile cleanup
  Resolves: rhbz#1112999


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-1
changelog:
  - Rebase to version 1.11.1
  - Remove downstream patch that was merged upstream
  Resolves: rhbz#1112999


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.4-1
changelog:
  -
  - dnspython 1.9.4 has been released and is available at
  - http://www.dnspython.org/kits/1.9.4/
  -
  - There is no new functionality in this release; just a few bug fixes
  - in RRSIG and SIG code.
  -
  - I will be eliminating legacy code for earlier versions of DNSSEC in a
  - future release of dnspython.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.3-1
changelog:
  -
  - New since 1.9.2:
  -
  -     A boolean parameter, 'raise_on_no_answer', has been added to
  - the query() methods.  In no-error, no-data situations, this
  - parameter determines whether NoAnswer should be raised or not.
  - If True, NoAnswer is raised.  If False, then an Answer()
  - object with a None rrset will be returned.
  -
  - Resolver Answer() objects now have a canonical_name field.
  -
  - Rdata now have a __hash__ method.
  -
  - Bugs fixed since 1.9.2:
  -
  -        Dnspython was erroneously doing case-insensitive comparisons
  - of the names in NSEC and RRSIG RRs.
  -
  - We now use "is" and not "==" when testing what section an RR
  - is in.
  -
  - The resolver now disallows metaqueries.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.2-1
changelog:
  - It's brown paper bag time :) The fix for the import problems was
  - actually bad, but didn't show up in testing because the test suite's
  - conditional importing code hid the problem.
  -
  - Any, 1.9.2 is out.
  -
  - Sorry for the churn!


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.9.1-1
changelog:
  - New since 1.9.0:
  -
  -        Nothing.
  -
  - Bugs fixed since 1.9.0
  -
  -        The dns.dnssec module didn't work with DSA due to namespace
  -        contamination from a "from"-style import.
  -
  - New since 1.8.0:
  -
  -        dnspython now uses poll() instead of select() when available.
  -
  -        Basic DNSSEC validation can be done using dns.dnsec.validate()
  -        and dns.dnssec.validate_rrsig() if you have PyCrypto 2.3 or
  -        later installed.  Complete secure resolution is not yet
  -        available.
  -
  -        Added key_id() to the DNSSEC module, which computes the DNSSEC
  -        key id of a DNSKEY rdata.
  -
  -        Added make_ds() to the DNSSEC module, which returns the DS RR
  -        for a given DNSKEY rdata.
  -
  -        dnspython now raises an exception if HMAC-SHA284 or
  -        HMAC-SHA512 are used with a Python older than 2.5.2.  (Older
  -        Pythons do not compute the correct value.)
  -
  -        Symbolic constants are now available for TSIG algorithm names.
  -
  - Bugs fixed since 1.8.0
  -
  -        dns.resolver.zone_for_name() didn't handle a query response
  -        with a CNAME or DNAME correctly in some cases.
  -
  -        When specifying rdata types and classes as text, Unicode
  -        strings may now be used.
  -
  -        Hashlib compatibility issues have been fixed.
  -
  -        dns.message now imports dns.edns.
  -
  -        The TSIG algorithm value was passed incorrectly to use_tsig()
  -        in some cases.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1
changelog:
  - New since 1.7.1:
  -
  -  Support for hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 and
  -  hmac-sha512 has been contributed by Kevin Chen.
  -
  -  The tokenizer's tokens are now Token objects instead of (type,
  -  value) tuples.
  -
  - Bugs fixed since 1.7.1:
  -
  -  Escapes in masterfiles now work correctly.  Previously they were
  -  only working correctly when the text involved was part of a domain
  -  name.
  -
  -  When constructing a DDNS update, if the present() method was used
  -  with a single rdata, a zero TTL was not added.
  -
  -  The entropy pool needed locking to be thread safe.
  -
  -  The entropy pool's reading of /dev/random could cause dnspython to
  -  block.
  -
  -  The entropy pool did buffered reads, potentially consuming more
  -  randomness than we needed.
  -
  -  The entropy pool did not seed with high quality randomness on
  -  Windows.
  -
  -  SRV records were compared incorrectly.
  -
  -  In the e164 query function, the resolver parameter was not used.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-1
changelog:
  - New since 1.7.0:
  -
  -        Nothing
  -
  - Bugs fixed since 1.7.0:
  -
  -        The 1.7.0 kitting process inadventently omitted the code for the
  -        DLV RR.
  -
  -        Negative DDNS prerequisites are now handled correctly.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.0-1
changelog:
  - New since 1.6.0:
  -
  -        Rdatas now have a to_digestable() method, which returns the
  -        DNSSEC canonical form of the rdata, suitable for use in
  -        signature computations.
  -
  -        The NSEC3, NSEC3PARAM, DLV, and HIP RR types are now supported.
  -
  -        An entropy module has been added and is used to randomize query ids.
  -
  -        EDNS0 options are now supported.
  -
  -        UDP IXFR is now supported.
  -
  -        The wire format parser now has a 'one_rr_per_rrset' mode, which
  -        suppresses the usual coalescing of all RRs of a given type into a
  -        single RRset.
  -
  -        Various helpful DNSSEC-related constants are now defined.
  -
  -        The resolver's query() method now has an optional 'source' parameter,
  -        allowing the source IP address to be specified.
  -
  - Bugs fixed since 1.6.0:
  -
  -        On Windows, the resolver set the domain incorrectly.
  -
  -        DS RR parsing only allowed one Base64 chunk.
  -
  -        TSIG validation didn't always use absolute names.
  -
  -        NSEC.to_text() only printed the last window.
  -
  -        We did not canonicalize IPv6 addresses before comparing them; we
  -        would thus treat equivalent but different textual forms, e.g.
  -        "1:00::1" and "1::1" as being non-equivalent.
  -
  -        If the peer set a TSIG error, we didn't raise an exception.
  -
  -        Some EDNS bugs in the message code have been fixed (see the ChangeLog
  -        for details).


author: - <nick.alcock@oracle.com> - 1.2.1-1
changelog:
  - Fix bug causing DTrace to fail to terminate if a subprocess grabbed with -c
    dies when the pid or usdt providers, ustack() or similar actions are in use
    [Orabug: 29195206]
  - Fix compilation failure with glibc 2.28+ due to makedev() [Orabug: 29196221]
  - Fix testsuite to work with GNU Awk 4.2+'s new plugin system (Eugene Loh)
    [Orabug: 29056323]


author: - <nick.alcock@oracle.com> - 1.2.0-1
changelog:
  - Add pcap(skb, proto) action to support libpcap-based packet capture, with
    formatted output when tshark is installed (Alan Maguire, Nick Alcock)
    [Orabug: 28953618]
  - Fix memory leaks [Orabug: 29036502] [Orabug: 28990529]
  - Translator changes for kernel 4.19 and 4.20-pre compatibility
  - Improve resilience of signal.d generation in later glibc releases
    (Eugene Loh) [Orabug: 28951289]
  - Testsuite: handle systems on which ping6 is in /usr/bin (Eugene Loh)
    [Orabug: 28958357]
  - Testsuite: allow for increased SDT arg count (Kris Van Hees)
    [Orabug: 28217266]


author: - <nick.alcock@oracle.com> - 1.1.1-1
changelog:
  - Skip unstable tests, as this is a release branch
  - Boost timeouts on a few tests for VMs on which fork() is slow
  - Mark a few more tests unstable
  - Do not run noresolve tests on UEK4 (Vincent Lim)


author: - <nick.alcock@oracle.com> - 1.1.0-1
changelog:
  - Add more DTRACE_PROBE definitions to sdt.h, for SystemTap
    compatibility, and test them (Tomas Jedlicka) [Orabug: 27721525]
  - New ctfpath option, allowing explicit specification of ctf archives
    to use for the running kernel (Tomas Jedlicka) [Orabug: 28178265]
  - Fix memory leaks and minor uninitialized-data bugs [Orabug: 28247636]
  - Add test for SDT argument retrieval from stack, in UEK4QU7
    (Kris Van Hees) [Orabug: 25949088]
  - Remove preallocation from the buffering testsuite (Tomas Jedlicka)
    [Orabug: 27998779]
  - Include the smoketests in make check [Orabug: 28128338]
  - Improve testsuite temporary file creation (Eugene Loh)
    [Orabug: 28142056]
  - Clean up compiler warnings (Eugene Loh) [Orabug: 27934422, 27998779]


author: - <nick.alcock@oracle.com> - 1.0.4-1
changelog:
  - Properly handle breakpoints tripped while DTrace is exiting
    [Orabug: 28473826]
  - Do not crash on self-grabs and on races with dtrace termination
    [Orabug: 28361373]
  - Test fixes (boost timeouts, kernel 4.17 compatibility,
    unskip a forgotten test).


author: - <nick.alcock@oracle.com> - 1.0.3-1
changelog:
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Speed up aggmod tests (Eugene Loh, Tomas Jedlicka)
    [Orabug: 28007146, 28119700]


author: - <nick.alcock@oracle.com> - 1.0.1-1
changelog:
  - ARM64 USDT and pid probe support (Kris Van Hees) [Orabug: 27847969]
  - Fix -c option on ARM64 (Kris Van Hees) [Orabug: 27847946]
  - Disable pid provider tests on UEK4.
  - Testsuite fixes [Orabug: 27921244, 27919918]


author: - <tomas.jedlicka@oracle.com> - 1.0.0-9
changelog:
  - Updated translators to match new kernel redesign of per-task and
    per-process data. [Orabug: 27731759]
  - Enhanced build system to support multiple kernels [Orabug: 27731756]
  - Added pid provider support (Kris Van Hees) [Orabug: 27609459]
  - Adjusted the interpretation of /proc/kallmodsyms for aarch64
    (Eugene Loh) [Orabug: 27214992]


author: - <nick.alcock@oracle.com> - 1.0.0-8
changelog:
  - Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
    avoiding lifecycle issues that can cause access to freed memory when
    victims are exec()ing rapidly [Orabug: 27501199]
  - Bump library soname to libdtrace.so.1 [Orabug: 27501199]
  - Improve handling of symbol name->address and address->name lookup
    (Eugene Loh) [Orabug: 27214992]
  - Check array bounds at compile time [Orabug: 27382268]
  - Fix dtrace -S not printing actions other than the first (Tomas Jedlicka)
    [Orabug: 27565023]
  - Drop expensive, unnecessary bad page state checking from testsuite
    [Orabug: 27577555]
  - Handle interruptions in the testsuite runner better [Orabug: 27577593]
  - Consider erratically failing tests in some directories to be passes
  - Test fixes [Orabug: 27583002, 27651838]


author: - <nick.alcock@oracle.com> - 1.0.0-7
changelog:
  - Internal development release.
  - Several latent porting bugs fixed (Kris Van Hees)
  - Make tests used in smoke testsuite rely on sdt less
    (Kris Van Hees)


author: - <nick.alcock@oracle.com> - 1.0.0-6
changelog:
  - Internal development release.
  - ARM64 support [Orabug: 27438960, 27438993, 27438977]
  - Include correct procfs.h (Tomas Jedlicka) [Orabug: 27266725]


author: - <nick.alcock@oracle.com> - 1.0.0-4
changelog:
  - Internal development release.
  - Eliminate new symbol at address 0 on KPTI-enabled kernels
    [Orabug: 27364377]
  - Boost some test timeouts


author: - <nick.alcock@oracle.com> - 1.0.0-3
changelog:
  - Internal development release.
  - New tests and test fixes (Kris Van Hees, Nicolas Droux)
    [Orabug: 27194352, 27282243]


author: - <nick.alcock@oracle.com> - 1.0.0-1
changelog:
  - Release for smoketesters, not GA
  - Fix mod() normalization: add test for it (Tomas Jedlicka, Eugene Loh)
    [Orabug: 26826564]
  - Fix faulty logic in dtrace_modsym_update() adding symbols to wrong modules
    (Tomas Jedlicka, Eugene Loh) [Orabug: 26848467]
  - ip provider ipv6_tclass and ipv6_flow are not set correctly (Nicolas Droux)
    [Orabug: 27193049]
  - Translator changes for kernels 4.12 -- 4.14 (Nicolas Droux,
    Tomas Jedlicka, Nick Alcock)
  - Add tagging capability to the testsuite (Vincent Lim, Eugene Loh)
    [Orabug: 26992620]
  - Fix kills of hanging dtraces in the testsuite (Eugene Loh, Nick Alcock)
    [Orabug: 27051149]
  - New tests for the lockstat provider and fixes to jstack and 3-arg
    tracemem tests (Eugene Loh, Alan Maguire) [Orabug: 26149894, 27015838]


author: - <nick.alcock@oracle.com> - 0.6.2-2
changelog:
  - Add lockstat provider [Orabug: 26149894] (Alan Maguire)
  - Add missing obsolete of dtrace-modules-provider-headers (Tomas Jedlicka)
    [Orabug: 26883486]
  - Add missing testsuite NFS dependency (Tomas Jedlicka) [Orabug: 26860985]


author: - <nick.alcock@oracle.com> - 0.6.2-1
changelog:
  - Internal development release.
  - Fix segfault at shutdown time if grabbed processes die at
    precisely the wrong time [Orabug: 26528776]
  - New llquantize() aggregation, providing log/linear results
    (Eugene Loh) [Orabug: 26675201]
  - New optional third arg for tracemem(): dynamically-variable size
    limit (Eugene Loh) [Orabug: 26675604]
  - Fix wrong wrong-number-of-args error messages [Orabug: 26402731]
    (Eugene Loh)
  - Fix module address range merging (Eugene Loh) [Orabug: 25767469]
  - Allow referencing of structure and union members named with
    the same name as D keywords, e.g. 'self' [Orabug: 26518086]
  - Changes for the move of UAPI headers into dtrace-utils-devel.
    (Tomas Jedlicka, Nick Alcock).
  - Support CTF in /lib/modules/$(uname -r)/kernel/vmlinux.ctfa
    archive [Orabug: 25815372]
  - Testsuite fixes and new tests for inet_*() and lquantize
    (Eugene Loh, Alan Maguire, Nick Alcock)


author: - <nick.alcock@oracle.com> - 0.6.1-3
changelog:
  - Relicense all of userspace, including the testsuite, to UPL.
  - Merge NEWS from the modules into NEWS for userspace: there is
    only one NEWS now.
  - Test fixes (Tomas Jedlicka, Nick Alcock) [Orabug: 26522961]
  - make check-quick support, skipping long-running tests


author: - <tomas.jedlicka@oracle.com> - 0.6.1-2
changelog:
  - Internal development release
  - Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
    [Orabug: 26261502]
  - Fix wrong depth in dtrace_print_ustack() leading to garbage output
    from jstack() (Eugene Loh) [Orabug: 26045010]
  - Do not build DTrace with debug info by default [Orabug: 26389302]
  - Fix spurious errors and misreading of unaligned data on SPARC,
    breaking ustack() etc with upgraded glibc (Nick Alcock)
    [Orabug: 26378141]
    - Translator changes for the IO provider for NFS (Nicolas Droux)
    [Orabug: 26176938]
  - Search for cpp and ld along the PATH, fixing use of dtrace -C with
    devtoolset-6 and other non-default GCCs (Nick Alcock) [Orabug: 26396530]
  - Test fixes, test harness extensions (consumer tests) and new tests.
  - dtrace-utils-devel now depends on elfutils-libelf-devel.
    (Nick Alcock)
  - dtrace-utils-testsuite now depends on dtrace-devel.
    (Nick Alcock) [Orabug: 26415697]


author: - <nick.alcock@oracle.com> - 0.6.1-1
changelog:
  - Add translators and tests for TCP and UDP (Alan Maguire)
    [Orabug: 25815242]
  - Add translators for the IO provider (Nicolas Droux) [Orabug: 25816562]
  - Add link_ntop() and tests for it (Girish Moodalbail) [Orabug: 25931511]
  - sched.d no longer depends on the sched provider [Orabug: 26036143]
  - Ship a default /etc/dtrace-modules (Nicolas Droux) [Orabug: 25918164]
  - Repeated dtrace -G no longer corrupts the object file (Kris Van Hees)
    [Orabug: 22509887]


author: - <nick.alcock@oracle.com> - 0.6.0-2
changelog:
  - Internal development release
  - Add translator for ip provider [Orabug: 25557249]
  - Test fixes and new tests.


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - Internal development release
  - Allow self-grabs [Orabug: 24829169]
  - Use /proc/pid/map_files if available [Orabug: 24843582]
  - Fix fd leaks on big-endian systems and during heavy exec() [Orabug: 25040553]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678905]
  - Fix infloops in SPARC breakpoint handling [Orabug: 24454127]


author: - <nick.alcock@oracle.com> - 0.5.3-1
changelog:
  - Prevent intermittent assertion failures crashes and hangs when
    shutdown races with termination of a grabbed process [Orabug: 22824594]
    [Orabug: 23028026]


author: - <nick.alcock@oracle.com> - 0.5.2-1
changelog:
  - Do not crash USDT probe users when shared libraries are in the upper half of
    the address space [Orabug: 22384028]
  - Do not waste CPU time busywaiting in a do-nothing ioctl()-heavy loop
    [Orabug: 22370283] [Orabug: 22335130]
  - Testsuite triggers are synchronized with dtrace by default [Orabug: 22370283]
  - Fix dtrace -c and -p on SPARC and improve error-handling paths
    [Orabug: 22390414]
  - Fix smoketests on SPARC [Orabug: 22533468]


author: - <nick.alcock@oracle.com> - 0.5.1-4
changelog:
  - Internal development release.
  - Prevent testsuite hangs when per-arch options are in use [Orabug: 22030161]


author: - <nick.alcock@oracle.com> - 0.5.1-3
changelog:
  - Fix buggy performance improvements to correctly detect out-of-tree modules
    (like dtrace.ko) and speed them up some more [Orabug: 22237449]
    [Orabug: 22238204]


author: - <nick.alcock@oracle.com> - 0.5.1-1
changelog:
  - Internal development release.
  - Improve startup performance when disk cache is cold [Orabug: 22185787]
    [Orabug: 22185763] [Orabug: 22083846]
  - Fix various problems in the testsuite and in DTRACE_DEBUG output
    [Orabug: 21431540] [Orabug: 22170799]


author: - <nick.alcock@oracle.com> - 0.5.0-4
changelog:
  - Improve identification of system daemons that must not be ptraced
    unless explicitly specified [Orabug: 21914902]
  - Improve symbol resolution in the absence of ptrace() [Orabug: 22106441]
  - Fix dtrace -p with an invalid PID [Orabug: 21974221]
  - Close any inherited fds before running testsuite [Orabug: 21914934]


author: - <nick.alcock@oracle.com> - 0.5.0-3
changelog:
  - Internal development release
  - No longer reference UEK3 kernels on SPARC.
  - Do not require 32-bit glibc on SPARC.


author: - <nick.alcock@oracle.com> - 0.5.0-2
changelog:
  - Internal development release
  - No longer Provide: an unversioned dtrace-utils [Orabug: 21622263]
  - Add missing testsuite package deps [Orabug: 21663841] [Orabug: 21753123]
  - Fix check-module-loading testsuite target [Orabug: 21759323]
  - Test logfiles should not be affected by the verbosity of the test run
    [Orabug: 21769905]


author: - <nick.alcock@oracle.com> - 0.5.0-1
changelog:
  - Internal development release
  - SPARC64 support. [Orabug: 19005071]
  - Translator support for 4.1 kernel.


author: - <nick.alcock@oracle.com> - 0.4.6-4
changelog:
  - Add DTrace release and SCM version info via dtrace -Vv [Orabug: 21351062]
  - Add source-tree-independent testsuite RPM (not distributed)
  - Fix the testsuite module-loading pre-checks to actually work
    [Orabug: 21344988]
  - Various build system fixes


author: - <nick.alcock@oracle.com> - 0.4.6-3
changelog:
  - Internal development release
  - Fix deadlocks and failures to latch processes for symbol lookup caused
    by failure to correctly track their state over time, in 0.4.6-1+ only.


author: - <nick.alcock@oracle.com> - 0.4.6-2
changelog:
  - Internal development release
  - Fix a rare race causing stalls of fork()ed children of traced processes
    under load, in 0.4.6-1 only [Orabug: 21284447]


author: - <nick.alcock@oracle.com> - 0.4.6-1
changelog:
  - Internal development release
  - Support multiple kernels with a single userspace tree, loading system
    D libraries from directories named like /usr/lib64/dtrace/3.8.
    [Orabug: 21279908]
  - Processes being userspace-traced can now receive SIGTRAP.
    [Orabug: 21279300]
  - dtrace-utils-devel now depends on the same version of dtrace-utils.
    [Orabug: 21280259]
  - No longer lose track of processes that exec() while their dynamic linker
    state is being inspected. [Orabug: 21279300]
  - No longer assume that the symbol table of processes that are no longer
    being monitored is unchanged since it was last inspected. [Orabug: 21279300]
  - Properly remove breakpoints from fork()ed children. [Orabug: 21279300]


author: - <nick.alcock@oracle.com> - 0.4.5-1
changelog:
  - Automatically load provider modules from /etc/dtrace-modules, if present
    [Orabug: 19821254]
  - Fix intermittent crash on failure of initial grabs or creations of processes
    via dtrace -c, -p, or u*() functions [Orabug: 19679998]
  - Reliably track and compensate for processes undergoing execve()s
    [Orabug: 19046684]
  - Handle processes hit by stopping signals correctly [Orabug: 18674244]
  - Fix a sign-extension bug in breakpoint instruction poking [Orabug: 18674244]
  - Fix some broken tests (Kris Van Hees) [Orabug: 19616155]
  - Robustify DTrace against changes to glibc's internal data structures
    [Orabug: 19882050]
  - Fix DIF subr names in dtrace -S output [Orabug: 19881997]


author: - <nick.alcock@oracle.com> - 0.4.3-1
changelog:
  - Fix array underrun when no textual mapping for the executable can be found
    [Orabug: 18550863]
  - Fix unlikely buffer overrun at process-map-read time [Orabug: 18550863]
  - Fix traversal of realloc()ed pointer which could lead to textual mappings
    being spuriously missed [Orabug: 18550863]
  - Fix error-path dereference of uninitialized variable in error message
    [Orabug: 18550863]


author: - <nick.alcock@oracle.com> - 0.4.2-2
changelog:
  - Interrupting dtrace with a SIGINT while monitored processes are dying no
    longer hangs dtrace on a condition variable [Orabug: 18689795]
  - Symbol lookups on processes that died at the same instant now always fail
    and no longer access freed memory [Orabug: 18550863]


author: - <nick.alcock@oracle.com> - 0.4.2-1
changelog:
  - killing dtrace while a ustack() is in progress no longer risks killing
    crucial system daemons [Orabug: 18600515]
  - Fix a leak of filehandles to executables [Orabug: 18600594]
  - Fix ustack() of multithreaded processes [Orabug: 18412802]
  - Get the pid and ppid right for multithreaded processes [Orabug: 18412802]
  - Fix an uninitialized memory read looking up certain kernel symbols
    [Orabug: 18603463]
  - Fixes for newer versions of make, ld, and bison [Orabug: 18551552]


author: - <nick.alcock@oracle.com> - 0.4.1-1
changelog:
  - Install showUSDT in docdir. (Kris van Hees) [Orabug: 17968414]
  - Install ctf_module_dump. [Orabug: 17968381]
  - A lexer bug was fixed causing spurious errors if D scripts contained a
    pragma or comment at intervals of 8192 characters, and preventing
    the use of scripts >16KiB entirely. [Orabug: 17742866]
  - Fix devinfo_t's dev_statname and dev_pathanme for cases where the
    device does not have partitions. (Kris van Hees) [Orabug: 17973698]
  - A variety of memory leaks and uninitialized memory reads are fixed.
    [Orabug: 17743019]
  - Improve drti.o to minimize overhead when DTrace is not running.
    [Orabug: 17973604]
  - Emit errors from drti.o on stderr, not stdout. [Orabug: 17973604]
  - Use O_CLOEXEC when opening files in drti.o. [Orabug: 17973604]
  - Fix RPM dependencies; automatically install and modprobe the dtrace
    modules as needed. [Orabug: 17804881]


author: Nick Alcock <nick.alcock@oracle.com> - 0.4.0-6
changelog:
  - Fix visibility of .SUNW_dof sections in dtrace -G object files.
    (Kris van Hees) [Orabug: 17476663]
  - Fix typos in changelog and specfile copyright date


author: Nick Alcock <nick.alcock@oracle.com> - 0.4.0-1
changelog:
  - ustack() support and symbol lookups.
  - USDT support.  dtrace -G works.
  - evaltime option now works.
  - DTrace headers largely moved to dtrace-modules-headers.
  - DTRACE_OPT_* environment variables now set options.
    DTRACE_DEBUG=signal emits debugging output on SIGUSR1 receipt.


author: Nick Alcock <nick.alcock@oracle.com> - 0.3.0-1
changelog:
  - CTF support.
  - Fixed install path for dtrace libraries.
  - Fixed -c and -p options.
  - Faster startup.
  - Split out a -devel package.


author: Philip Copeland <philip.copeland@oracle.com> - 0.1-0.3
changelog:
  - The systemtap package in the 'wild' creates a dtrace.1 manpage
    which is bizarre since it doesn't have an associated dtrace 
    binary. This will cause a conflict and the rpm will not install
    Since that man page is superfluous I've had to add a %post
    section here to move our manpage into position in such a way as
    to keep the rpm database happy. Technically this is a bit evil.


author: John Ferlan <jferlan@redhat.com> 0.6.3-19
changelog:
  - Add in upstream changes post bz#1075874 to fix a couple of issues
    with supporting patch and to avoid future potential build issue


author: John Ferlan <jferlan@redhat.com> 0.6.3-15
changelog:
  - Add in upstream submit to support bz#1075874
  - Added missing address element for filesystem 'disk'


author: John Ferlan <jferlan@redhat.com> 0.6.3-7
changelog:
  - Build in RHEL 7.2 branch was failing, add upstream autoconfiscate.sh
    contents to the %build section, plus the prerequisite BuildRequires for
    libtool. Also generates the .revision and .changeset for each build.


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-1
changelog:
  - update to upstream release 0.6.1
  - allow to use tog-pegasus or sblimfscb
  - switch for systemctl for conditional restart of the server


author: Kaitlin Rupert <kaitlin@us.ibm.com> - 0.5.8-2
changelog:
  - Add missing namespace unreg bits for root/interop, root/cimv2 
  - Remove additional reg call of root/virt from postinstall 
  - Do not use /etc directly.  Use sysconfigdir instead
  - Remove additional DESTDIR definition
  - Fix Xen migration URI to not include 'system'
  - Change net->name to net->source


author: Kaitlin Rupert <kaitlin@us.ibm.com> - 0.5.1-5
changelog:
  - Added vsmigser_schema patch to remove dup method name from VSMigrationService
  - Added mem_parse patch to set proper mem max_size and mem values
  - Added mig_prof_ver patch to report the proper Migration Profile version
  - Added hyp_conn_fail patch to fix when not connecting to hyp returns a failure
  - Added rm_def_virtdev patch to remove default DiskRADSD virtual device
  - Added rm_eafp_err patch to remove error status when EAFP no pool link exists
  - Added sdc_unsup patch to make SDC not return unsup for RASD to AC case


author: Kaitlin Rupert <kaitlin@us.ibm.com> - 0.5.1-4
changelog:
  - Added nostate patch to consider XenFV no state guests as running guests
  - Added createsnap_override patch to add vendor defined values to CreateSnapshot
  - Added add_shutdown_rsc patch to add support for shutdown operation
  - Added vsmc_add_remove patch to expose Add/Remove resources via VSMC
  - Added override_refconf patch to fix dup devs where ID matches refconf dev ID


author: Dan Smith <danms@us.ibm.com> - 0.5.1-3
changelog:
  - Added infostore_trunc patch to fix infostore corruption
  - Added vsss_paramname patch to fix VSSS parameter name
  - Added vsss_logic patch to fix terminal memory snapshot logic
  - Added /etc/libvirt/cim directory for infostore


author: Dan Smith <danms@us.ibm.com> - 0.4-2
changelog:
  - Fixed schema registration to pick up ECTP in root/virt properly
  - Fixed schema registration to include ReferencedProfile in interop
  - Added RASD namespace fix


author: Dan Smith <danms@us.ibm.com> - 0.3-4
changelog:
  - Fixed loader config for 64-bit systems
  - Added missing root/interop schema install
  - Added RegisteredProfile.registration to install


author: Dan Smith <danms@us.ibm.com> - 0.1-2
changelog:
  - Cleaned up Release
  - Removed unnecessary Requires
  - After install, condrestart pegasus
  - Updated to latest source snapshot


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.7-11
changelog:
  - Drop dependency on main package from -javadoc.
  - Add license to -javadoc, and OTHERS and TODO to main package docs.
  - Install javadocs and jars unversioned.
  - Fix release-notes.html permissions.
  - Make -javadoc and -contrib noarch where available.


author: Colin Walters <walters@redhat.com> - 3.0.4-7.svn700
changelog:
  - Add patch to make typemapper always accessible
  - Add patch to skip cracktastic X11 test bits which currently fail


author: Colin Walters <walters@redhat.com> - 3.0.4-1.svn630
changelog:
  - New upstream version, drop upstreamed patch parts
  - New patch jna-3.0.4-nomixedjar.patch which ensures that we don't
    include the .so in the .jar


author: Colin Walters <walters@redhat.com> - 3.0.2-7
changelog:
  - Add patch to use JPackage-compatible JNI library path
  - Do build debuginfo package
  - Refactor build patch greatly so it's hopefully upstreamable
  - Install .so directly to JNI directory, rather than inside jar
  - Clean up Requires/BuildRequires (thanks Mamoru Tasaka)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Eric Moret <eric.moret@gmail.com> - 1.0.19-1
changelog:
  - Updated to 1.0.19
  - Added Requires: alsa-utils to address #483322
  - Added dir {_sysconfdir}/alsa/pcm to address #483322


author: Lubomir Kundrak <lkundrak@redhat.com> - 1.0.16-1
changelog:
  - New upstream, dropping upstreamed patches
  - Do not assert fail when pulseaudio is unavailable (#435148)


author: Eric Moret <eric.moret@epita.fr> - 1.0.15-2
changelog:
  - Update to upstream 1.0.15 (#429249)
  - Add "Requires: pulseaudio" to alsa-plugins-pulseaudio (#368891)
  - Fix pulse_hw_params() when state is SND_PCM_STATE_PREPARED (#428030)
  - run /sbin/ldconfig on post and postun macros


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-6
changelog:
  - Merge the whole /etc/alsa/pcm/pulseaudio.conf stuff into
    /etc/alsa/pulse-default.conf, because the former is practically
    always ignored, since it is not referenced for inclusion by any other
    configuration file fragment (#251943)
    The other fragments installed in /etc/alsa/pcm/ are useless, too. But
    since we are in a freeze and they are not that important, I am not fixing
    this now.


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-5
changelog:
  - Split pulse.conf into two, so that we can load one part from
    form /etc/alsa/alsa.conf. (#251943)


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-4
changelog:
  - In the pulse plugin: reflect the XRUN state back to the application.
    Makes XMMS work on top of the alsa plugin. (#307341)


author: Eric Moret <eric.moret@epita.fr> - 1.0.14-2
changelog:
  - Adding pulse as ALSA "default" pcm and ctl when the alsa-plugins-pulseaudio
  package is installed, fixing #251943.


author: Dan Horák <dan[at]danny.cz> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-7
changelog:
  - resolves: #844791
    rank Z_BLOCK flush below Z_PARTIAL_FLUSH only when last flush was Z_BLOCK
  - done some minor .spec file cleanup


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.2.5-4
changelog:
  - Resolves: #678603
    zlib from minizip allowed NULL pointer parameter of function unzGetCurrentFileInfo


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.2.4-1
changelog:
  - update to 1.2.4
    use the upstream make/configure files for zlib,
    change additional makefile/configure file to be used only to minizip
    add pkgconfig to zlib


author: Stepan Kasal <skasal@redhat.com> - 1.2.3-21
changelog:
  - consolidate the autoconfiscation patches into one and clean it up
  - consequently, clean up the %build and %install sections
  - zconf.h includes unistd.h again (#479133)


author: Jeff Johnson <jbj@jbj.org> 1.2.0.7-2
changelog:
  - fix: gzeof not set when reading compressed file (#106424).
  - fix: revert zlib.h include constants for now (#106291).


author: Jakub Jelinek <jakub@redhat.com> 1.1.4-2
changelog:
  - remove glibc patch, it is no longer needed (zlib uses gcc -shared
    as it should)
  - run tests and only build the package if they succeed


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.3-24
changelog:
  - Add example.c and minigzip.c to the doc files, as
    they are listed as examples in the README (#52574)


author: Martin Kolman <mkolman@redhat.com> - 0.25.3-1
changelog:
  - Update translations
    Resolves: rhbz#1688260
  - Switch from Transifex to Zanata for pulling translations (mkolman)
    Related: rhbz#1688260


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.25-1
changelog:
  - Add and use the safe_string module and the SafeStr class (vpodzime)
  - Give translators hint about the cryptic strings (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.23-1
changelog:
  - Use Sphinx syntax for docstrings (vpodzime)
  - Allow a change of the I/O functions (vpodzime)
  - Reword the 'Debug' button warning (#948256) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.22-1
changelog:
  - Some more stuff for ABRT/libreport (#929181) (vpodzime)
  - Tell ABRT we are reporting a Python excetion (vpodzime)
  - Use named tuples instead of our magic tuples (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.21-1
changelog:
  - New purely textual text interface (vpodzime)
  - Add dumb enableNetwork implementation to GraphicalIntf (vpodzime)
  - Destroy main window after running it (vpodzime)
  - Get rid of the accountManager and use new libreport API (vpodzime)
  - Add a way to override previously registered callback (vpodzime)
  - Allow callbacks marked as attachment only (vpodzime)
  - Add support for callbacks providing additional data (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.19-1
changelog:
  - Add test for handling unicode strings and files (vpodzime)
  - Read files as UTF-8 and ignore errors (#874250) (vpodzime)
  - Add %check section to the spec file (vpodzime)
  - Fix tests (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.18-1
changelog:
  - Handle tracebacks with no stack (#866441) (vpodzime)
  - Parse component name correctly (#866526) (vpodzime)
  - Spelling corrections (#865993) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.16-1
changelog:
  - Do not overwrite process information with files having the same basename (vpodzime)
  - Encode dump as utf-8 before writing to file (#854959) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.15-1
changelog:
  - Add main_window property to the MainExceptionWindow (vpodzime)
  - Don't try to dump objects without __dict__ (vpodzime)
  - Change require from rpm to rpm-python (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.14-1
changelog:
  - Use just a basename of the attached file as the item name (vpodzime)
  - Set the type hint for the mainExceptionWindow to Dialog (vpodzime)
  - Store and then write out the string representation of the traceback and object dump (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Add files specified in the Config object as attachments to bugreports (vpodzime)
  - Display hint how to quit the debugger (vpodzime)
  - Do not kill the process when 'continue' is used in pdb (vpodzime)
  - Port to Gtk3 and the new design (vpodzime)
  - Remove the rc attribute and getrc methods (vpodzime)
  - Fix 'all' and 'install' Makefile targets (vpodzime)
  - Migrate l10n to Transifex (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> 0.12
changelog:
  - Use new libreport API to get more information to bugzilla (vpodzime).
  - Adapt to the new API of libreport (vpodzime).
  - Move "import rpm" to where it's needed to avoid nameserver problems (clumens).
    Resolves: rhbz#749330
  - Change dependency to libreport-* (mtoman).
    Resolves: rhbz#730924
  - Add abrt-like information to bug reports (vpodzime).
    Resolves: rhbz#728871
  - Propagate the screen attr when using text mode (jmoskovc).


author: Chris Lumens <clumens@redhat.com> - 0.11-1
changelog:
  - Update the spec file URL to something valid (#670601). (clumens)
  - Don't use _D for Debug, since that's already used by the expander (#640929). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.9-1
changelog:
  - Remove the requirement on python-bugzilla (#602794). (clumens)
  - Rename ba.po -> bs.po (#583055). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.8-1
changelog:
  - And add a requirement for report as well. (clumens)
  - filer.py is now completely taken over by meh. (clumens)
  - Everything from savers.py has moved into report. (clumens)
  - Remove unused UI code now that report handles all this for me. (clumens)
  - Switch ExceptionHandler to use report (#562656). (clumens)
  - Don't allow an exception when writing out an attribute stop the whole dump. (clumens)
  - Credit where credit is due. (clumens)


author: Chris Lumens <clumens@redhat.com> - 0.7-1
changelog:
  - Add a test case framework.
  - Move src -> meh for ease of test case writing.
  - Another attempt at making the attrSkipList work (#532612, #532737).


author: Chris Lumens <clumens@redhat.com> - 0.6-1
changelog:
  - Make idSkipList work again.
  - Support dumping objects derived from Python's object.
  - Use the right method to set text on a snack.Entry (#526884).


author: Chris Lumens <clumens@redhat.com> - 0.4-1
changelog:
  - Add a default description to bug reports.
  - Handle the user pressing Escape by continuing to show the dialog.
  - Lots more translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.2-1
changelog:
  - Add a title to the main exception dialog so it looks right in anaconda.
  - Don't include an extra '/' in the displayed bug URL (#517515).
  - Now that there's .po files, package them.
  - Use the new exception icon (#517164).


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.99-7
changelog:
  - Update dependencies and summary
  - Remove xmltest.xml due to copyright
  - Replace PERL_INSTALL_ROOT with DESTDIR


author: Paul Howarth <paul@city-fan.org> - 0.99-3
changelog:
  - Drop redundant runtime dependencies on perl(XML::LibXML) and
    perl(XML::LibXML::Common), which cause circular build dependencies (#720974)
  - Simplify provides and requires filters
  - Don't need to remove empty directories from buildroot
  - Mark POD files as %doc


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-8
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.16-1
changelog:
  - Update to 0.16.
  - Brings specfile closer to Fedora Perl template.
  - Corrects Source0 URL (upstream maintainer has changed).
  - Move Requires filter into spec, and add Provides filter.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.12-7
changelog:
  - #121167
  - Handle ParserDetails.ini parser registration.
  - Require perl(:MODULE_COMPAT_*).
  - Own installed directories.


author: Ray Strode <rstrode@redhat.com> 2.13.1-7
changelog:
  - run automake in %build so that shlib patch gets
    built
  - change libdir logic to happen at configure time because
    automake's conditional support isn't that sophisticated
  - s/%makeinstall/make install DESTDIR=$RPM_BUILD_ROOT/


author: Florian La Roche <laroche@redhat.com>
changelog:
  - add a version-release to the Provides: bonobo-activation since
    many packages still try to request a specific version number


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 1.110.0
  - Rebuild for dependencies
  - Intltoolize, the included version has problems with our Perl


author: Peter Hutterer <peter.hutterer@redhat.com> 7.4-4
changelog:
  - Block penmount and elographics too. Penmount is unmaintained, elographics
    is maintained but may not work with the latest Xorg.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.4-3
changelog:
  - Remove aiptek, acecad, fpit, hyperpen, penmount, mutouch. They are not
    maintained upstream anymore.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.3-10
changelog:
  - s/synaptics/xorg-x11-drv-synaptics/.
  - Remove calcomp, citron, digitaledge, dmc, dynapro, jamstudio, magellan,
    microtouch, palmax, spaceorb, summa, tek4957, ur98. Nobody uses them.


author: Adam Jackson <ajax@redhat.com> 7.3-1
changelog:
  - Superstition bump to 7.3.
  - xorg-x11-drv-wiimote.
  - Additional commentary about drivers that aren't included here.


author: Adam Jackson <ajax@redhat.com> 7.2-2
changelog:
  - Package review feedback fixes: (#226573)
    - Remove URL, misleading
    - Remove the Obsoletes: xorg-x11
    - Fix License tag


author: Adam Jackson <ajax@redhat.com> 7.2-1
changelog:
  - Superstition bump to 7.2
  - ExcludeArch of s390{,x}
  - Only ExclusiveArch those drivers that really are processor-specific
  - Readd forgotten -tek4957


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.8.gitca6a1c90
changelog:
  - Latest pre 4.3 snapshot
  - New option to display compression options used
  - Some error message improvements


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.1.git0be606be
changelog:
  - Pre-release of 4.3 to get early testing
  - This update includes a bit of internal code infrastructure changes
  - There are lots of fixes to better handle bad data
  - The final release is expected sometime in December
  - Until the release only the README doc file is available


author: Bruno Wolff III <bruno@wolff.to> - 4.2-1
changelog:
  - 4.2 is released.
  - Bugfix for bad data causing crash.
  - Include doc files added for release.
  - Big endian patch is now upstream.
  - Buildroot tag isn't needed any more.
  - We can now specify CFLAGS on the make call.
  - Compressor options are now passed with the make call.


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.2.20101231
changelog:
  - Pull latest upstream snapshot
  - Includes check for matching compression type when adding to an existing image
  - Sample cvs command now includes timezone and specifies when on the date to use for the snapshot


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.1.20101223
changelog:
  - Switch to 4.2 development snapshot to get new XZ support
  - LZMA and XZ (LZMA2) support are now different


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.4.20100827
changelog:
  - Rebase to latest upstream.
  - The main reason is to pick up a fix for large xattr similar to the large inode fix. This doesn't need to get backported as 4.0 doesn't have xattr support.
  - An option was added to build without xattr support.
  - Various source cleanups have been done as well.


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.3.20100803
changelog:
  - Rebase to latest upstream
  - Prevent warning message for xattr for virtual directory
  - Fix issue with large inodes - BZ 619020


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.1.20100607
changelog:
  - Rebase to 4.1 prerelease with xz wrapper
  - Provides lzma compression as an option.
  - squashfs-fix-unsquashing-v3.patch is part of the 4.1 prerelease


author: Serhei Makarov <smakarov@redhat.com> - 3.3-3
changelog:
  - Add BPF left-operand fix (rhbz1560044) (x86-64 only)
  - Add stap.1 note on missing stapbpf.8 (rhbz1560044)
  - Fix RHEL-ALT build (rhbz1544689)


author: Frank Ch. Eigler <fche@redhat.com> - 3.3-2
changelog:
  - Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
  - Fix vfs.add_to_page_cache probe (rhbz1547238)
  - Fix foreach_limit.exp compilability (rhbz1591267)


author: Frank Ch. Eigler <fche@redhat.com> - 3.2-3
changelog:
  - rhbz1506230 (netif_receive_skb_internal probing)
  - rhbz1490862 (f2fs tracepoint header workarounds)


author: David Smith <dsmith@redhat.com> - 3.1-3
changelog:
  - Added patches for:
  - rhbz1425568 task_dentry_path() fix
  - rhbz1431263 arm64 hardware breakpoint crash fix
  - rhbz1430828 replace task_exe_file() with current_exe_file()
  - rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
  - rhbz1433391 workaround parser issue in nfs_proc.stp
  - rhbz1428120 update lookup_bad_addr()


author: Frank Ch. Eigler <fche@redhat.com> - 3.0-3
changelog:
  - rhbz1346112 delay tls cert creation
  - rhbz1269062 null elevator
  - rhbz1337416 'count' tapset variable - autocast/@defined


author: Frank Ch. Eigler <fche@redhat.com> - 2.8-3
changelog:
  - rhbz1237098: handle symbol-table vs. linkage-name mismatches better
  - some runtime robustification fixes backported from upstream


author: Frank Ch. Eigler <fche@redhat.com> - 2.7-2
changelog:
  - Upstream release, incl. rhel6.7 post-release xmltohtml patch
  - pre-rebase-rebase for aarch64 mass-rebuild


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-6
changelog:
  - rhbz1164373 (fix ppc64 kprobes via KERNEL_RELOC_SYMBOL)
  - rhbz1119335 (document STAP_FIPS_OVERRIDE in staprun.8)
  - rhbz1127591 (ppc64 hcall_* tracepoint blacklisting)


author: Frank Ch. Eigler <fche@redhat.com> - 2.6-3
changelog:
  - Added probinson's patch BZ1141919 for enabling more ppc64/aarch64 facilities,
    with some staplog.c followup


author: Jonathan Lebon <jlebon@redhat.com> - 2.4-10
changelog:
  - Apply spec file patches to this one, not the tarred one
  - Add missing autoreconf patch for backport feature (1051649)


author: Jonathan Lebon <jlebon@redhat.com> - 2.4-3
changelog:
  - Backport fixes for: 1054962, 1054956, 1054954, 1044429
  - Backport boot-time probing feature (1051649)


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-3
changelog:
  - Add zlib-devel to buildreq; missing from crash-devel
  - Process testsuite .stp files for #!stap->#!/usr/bin/stap


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-1
changelog:
  - Add crash-devel buildreq to build staplog.so crash(8) module.
  - Many robustness & functionality improvements:


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Frank Ch. Eigler <fche@redhat.com> - 0.5-1
changelog:
  - Many fixes and improvements: 1425, 1536, 1505, 1380, 1329, 1828, 1271,
    1339, 1340, 1345, 1837, 1917, 1903, 1336, 1868, 1594, 1564, 1276, 1295


author: Roland McGrath <roland@redhat.com> - 0.4.2-1
changelog:
  - Many fixes and improvements: PRs 1344, 1260, 1330, 1295, 1311, 1368,
    1182, 1131, 1332, 1366, 1456, 1271, 1338, 1482, 1477, 1194.


author: Roland McGrath <roland@redhat.com> - 0.4.1-1
changelog:
  - Many fixes and improvements since 0.2.2; relevant PRs include:
    1122, 1134, 1155, 1172, 1174, 1175, 1180, 1186, 1187, 1191, 1193, 1195,
    1197, 1205, 1206, 1209, 1213, 1244, 1257, 1258, 1260, 1265, 1268, 1270,
    1289, 1292, 1306, 1335, 1257


author: Martin Hunt <hunt@redhat.com>
changelog:
  - Set Version to use version from autoconf.
  - Fix up some of the path names.
  - Add Requires and BuildRequires.


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (aarch-64) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 4.8.5-39.0.4
changelog:
  - Backport the fix for the erratum 843419 of Cortex A53.
    [Orabug: 29777365]
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 4.8.5-39.0.2
changelog:
  - [Orabug: 27987827] (Michael Ploujnikov)
    Enable stable binary output for Ksplice
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Do not pass -export-dynamic to the linker in static links in aarch64.
    [Orabug: 28841734]
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - [Orabug: 28212574]
    Fix alignment for section anchor in aarch64 targets
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Use %find_lang macro.
  - Add %doc files, including mandatory copy of the LGPL license.
  - Use -j16
  - Improve the descriptions


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-12.el7
changelog:
  - ocfs2-tools: to support aarch64 on ol8 (Shuning Zhang)  [Orabug: 30317888] 
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish Samant)  [Orabug: 28804934] 
  - ocfs2-tools: added spec rhel8 for jenkins (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: added support for rhel8 rpm package build (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: fix the conflict of gcc option in Makefile (Shuning Zhang)  [Orabug: 29292163] 
  - tunefs.ocfs2: fix format security warning (Shuning Zhang)  [Orabug: 29292163] 
  - o2image: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163] 
  - mounted.ocfs2: use <sys/sysmacros.h> include for makedev (Valentin Vidic)  [Orabug: 29292163] 
  - fsck.ocfs2: fix compile error when glibc upgrade (Gang He)  [Orabug: 29292163] 
  - ocfs2-libocfs2: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163]


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-14
changelog:
  - Install into /usr/lib64/system rather then /lib64/system (rpmdiff error)
  - Fix coverity issues
  - Silence coverity warnings


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Back to using libdvdcss 1.1.1, now it's all merged and fine.
  - Rebuilt against Red Hat Linux 7.3.
  - Added the -j16 expansion.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64 to avoid unpackaged files error.


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-2.el7_6.aarch64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


