# changelog

author: Kamil Dudka <kdudka@redhat.com> 7.29.0-23
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-24
changelog:
  - use the default min/max TLS version provided by NSS (#1170339)
  - improve handling of timeouts and blocking direction to speed up FTP (#1218272)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-26
changelog:
  - implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318)
  - improve parsing of URL-encoded user name and password (#1260178)
  - prevent test46 from failing due to expired cookie (#1258834)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-28
changelog:
  - prevent NSS from incorrectly re-using a session (#1269855)
  - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324)
  - disable unreliable upstream test-case 2032 (#1241168)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-33
changelog:
  - fix re-using connections with wrong client cert (CVE-2016-5420)
  - fix TLS session resumption client cert bypass (CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-37
changelog:
  - fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
  - handle cookies with numerical IPv6 address (#1341503)
  - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
  - curl -E: allow to escape ':' in cert nickname (#1376062)
  - run automake in %prep to avoid patching Makefile.in files from now on


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Vendor backports.configparser 3.5.0b2
  - Fix compatibility issues with old setuptools
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-4
changelog:
  - Fix whitespace handling in URLs
  - Use upstream patches to replace patches for setuptools and configparser
  - resolves: #1436763


author: Christian Heimes <cheimes@redhat.com> - 0.3.1-1
changelog:
  - Rebase to Custodia 0.3.1
  - Vendor custodia.ipa 0.1.0
  - Vendor backports.configparser 3.5.0 final
  - related: #1403214


author: Christian Heimes <cheimes@redhat.com> - 0.3.1-3
changelog:
  - Remove custodia user from tmpfiles.d, resolves #1460735
  - Add missing systemd hooks for service and socket files
  - Drop dependency on python-mock and skip mock tests in check block,
    resolves #1447426


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-29
changelog:
  - Correct handling systemd service (bug #737264)
  - Allow configuration with automake-1.13.1
  - Allow to stop all server instances by stopping cvs.target


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-30
changelog:
  - Fix texinfo documentation to work with texinfo-5.1 (bug #970716)
  - Do not crash if crypt(3) returns NULL (bug #966497)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-31
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name. This reverts
    canonicalization on clite side introduced with 1.11.23-20 and replaces it
    with a more benevolent key selection on server side. (bug #722972)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-32
changelog:
  - Harden build for cvs in server role (bug #983164)
  - Add cvs.sh(5) manual page (bug #983164)
  - Add cvs.csh(5) manual page (bug #983164)


author: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.4.17-1
changelog:
  - New upstream version, fixes upstream bugs:
  - reconstruct doesn't retain internaldate correctly (#3733)
  - Race condition in maibox rename (#3696)
  - DBERROR db4: Transaction not specified for a transactional database (#3715)
  - performance degradation on huge indexes in 2.4 branch (#3717)
  - typo fix in imapd.conf man page (#3729)
  - quota does not find all quotaroots if quotalegacy, fulldirhash and prefix are used and virtdomains is off (#3735)
  - Mail delivered during XFER was lost (#3737)
  - replication does not work on RENAME (#3742)
  - Failed asserting during APPEND (#3754)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.26-10
changelog:
  - fix hardening for /usr/sbin/saslauthd
  - add testsaslauthd.8 man page to the package
  - use static md5global.h file


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Doug Ledford <dledford@redhat.com> - 2.0.25-3.el6
changelog:
  - Update config directory for rhel6 (from /etc/ofed to /etc/rdma)
  - Remove compat-dapl and split it off to its own rpm
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 2.0.25-4.el6
changelog:
  - Clean up rpmlint warnings about unversioned obsoletes
  - Make setup quite
  - Include COPYING file in docs
  - Fix naked macro in changelog
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.1.el6
changelog:
  - dapl-2.0.25-signal-handler.patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel
  - dapl-2.0.25-new-providers.patch
    Resolves: bz636596
  - dapl-2.0.25-dat_ia_open_hang.patch
    Resolves: bz649360
  - dapl-2.0.25-cleanup-cr-linkings-after-dto-error-on-ep.patch
    Resolves: bz626541
  - dapl-2.0.25-verbs-cq-completion-channels-leak.patch
    Resolves: bz637980


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Colin Walters <walters@verbum.org> - 1:1.6.12-2
changelog:
  - Enable all upstream tests
    Resolves: #955532
    This is fairly hacky; a much better replacement would be
    something like the InstalledTests system.  But we have to live
    with rpm and stuff for now...


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Rex Dieter <rdieter@fedoraproject.org> - 0.15.2-2
changelog:
  - -devel: drop Requires: glib2-devel, already gets pulled in via pkgconfig deps
  - -editor: add icon scriptlets
  - tighten subpkg deps via %{_isa}


author: Kalev Lember <kalevlember@gmail.com> - 0.15.3-1
changelog:
  - Update to 0.15.3
  - Install the HighContrast icons and update the icon cache scriptlets to take
    this into account


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Marek Kasik <mkasik@redhat.com> - 3.22.3-2
changelog:
  - Import dconf-editor package from Fedora 25
  - Add Conflicts tag
  - Version BuildRequires
  - Update License field
  - Resolves: #1388931


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-102
changelog:
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Resolves: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-104
changelog:
  - Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
  - Modify 0209-UPBZ-1430097-multipath-C-API.patch
    * change _pkgconfdir and fixed double-closing fd
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Related: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-107
changelog:
  - Modify 0197-RHBZ-1394059-max-sectors-kb.patch
    * Make multipath only change max_sectors_kb on creates. On reloads, it
      just makes sure the new path matches the multipath device.
  - Refresh 0198-RHBZ-1372032-detect-path-checker.patch
  - Refresh 0201-RHBZ-1403552-silence-warning.patch
  - Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
  - Refresh 0207-UP-add-libmpathcmd.patch
  - Refresh 0212-RHBZ-1431562-for-read-only.patch
  - Resolves: bz #1394059


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-109
changelog:
  - Add 0214-RHBZ-1392115-set-paths-not-ready.patch
    * Set ENV{SYSTEMD_READY}="0" on multipath path devices
  - Resolves: bz #1392115


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-110
changelog:
  - Add 0215-RHBZ-1444194-fix-check-partitions.patch
    * make sure kpartx partions match the correct device
  - Add 0216-RHBZ-1448562-fix-reserve.patch
    * don't join threads that haven't been created
  - Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * blacklist db2.* devices
  - Add 0218-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1444194, #1448562, #1437329, #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111
changelog:
  - Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * Incorrect change, and the bug is already fixed.
  - Move 0218-RHBZ-1448576-3PAR-config.patch to
    0217-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111.1
changelog:
  - Add 0218-RHBZ-1510837-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1510834-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0220-RHBZ-1510834-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Add 0221-RHBZ-1510839-nimble-config.patch
  - Resolves: bz #1510834, #1510837, #1510839


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111.2
changelog:
  - Modify Add 0220-RHBZ-1510834-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1510834


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #995538


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1018439


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't 
      wiped on the device add event 
  - Add 0068-RHBZ-1034578-label-partition-devices.patch   
    * Make sure that partition devices are labeled like the whole device 
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch   
    *  Use RTPG data in RDAC checker 
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch   
    * make multipathd interactive commands able to handle /dev/<devnode> 
      instead of just <devnode>
  - Resolves: bz #1022899, #1031546, #1033791, #1034578, #1036503


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.
  - Resolves: bz #1039199


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag, and
      change compilation flags for non-rpmbuild compiles
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.
  - Add 0077-RHBZ-1054806-mpathconf-always-reload.patch
    * Make mpathconf always reconfgure multipathd when you run it with
      a reconfigure option and --with-multipathd=y, even if the
      configuration doesn't change.
  - Update Requires and BuildRequires for device-mapper to 1.02.82-2
  - Install new udev rules file /usr/lib/udev/rules.d/11-dm-mpath.rules
  - Related: bz #1039199
  - Resolves: bz #1054806, #1056686, #1056976


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-65
changelog:
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * Fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Resolves: bz #1054044, #1070581


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-66
changelog:
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.
  - Resolves: bz #1075796


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Resolves: bz #1069584, #1104605, #1086825, #1086825, #1127944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-69
changelog:
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Resolves: bz #979474


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Modify 0096-RHBZ-979474-new-wildcards.patch
    * Fix a faulty check
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Related: bz #979474
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Re-add 0050-RH-listing-speedup.patch
  - Modify 0098-UPBZ-1067171-mutipath-i.patch
    * add dry_run cleanup code from upstream
  - Refresh 0099-RH-add-all-devs.patch
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Add 0101-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0102-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Resolves: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0103-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1148979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-76
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Fixed compiler warning message for builds with old device-mapper versions
  - Add 0104-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Resolves: bz #1159337
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Add 0105-RHBZ-1180032-find-multipaths-man.patch
    * add find_multipaths to man page
  - Modify multipath.conf (bz #1069360)
    * add uid_attribute example
  - Resolves: bz #1180032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77.2
changelog:
  - Add 0107-UPBZ-1254292-iscsi-targetname.patch
    * check for targetname iscsi sysfs value
  - Resolves: bz #1267131


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-78
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Code refactor and minor fix.
  - Add 0106-RHBZ-1169935-no-new-devs.patch
    * add new configuration option "ignore_new_boot_devs"
  - Add 0107-RH-adapter-name-wildcard.patch
    * add new paths wildcard to show the host adapter
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch to kpartx -u in 62-multipath.rules to delete removed partitions
  - Add 0109-RH-read-only-bindings.patch
    * add -B support to multipathd
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * virtio-blk devices don't report a WWID so multipath can't use them
  - Add 0111-RH-dont-show-pg-timeout.patch
    * remove pg_timeout setting and displaying code
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * add new configuration option "config_dir"
  - Add 0113-RHBZ-1194917-cleanup.patch
    * code refactoring
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * add new configuration options "delay_watch_checks" and
      "delay_wait_checks"
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * fix crash when multipath fails adding a multipath device
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * New builtin config
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * update default config
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Modify mulfipth.conf default config file (bz #1194794)
  - Related: bz #1153832
  - Resolves: bz #631009, #1043093, #1081397, #1166072, #1169935, #1188179
  - Resolves: bz #1194794, #1194917, #1196394, #1197234, #1198418, #1198424
  - Resolves: bz #1200738, #1212590


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-79
changelog:
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Resolves: bz #1153832, #1209275, #1211383


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Resolves: bz #1201030, #1222123


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-81
changelog:
  - Modify 0128-RHBZ-1222123-mpathconf-allow.patch
    * Fix up covscan complaints.
  - Related: bz #1222123


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Add 0129-UPBZ-1254292-iscsi-targetname.patch
    * check for targetname iscsi sysfs value
  - Resolves: bz #1254292


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Add 0130-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Resolves: bz# 1259523


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-84
changelog:
  - 0131-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices
  - Resolves: bz# 1259831


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.1
changelog:
  - Add 0132-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Resolves: bz #1303623


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.2
changelog:
  - Add 0133-RHBZ-1321019-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Resolves: bz #1321019


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.3
changelog:
  - Add 0134-UPBZ-1328515-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Resolves: bz #1328515


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.4
changelog:
  - Add 0135-RHBZ-1330480-kpartx-sync.patch
    * default to using udev sync mode
  - Resolves: bz #1330480


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.5
changelog:
  - Add 0136-RHBZ-1335746-clear-chkr-msg.patch
    * clear old checker message for offline paths.
  - Resolves: bz #1335746


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-85.6
changelog:
  - Add 0137-RHBZ-1364905-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Resolves: bz #1364905


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-90
changelog:
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Resolves: bz #1255885, #1311463, #1311659, #1333331, #1333492


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-91
changelog:
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Resolves: bz #1341748


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-92
changelog:
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Resolves: bz #1323429


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-93
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Resolves: bz #1299600, #1347769, #1353357


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-95
changelog:
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430
  - Resolves: bz #1350931, #1351430, #1352925, #1356651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-96
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * change missing_uev_msg_delay to missing_uev_msg_timeout, and make
      multipathd re-enable table loads if the timeout has passed
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0155-UPBZ-1300415-PURE-config.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Resolves: bz #1304687, #1362396, #1357382, #1363830


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-97
changelog:
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Added BuildRequires on librados2-devel
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-98
changelog:
  - Modified 0180-multipath-tools-Add-rbd-checker.patch
    * make the rbd path checker only compile if librados2-devel is installed
  - Make librados2-devel only be BuildRequired on x86_64
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99
changelog:
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Resolves: bz #1368501


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.1
changelog:
  - Add 0189-RHBZ-1395298-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Resolves: bz #1395298


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.2
changelog:
  - Add 0190-RHBZ-1429885-max-sectors-kb.patch
    * add new max_sectors_kb multipath.conf parameter
  - Resolves: bz #1429885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.3
changelog:
  - Modify 0190-RHBZ-1429885-max-sectors-kb.patch
    * make max_sectors_kb only update the device sysfs paramter on creates.
  - Resolves: bz #1429885


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.2-1
changelog:
  - New upstream version with missing man pages, thin_metadata_size
    calculator and thin_dump metadata snapshot support.
  - Manual page header fixes


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.1-1
changelog:
  - Add space map checking for thin_check.
  - Add --clear-needs-check option for cache_check.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.3-1
changelog:
  - Tools now open the metadata device in O_EXCL mode to stop
    running the tools on active metadata.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-1
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-29
changelog:
  - dhclient-script: fix stateless DHCPv6 mode (#1101149)
  - Add GUIDs in the DHCP logs for IPoIB. (#1109947)
  - dhclient-script: handle option 121 properly (#1109949)
  - dhclient-script: it's OK if the arping reply comes from our system (#1116004)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130803)
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
               added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-30
changelog:
  - 11-dhclient: handle "dhcp4-change" and limit it to chrony/ntp (#1093490)
  - [dhclient -6] infinite preferred/valid lifetime represented as -1 (#1133839)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-34
changelog:
  - Use network-online.target instead of network.target (#1145832)
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-37
changelog:
  - dhcpd generates spurious responses when seeing requests from vlans on plain interface (#1175350)
  - option 97 - pxe-client-id (#1175422)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-38
changelog:
  - correctly set IB's hw->hlen and add more randomness into xid generation (#1195693)
  - send unicast request/release via correct interface (#1177351)


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: Pavel Šimerda <psimerda@redhat.com> - 12:4.2.5-48
changelog:
  - Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
    restarts by NetworkManager dispatcher.d script


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-1
changelog:
  - New upstream release 0.3.0.1
  - https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.3.0.1
  - obsoletes patch0001


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-15
changelog:
  - Increase the release number to -15 to allow clean upgrade path from
    0.2 since some of the components kept their version the same in 0.3


author: Ondrej Kos <okos@redhat.com> - 0.3.0.1-18
changelog:
  - Apply patch to stop generating doxygen timestamps
  - Apply patch to include correct libini_config file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-18
changelog:
  - Add fedora-dmraid-activation script and dmraid-activation.service systemd unit.
    This replaces dmraid activation part of the former fedora-storage-init
    script that was included in the initscripts package before.
  - Add 'Requires: systemd' to dmraid package.


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-26.el7_2.1
changelog:
  - Do not compile testing support which caused scanning of device-mapper devices.
  - Fix missing cleanup of dmraid-activation.service symlink on package removal.


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Tomas Hozza <thozza@redhat.com> - 2.66-5
changelog:
  - dnsmasq unit file cleanup
    - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
    - drop After syslog.target as this is by default


author: Tomas Hozza <thozza@redhat.com> - 2.66-6
changelog:
  - include several fixies from upstream repo:
    - Tighten hostname checks in legal hostname() function
    - Replace inet_addr() with inet_pton() in src/option.c
    - Use dnsmasq as default DNS server for RA only if it's doing DNS
    - Handle IPv4 interface address labels (aliases) in Linux (#962246)
    - Fix failure to start with ENOTSOCK (#962874)


author: Tomas Hozza <thozza@redhat.com> - 2.66-7
changelog:
  - use _hardened_build macro instead of hardcoded flags
  - include several fixies from upstream repo:
    - Allow constructed ranges from interface address at end of range
    - Dont BINDTODEVICE DHCP socket if more interfaces may come
    - Fix option parsing for dhcp host
    - Log forwarding table overflows
    - Remove limit in prefix length in auth zone


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-2.1
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Tomas Hozza <thozza@redhat.com> - 0.11-13
changelog:
  - Use improved NM dispatcher script from upstream (#980036)
  - Added tmpfiles.d config due to improved NM dispatcher script


author: Tomas Hozza <thozza@redhat.com> - 0.11-20
changelog:
  - use systemd macros instead of directly using systemctl (#1058773)
  - Replace the "Fedora /EPEL" comment in dnssec-trigger.conf (#1055949)
  - Use more newer and more advanced dispatcher script (#1034813)


author: Tomas Hozza <thozza@redhat.com> - 0.11-21
changelog:
  - handle IndexError exception in NM script until NM provides better API (#1063735)
  - restart NM when stopping dnssec-trigger daemon instead of handling
    resolv.conf by ourself. (#1061370)


author: Tomas Hozza <thozza@redhat.com> - 0.11-22
changelog:
  - Improved text in the GUI panel in Hotspot sign-on mode (#1254473)
  - Build all binaries with PIE hardening (#1092526)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-4
changelog:
  - fix loop in post catalog registration(incomplete sed
    coverage) #455680
  - fix broken catalogs for package updates
  - fix removal of files during updates


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Harald Hoyer <harald@redhat.com> 033-150
changelog:
  - make dracut-shutdown not fail fatally
  Resolves: rhbz#1067116
  - do PREINIT6 for DHCP6
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-153
changelog:
  - fcoe: wait for lldpad to be ready
  Resolves: rhbz#1080353
  - network: handle "ip=dhcp6" for all interfaces
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-156
changelog:
  - network: set correct lease times for DHCPv6
  Resolves: rhbz#1064365
  - include dm-cache kernel modules
  Resolves: rhbz#1081435


author: Harald Hoyer <harald@redhat.com> 033-160
changelog:
  - add fsck.<filesystem>, if it exists
  Resolves: rhbz#1083654
  - set IPV6INIT=yes if inet6 is found on the interface
  Resolves: rhbz#1083153


author: Harald Hoyer <harald@redhat.com> 033-165
changelog:
  - do not reload systemd with wait_for_dev
  Resolves:rhbz#1144066
  - do not bind persistent interface names to HWADDR
  Resolves:rhbz#1135478


author: Harald Hoyer <harald@redhat.com> 033-213
changelog:
  - add "-m" option to lsinitrd to list the modules used
  Resolves: rhbz#1122806
  - add "--rebuild" option to dracut
  Resolves: rhbz#1123900


author: Harald Hoyer <harald@redhat.com> 033-224
changelog:
  - don't enforce iSCSI target name policy
  Resolves: rhbz#1078867
  - replaced "ip=auto" with "ip=dhcp" in the documentation
  Resolves: rhbz#1086931
  - bind bonding and bridge interfaces to SUBCHANNELS on s390(x)
  Resolves: rhbz#1090524
  - turn on ipv6, if configured
  Resolves: rhbz#1091410
  - parse DASD="none" as empty
  Resolves: rhbz#1096979
  - add virtio-console for qemu
  Resolves: rhbz#1097999
  - fail on missing dracut modules
  Resolves: rhbz#1121362
  - replace the default route
  Resolves: rhbz#1137022


author: Harald Hoyer <harald@redhat.com> 033-233
changelog:
  - fips: corrected previous fix
  Resolves: rhbz#1165603
  - fixed iscsi_target parsing
  Resolves: rhbz#1176534
  - skip GlobalKnownHostsFile for ssh_config
  Resolves: rhbz#1086778
  - cms-write-ifcfg.sh: turn SUBCHANNELS into lowercase
  Resolves: rhbz#1169384
  - fixed static routes execution
  Resolves: rhbz#1101412
  - add 90-vconsole.rules
  Resolves: rhbz#1162177


author: Harald Hoyer <harald@redhat.com> 033-237
changelog:
  - add support for multiple autoconf options ip=eth0:auto6,dhcp
  Resolves: rhbz#1069270
  - fixed team implementation
  Resolves: rhbz#1147521


author: Harald Hoyer <harald@redhat.com> 033-346
changelog:
  - slim down the image by not including microcode header, if
    not needed
  - add command line parameter for hostonly keyboard layouts
     --hostonly-i18n
  Resolves: rhbz#1262208


author: Harald Hoyer <harald@redhat.com> 033-349
changelog:
  - no iSCSI timeout and modprobe, if iSCSI is not used
  - modprobe iSCSI modules with "-b" to allow blacklisting
  Resolves: rhbz#1263984
  - check for firmware file existance, before crafting
    microcode cpio
  Resolves: rhbz#1263798


author: Harald Hoyer <harald@redhat.com> 033-353
changelog:
  - fix network wait_for_if_up() to parse NO-CARRIER
  Resolves: rhbz#1249507
  - don't create garbage directories because of ldconfig
    misparsing
  Resolves: rhbz#1264725


author: Harald Hoyer <harald@redhat.com> 033-358
changelog:
  - fixed qemu detection
  Resolves: rhbz#1245959
  - fixed vlan ifcfg generation and nameserver handling
  Resolves: rhbz#1267311


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-359
changelog:
  - write-ifcfg: fix creating configuration for VLAN
  Resolves: rhbz#1267311
  - 90qemu: also add ibmvscsi on qemu
  Resolves: rhbz#1245959


author: EL Errata <el-errata_ww@oracle.com> - 033-360.0.2.1
changelog:
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)


author: Harald Hoyer <harald@redhat.com> - 033-457
changelog:
  - add --help documentation for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - mention rd.shell=0 for rd.emergency
  Resolves: rhbz#1359144
  - put IPv6 IP in brackets for IBFT
  Resolves: rhbz#1322592
  - install symlinked ca-bundle.crt for curl and ssl
  Resolves: rhbz#1341280


author: Harald Hoyer <harald@redhat.com> - 033-461
changelog:
  - be more liberal to multiple ip= lines and ip=dhcp
  Resolves: rhbz#1304069
  - don't display error for hba.conf
  Resolves: rhbz#1369342


author: Jacob Wang <jacob.wang@oracle.com> - 033-463.0.1
changelog:
  - Increase timeout when waiting for carrier detection on a network interface [bug 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)


author: Ethan Zhao <ethan.zhao@oracle.com> - 033-463.0.2
changelog:
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug 24408414]


author: EL Errata <el-errata_ww@oracle.com> - 033-463.0.2.1
changelog:
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [bug 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-487
changelog:
  - add upstream tests
  - dracut.sh: fail hard, if we find modules and modules.dep is missing
  Resolves: rhbz#1298656
  - add dracut.pc pkg-config file
  Resolves: rhbz#1397853
  - systemd/dracut-cmdline.sh: unset "UNSET" $root
  Releated: rhbz#1365667
  - dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
  - fips/module-setup.sh: make tcrypt non-optional


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-495
changelog:
  - ifup: don't ifup team master indefinitely
  Resolves: rhbz#1416958
  - write-ifcfg: do't write MTU twice for regular eth devices
  Resolves: rhbz#1366163
  - network/ifup: write override file before dhcp_do
  Resolves: rhbz#1415004


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-499
changelog:
  - module-setup.sh: Add ARM specific driver to initramfs image
  Resolves: #1459277
  - Revert "systemd/dracut-initqueue.sh: don't go into emergency"
  Resolves: #1396865
  - udev-rules: pull in 40-redhat-cpu-hotplug.rules
  Resolves: #1460707


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.2-5
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)
  - modernize spec


author: Peter Jones <pjones@redhat.com> - 2.0-1
changelog:
  - This is the 2.0 release.  It is awesome and adds XML output in order to
    support automated validation of CD images.


author: Honza Horak <hhorak@redhat.com> - 7.1-9
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16, 
    even in case of DAO writing (replaces the previous fix)
    Resolves: #810483


author: Honza Horak <hhorak@redhat.com> - 7.1-11
changelog:
  - Spec file cleanup
  - Print error in case we want to write already written DVD-RW in Sequential
    Recording mode (bug #810838)
  - Add man page for dvd+rw-format


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-13
changelog:
  - when formating blu-ray as srm+pow, handle it later correctly as srm+pow, not srm
  (credits Thomas Schmitt)


author: Jay Fenlason <fenlason@redhat.com> 3.5-1
changelog:
  - New upstream release, which obsoletes both patches.
  - Correct the Source url to point to sourceforge's current path.


author: Jay Fenlason <fenlason@redhat.com> - 3.5-8.1
changelog:
  - Add a patch to shut up some compiler warnings.  (and not segfault on
    machines that can't do unaligned accesses)
    Resolves: rhbz884472


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> 8.0-5
changelog:
  - Add a dyninst-testsuite package.
  - Patch test2_4 to protect against running as root.
  - Make dyninst-static require dyninst-devel.


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Lukas Czerner <lczerner@redhat.com> - 1.42.9-4
changelog:
  - Fix posisble use after free in some error paths (#997982)
  - Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
  - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
  - Allow to resize ext4 file system past 16TB (#982871)
  - Disable altivec instructions for libext2fs on ppc (#1074604)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-5
changelog:
  - Various manpage updates for chattr and mount (#1053885)
  - Fix resize2fs -P hang on corrupted filesystems (#1104612)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Jiri Vanek <jvanek@redhat.com> - 2.5.2-6
changelog:
  - Fixed for JDK7 - https://fedoraproject.org/wiki/Java7_Package_Rebuild_Status
  - Added and aplied patch0, easymock2-nameClash.patch.
    This patch is removing (in easymock3 deprecated) methods, and is keeping new 
    easymock3 api in EasyMock.java for capture set of methods.
    Old methods cant be kept as deprecated as JDK7 can not compile them.
    Test was derived from easymock3' one too.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.5.2-8
changelog:
  - Install LICENSE with javadoc package
  - Don't own _mavendepmapfragdir
  - Install POM in _mavenpomdir instead of _datadir/maven2/poms
  - Update to current packaging guidelines


author: Tom Callaway <spot@fedoraproject.org> - 2.0.10-5
changelog:
  - update to 2.0.10-4 (upstream numbering is goofy)
  - fix missing symbol issue with extension modules (bz810006)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Elliott Baron <ebaron@redhat.com> - 1:4.5.2-2
changelog:
  - Build for JDK 1.6 target.
  - Add ecj-convertto1.6.patch.
  - Add Requires: java >= 1:1.6.0.
  - Resolves: rhbz#1379855


author: Aristeu Rozanski <aris@redhat.com> - 0.16-5
changelog:
  - fixed bogus dates in old changelog entries
  - backported patch to fix library version mismatch [884477]
  - included systemd-devel as BuildRequires for _unitdir rpm definition


author: Matthew Garrett <mjg59@srcf.ucam.org> - 0.5.4-15
changelog:
  - efibootmgr-0.5.4-Work-around-broken-Apple-firmware.patch
    Resolves: #873629
  - efibootmgr-0.5.4-Remove-device-path-padding-on-non-Itanium.patch - improve
    spec conformance
  - efibootmgr-0.5.4-fix-minor-memory-leak.patch - from upstream
  - efibootmgr-0.5.4-fix-disk-minor-number-discovery.patch - from upstream
  - efibootmgr-0.5.4-make_boot_var-does-not-check-for-failed-status-with-.patch -
    from upstream


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Mark Wielaard <mjw@redhat.com> 0.156-4
changelog:
  - Add elfutils-0.156-et_dyn-kernels.patch.
    Fixes an issue on ppc64 with systemtap kernel address placement.


author: Mark Wielaard <mjw@redhat.com> 0.156-5
changelog:
  - Add elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
    Sets up initial CFI return register, CFA location expression and
    register rules for PPC, S390 and ARM (dwarf_cfi_addrframe support).


author: Mark Wielaard <mjw@redhat.com> 0.157-1
changelog:
  - Update to 0.157.
  - Remove elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
  - Remove elfutils-0.156-et_dyn-kernels.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1224169, #1223462, #1207799)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519) 
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.86-6
changelog:
  - Replace define with global in macro definitions
  - Add patch to fix previewing of equations courtesy of Sato Ichi (BZ 646632)
  - Add defattr to doc sub-package


author: Karel Klíč <kklic@redhat.com> - 11.86-9
changelog:
  - ELisp source code is no longer distributed in a separate package
  - License filed includes GFDL for the documentation


author: Peter Schiffer <pschiffe@redhat.com> 4.6.1-1
changelog:
  - resolves: #861849
    updated to 4.6.1
  - cleaned .spec file
  - resolves: #759964
    fixed sigsegv
  - resolves: #812225
    fixed sigsegv
  - fixed requires/buildrequires
  - added tex(pdftex.map) and libjpeg-turbo-devel buildrequires


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.6.2-1
changelog:
  - Rebase to 4.6.2
  - Added explicit build dependency on ImageMagick. It somehow disappeared from emacs dependencies.
  - Patched gnuplot.texi, new latex refused to compile it.


author: Debarshi Ray <rishi@fedoraproject.org> - 3.12.12-4
changelog:
  - Fix certificate validation (use reference identities, handle validation
    failures correctly, fixed the test suite)
  - Resolves: #1386616


author: Adam Tkac <atkac redhat com> - 1.6.6-1
changelog:
  - update to 1.6.6
  - paches merged
    - enscript-1.6.4-hilight.patch
    - enscript-1.6.4-rh457719.patch


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-9
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#1180652)
  - fix: unload from loaded modulefile broken (#1117327)


author: Jack Magne <jmagne@redhat.com>= 1.1.0-21
changelog:
  - Resolves #865721 - Switch BuildRequires from autoconf213 ~~> autoconf
  - Resolves #963606 - esc ceased working after Firefox/xulrunner update to 17 and above series


author: Jack Magne <jmagne@redhat.com>=1.1.0-26
changelog:
  - Resolves: #1033779 - Mouse move on a locked screen display Smart Card Manager smart card insert/removal event notifications.
  - Resolves: #1033220 - ESC phone home/authentication dialog should pop it to top of window stack to get focus


author: Jack Magne <jmagne@redhat.com> - 1.1.0-28
changelog:
  - Thanks to: Marcin Juszkiewicz <mjuszkiewicz@redhat.com>
  - Handle all kernel versions
  - Fix gecko version


author: Jack Magne <jmagne@redhat.com> - 1.1.0-33
changelog:
  - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Ivan Vecera <ivecera@redhat.com> - 2:4.5-3
changelog:
  - Added support for new ETHTOOL_xLINKSETTINGS API
  - Added support for diagnostics information for QSFP Plus/QSFP28 modules
  - Added support for 25G/50G/100G supported and advertised speed modes


author: Milan Crha <mcrha@redhat.com> - 3.12.11-15
changelog:
  - Add patch for RH bug #1229812 (Preserve EWS autodiscovered hosts in GOA accounts)
  - Update patch for RH bug #1202372 (Discover and display all calendar shares associated with GOA Google account)


author: Milan Crha <mcrha@redhat.com> - 3.12.11-16
changelog:
  - Update patch for RH bug #1202372 (Discover and display all calendar shares associated with GOA Google account)


author: Milan Crha <mcrha@redhat.com> - 3.12.11-32
changelog:
  - Add patch for RH bug #1337259 ([IMAPx] Disable and hide "Use Quick Resync if the server supports it")


author: Milan Crha <mcrha@redhat.com> - 3.12.11-36
changelog:
  - Update patch for RH bug #1362674 (CalDAV fails to recognize "Daily Limit Exceeded" error from Google/GOA)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-4
changelog:
  - Add patch for RH bug #1441608 (Use-after-free when setting summary for component with alarms)
  - Add patch for RH bug #1439590 ([IMAPx] Unsubscribed folders shown after refresh)


author: Milan Crha <mcrha@redhat.com> - 3.8.5-16
changelog:
  - Add patch for RH bug #1055893 (Prefer gpg2 over gpg)
  - Add patch for RH bug #1057107 (vFolder does not always refresh automatically)


author: Milan Crha <mcrha@redhat.com> - 3.8.5-23.1
changelog:
  - Add patch for RH bug #1097249 (IMAPx: Improve responsiveness)
  - Add patch for RH bug #1097250 (IMAPx: Avoid 'Empty cache file' error)
  - Add patch for RH bug #1097251 (IMAPx: Avoid 'Source stream returned no data' error)
  - Add patch for RH bug #1097252 (IMAPx: Refetching summary information for all msgs)
  - Add patch for RH bug #1097253 (Fix various memory leaks)


author: Milan Crha <mcrha@redhat.com> - 3.8.5-28
changelog:
  - Add patch for RH bug #1131927 (Crash in LDAP's stop_view function)
  - Add patch for RH bug #1150382 (Coverity scan warning in IMAPx)
  - Add patch for RH bug #1122644 (Weather calendar doesn't work)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-4
changelog:
  - Let user know when expample script needs telnet and it is missing
    Resolves: #703702
  - Use full path to 'su' in passmass example, it's safer
  - Fix expect man page minor formatting issue


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Michal Schmidt <mschmidt@redhat.com> - 1.1.0-0.2.rc1
changelog:
  - Packaging Guidelines conformance fixes and spec file cleanups
  - Fix libfabric dependency
  - Related: bz1235270


author: Petr Šabata <contyk@redhat.com> - 1.0.28-3
changelog:
  - Require just 'systemd' instead of 'systemd-units'
  - Patch the fcoemon manpage with a note for systemd users


author: Petr Šabata <contyk@redhat.com> - 1.0.29-2
changelog:
  - Bug #1024124:
  - Don't install the old configuration file alongside the new one
  - Add bnx2fc to the SUPPORTED_DRIVERS for consistency with previous configuration


author: Petr Šabata <contyk@redhat.com> - 1.0.29-5
changelog:
  - Don't build on s390x again (#1073060)
  - Drop bnx2fc from SUPPORTED_DRIVERS on s390x, for future (#1056371)
  - Update fcoemon(8) with more systemd changes (#1049162)


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Marek Grac <mgrac@redhat.com> - 4.0.11-5
changelog:
  - fence_wti: Fix problem with EOL introduced by rebase
    Resolves: rhbz#1148762
  - fence_rsb: Fix issue with new firmware 
    Resolves: rhbz#1111597


author: Marek Grac <mgrac@redhat.com> - 4.0.11-6
changelog:
  - fence_cisco_ucs and fence_vmware_soap should logout even in case of failure
    Resolves: rhbz#1111599
  - fence_vmware_soap: Fix issue with import of fail_usage
    Resolves: rhbz#1153059


author: Marek Grac <mgrac@redhat.com> - 4.0.11-9
changelog:
  - fence_ilo_ssh: Fix EOL issue, syslog problem and add fence_ilo_[34]_ssh symlink
    Resolves: rhbz#1121122


author: Marek Grac <mgrac@redhat.com> - 4.0.11-11
changelog:
  - fence_ipmilan: Unset default cipher
    Resolves: rhbz#1206294
  - fence_ilo2: Add --tls1.0
    Resolves: rhbz#1206293
  - update scripts so 'make check' is working again


author: Marek Grac <mgrac@redhat.com> - 4.0.11-18
changelog:
  - fence_rsa: Fix login issue
    Resolves: rhbz#1185329
  - fencing: support for list-status
    Resolves: rhbz#1250586
  - fencing: Fix support for --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly

  bz1102727-3-fence_mpath.patch bz1250586-2-list_status.patch


author: Marek Grac <mgrac@redhat.com> - 4.0.11-24
changelog:
  - fence_ipmilan: Add removed attributes -i & timeout
    Resolves: rhbz#1257137
  - fence_ipmilan: Do not print password in verbose mode
    Resolves: rhbz#1241648
  - fence_ilo: Negotiation of TLS1.0 is more automatic
    Resolves: rhbz#1256908


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-27.7
changelog:
  - fence_compute: fix evacuation not working when instance was created
    by non-admin user
    Resolves: rhbz#1322702


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-56
changelog:
  - fencing: add validate-all action
    Resolves: rhbz#1433948
  - fence_rhevm: add "--disable-http-filter" to be able to explicitly
    use oVirt API version 3
    Resolves: rhbz#1422499


author: Marek Grac <mgrac@redhat.com> - 4.0.11-57
changelog:
  - Set SELinux booleans required for fence agent integration with cluster
    Resolves: rhbz#1427986
  - Add consistency of parameters between STDIN and command-line
    Resolves: rhbz#1403028


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-66.3
changelog:
  - fence_compute/fence_scsi: fix issue with some parameters
    (for ABI compatibility)
    Resolves: rhbz#1497241


author: Marek Grac <mgrac@redhat.com> - 4.0.2-13
changelog:
  - fencing: Do not use public key if identity file is not defined
    Resolves: rhbz#1048843
  - fence_vmware_soap: Add support for --delay option
    Resolves: rhbz#1057299
  - fence_wti: Add support for named groups (also for firmware 1.43)
    Resolves: rhbz#1022536


author: Marek Grac <mgrac@redhat.com> - 4.0.2-14
changelog:
  - fence_vmware_soap: Fix unexpected exception
    Resolves: rhbz#1018780
  - nss_wrapper was replaced by gnutls-cli
    Resolves: rhbz#990539


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 4.0.2-17
changelog:
  - Fix fence-agents-* Requires on proper fence-agents-common and silence
    suds error
    Resolves: rhbz#1018780


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-3
changelog:
  - fence-virt: Fix broken restrictions on the port ranges
    Resolves: rhbz#1214301
  - client: Fix "delay" parameter checking
    Resolves: rhbz#1204877
  - Remove delay from the status, monitor and list
    Resolves: rhbz#1204877


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-4
changelog:
  - fence-virt: Enable the TCP listener plugin
    Resolves: rhbz#1334170
  - Allow fence_virtd to run as non-root
    Fix use of undefined define
    Resolves: rhbz#1334170


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-6
changelog:
  - Fix bogus dates in the %changelog
  - Backport better SSL protocol support and documentation
    Resolves: #1273016
  - Minor fixes in options, usage message and man page
    Resolves: #949013


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 3.3.3-3
changelog:
  - After consultation with upstream, enable SSE2 also on x86, altivec on ppc
    and ppc64 and NEON on arm.


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-14
changelog:
  - fix #1048910 - increase perl scripts magic strength
  - fix #1048082 - add support for QCOW3 images detection


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-23
changelog:
  - fix #1094648 - improve Minix detection pattern to fix false positives
  - fix #1161912 - trim white-spaces during ISO9660 detection
  - fix #1157850 - fix detection of ppc64le ELF binaries
  - fix #1161911 - display "from" field on 32bit ppc core
  - fix #1064167 - revert MAXMIME patch
  - fix #1064268 - detect Dwarf debuginfo as "not stripped"
  - fix #1082689 - fix invalid read when matched pattern is the last one tried
  - fix #1080362 - remove deadcode and OFFSET_OOB redefinition


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Ray Strode <rstrode@redhat.com> 3.14.2-6
changelog:
  - Add more goo to the compat desktop file to prevent it
    from getting exposed in control-center
    Related: #1259292


author: Hushan Jia <hushan.jia@gmail.com> 1.4.9.1-1
changelog:
  - Update to upstream 1.4.9.1 which have several bug fixes and enhancements
  - remove arch definitions, the syscalls are now detected during configuring


author: Kay Sievers <kay@redhat.com> - 3.2-11
changelog:
  - fix yum installroot ending up with directories in /var
    instead of the expected symlinks to /run
  - do not handle /var/lock/subsys, it is always on tmpfs
  - create all symlinked directories and their targets
    in pretrans to make sure other packages install into
    the right place, even if filesystem.rpm is not the
    first package installed in the transaction


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: EL Errata <el-errata_ww@oracle.com> - 45.1.0-1.0.1.el7_2
changelog:
  - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html
    and remove the corresponding Red Hat files


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-2
changelog:
  - fixed rich rules (RHBZ#1054270)
  - fixed small defects in firewall-cmd and firewall-config (RHBZ#1054289)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-4
changelog:
  - firewall-config creates unloadable config; port forwarding broken
    (RHBZ#1057628)
  - Network connection is lost after changing Zones Default Target to DROP
    (RHBZ#1057629)
  - permanently adding rich rule with audit creates unloadable config XML
    (RHBZ#1057684)
  - firewalld input_zones has default rule for public zone (RHBZ#1058339)
  - firewall-cmd is not able to add and remove zones, services and icmptypes
    (RHBZ#1064386)
  - firewall-config leaves deleted services shown if they were in use
    (RHBZ#1058853)
  - firewall-cmd does not allow user to change zone default target (RHBZ#1058791)
  - firewall-cmd man page has a typo in --help description (RHBZ#1064401)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-5
changelog:
  - fixed rich language log level (RHBZ#993740)
  - firewall-config: use simple tool to change zones for connections (RHBZ#993782)
  - translations update (RHBZ#1030330)
  - firewall-config: fixed service and icmptype name dulications (RHBZ#1067639)
  - allow router advertisements for IPv6 rpfilter (RHBZ#1067652)
  - firewall-applet: allow to bind connections to the defaut zone (RHBZ#1068148)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-8
changelog:
  - fixed GUI missing name of active zone (RHBZ#993655)
  - recreate man pages at build time (RHBZ#1071303)
    - fixes rich language log level (RHBZ#993740)
    - fixes typo in firewall-cmd man page (RHBZ#1064401)
  - new support to save runtime as permanent (RHBZ#993650)
  - new cli --timeout time specifiers support (RHBZ#994044)
  - updated translations (RHBZ#1048119) (RHBZ#1083592)
  - more descriptive error message in case of mistakes in iptables (RHBZ#1057095)
  - use apparent name for default target (RHBZ#1075675)
  - simplified firewalld usage on servers by dropping at_console (RHBZ#1097765)
  - fixed enable/disable of lockdown (RHBZ#1111573)
  - new Satellite 6 service (RHBZ#1135634)
  - fixed inconsistent color usage for firewall-cmd messages (RHBZ#1097841)
  - fixed missing -Es in lockdown whitelist firewall-config command (RHBZ#1099065)
  - unified runtime and permanent D-Bus API (RHBZ#1127706)
  - fixed missing update of the connections menu in firewall-config (RHBZ#1120212)
  - better docs for interface bindings in firewalld and NetworkManager (RHBZ#1112742)
  - firewall-config: Show target REJECT (RHBZ#1058794)
  - fixed inconsistent PolicyKit domain usage in main D-Bus interface (RHBZ#1061809)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-11
changelog:
  - added missing upstream commit 265bfe90 for (RHBZ#993650)
  - also add log message in the firewall-cmd output (RHBZ#1057095)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-12
changelog:
  - New schema configuration file verifier (RHBZ#994479)
  - More information about interface handling with and without NetworkManager
    (RHBZ#1122739) (RHBZ#1128563)
  - Apply all rich rules for non-default targets (RHBZ#1142741)
  - New iscsi service (RHBZ#1150656)
  - New rsync service (RHBZ#1150659)
  - ipXtables: use -w or -w2 if supported (RHBZ#1161745)
  - Do not use ipv6header for protocol matching. (RHBZ#1164605)
  - Iptables does not like limit of 1/d (RHBZ#1176813)
  - Fix readdition of removed permanent direct settings (RHBZ#1182671)
  - Fix bugs found by upstream test suite (RHBZ#1183008)
  - Fix polkit auth for query and get passthroughs methods (RHBZ#1183688)
  - New vdsm service (RHBZ#1194382)
  - New freeipa services (RHBZ#1206490)
  - Add missing parts to firewall-offline-cmd man page (RHBZ#1217678)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-13
changelog:
  - Fixed file mode of schema configuration file verifier check.sh (RHBZ#994479)
  - Include upstream testsuite in SRPM package (RHBZ#1261502)
  - Added missing ports to RH-Satellite-6 mservice (RHBZ#1254531)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-1
changelog:
  - rebase to 0.3.9 version:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Rebase to 0.4.3.2
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - RH-Satellite-6 service now upstream
  - Conflict for selinux-policy needed to be updated to newer release
    (RHBZ#1304723)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-2
changelog:
  - Updated conflict for selinux-policy (RHBZ#1304723)
  - Fixed exit codes in command line clients (RHBZ#1357050)
  - Fixed traceback in firewall-cmd without args (RHBZ#1357063)
  - Fixed source docs in man pages and help output (RHBZ#1357888)
  - Fixed rebuild of changed man pages (RHBZ#1360362)
  - Use stderr for errors and warnings in command line tools (RHBZ#1360894)
  - Fixed lockdown not denying invalid commands (RHBZ#1360871)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-3
changelog:
  - Fix test suite for command change (RHBZ#1360871)
  - Fix test suite with stderr usage (RHBZ#1360894)
  - Rebuild for wrong docdir without version (RHBZ#1057327#c7)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-4
changelog:
  - Fixed firewall-config gettext usage (RHBZ#1361612)
  - Fixed ifcfg file reader and writer (RHBZ#1362171)
  - Fixed loading ipset entries from file in commands (RHBZ#1365198)
  - Added conflicts to old main package to sub packages (RHBZ#1361669)
  - Do not show settings of zones etc. without authentication (RHBZ#1357098)
  - Fixed CVE-2016-5410 (RHBZ#1359296)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-5
changelog:
  - Print errors and warnings to stderr additional patch (RHBZ#1360894)
  - Fixed trace back in firewallctl (RHBZ#1367155)
  - Fix client crash if systembus can not be aquired (RHBZ#1367038)
  - Make ALREADY_ENABLED a warning (RHBZ#1366654)
  - Added conflict to old squid package providing the squid.service file
    (RHBZ#1366308)
  - Fixed firewall-cmd help typo (RHBZ#1367171)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-6
changelog:
  - Do not use exit code 254 for {ALREADY,NOT}_ENABLED sequences (RHBZ#1366654)
  - Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall-cmd: Fix get and set description for permanent zones (RHBZ#1368949)
  - Fix loading of service helpers in active zones (RHBZ#1371116)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-7
changelog:
  - Tolerate ipv6_rpfilter fail (RHBZ#1285769)
  - Fix set_rules to copy the rule before extracting the table (RHBZ#1373260)
  - Translation update (RHBZ#1273296)
  - Conflict with NetworkManager < 1:1.4.0-3.el7 (RHBZ#1366288)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-8.1.el7_3.3
changelog:
  - Add support for sctp and dccp in ports, source-ports and forward-ports
    (RHBZ#1429808) (RHBZ#1442977)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - Rebase to 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3 (RHBZ#1414584)
  - Support disabled automatic helper assignment in firewalld (RHBZ#1006225)
  - Fix masquerade rules to be created always the same (RHBZ#1374001)
  - Properly handle quoted ifcfg file values (RHBZ#1395348)
  - Fix extension of ifcfg backup files (RHBZ#1400478)
  - Complete icmp types list (RHBZ#1401978)
  - Fix LOG rule placement for LogDenied (RHBZ#1402932)
  - Show error messages from NM and do not trace back (RHBZ#1405562)
  - Support icmp-type usage in rich rules (RHBZ#1409544)
  - New service file for freeipa-trust (RHBZ#1411650)
  - Fix --{set,get}-{short,description} for ipset in commands (RHBZ#1416325)
  - Speed up large ipset file loading and import (RHBZ#1416817)
  - Improve support for ipsets in firewalld (RHBZ#1419058)
  - ALREADY_ errors should result in warnings and zero exit code (RHBZ#1420457)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
    (RHBZ#1421222)
  - Fix ipset overloading from /etc/firewalld/ipsets (RHBZ#1423941)
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434763)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
    (RHBZ#1401978)
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label (RHBZ#1419058)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-2
changelog:
  - Add support for sctp and dccp in ports, source-ports and forward-ports
    (RHBZ#1429808)
  - Fix firewall-offline-cmd --remove-service-from-zone= option (RHBZ#1438127)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-3
changelog:
  - Fix --{set,get}-{short,description} for zones (RHBZ#1416325)
  - Man pages: Add sctp and dccp for ports, ... (RHBZ#1429808)
  - Add support for new wait option in restore commands (RHBZ#1446162)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-4
changelog:
  - Add services for oVirt: ovirt-imageio, ovirt-vmconsole, ovirt-storageconsole,
    ctbc and nrpe (RHBZ#1449158)
  - Fix policy issue with the choice policies by using the .policy.choice
    extension (RHBZ#1449754)


author: Martin Kolman <mkolman@redhat.com> 19.9-4
changelog:
  - Handle next button naming also if there is only one module (#1107887) (mkolman@redhat.com)
    Related: rhbz#1107887


author: Martin Kolman <mkolman@redhat.com> 19.9-6
changelog:
  - Make Firstboot architecture specific due to s390-only files (#1162567) (mkolman@redhat.com)
    Resolves: rhbz#1162567


author: Martin Kolman <mkolman@redhat.com> 19.10-1
changelog:
  - Switch from Transifex to Zanata (#1273359) (mkolman@redhat.com)
    Related: rhbz#1273359
  - Update translations (#1273359) (mkolman@redhat.com)
    Resolves: rhbz#1273359


author: Martin Sivak <msivak@redhat.com> 19.1-1
changelog:
  - Remove all modules that are going to be provided by anaconda and initial-
    setup (msivak@redhat.com)


author: Martin Sivak <msivak@redhat.com> 19.2-1
changelog:
  - Fix a typo in variable name (sherr@redhat.com)
  - Fix one two year old refactoring leftover.. (msivak@redhat.com)


author: Vratislav Podzimek <vpodzime@redhat.com> 19.3-1
changelog:
  - Run after the initial-setup-graphical.service (if enabled) (vpodzime)
  - ABRT now uses a different directory for problem data (#952633) (vpodzime)
  - Make firstboot a noarch package (#921509) (vpodzime)
  - Use /usr/bin/python instead of /usr/bin/env python (#987016) (vpodzime)
  - Remove an unused import causing tracebacks (#965748) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> 19.6-1
changelog:
  - Exit the main process correctly even if reboot is required (vpodzime)
    Resolves: rhbz#903579
    Resolves: rhbz#1042666
  - Translate the error message if not run as root (vpodzime)
    Related: rhbz#1044339


author: Martin Kolman <mkolman@redhat.com> 19.9-2
changelog:
  - Add missing python-ethtool dependency (#1116921) (mkolman@redhat.com)
    Resolves: rhbz#1116921
  - Disable firstboot-graphical service at the end (#1091317) (vpodzime@redhat.com)
    Resolves: rhbz#1091317


author: Martin Kolman <mkolman@redhat.com> 19.9-3
changelog:
  - Fix exception handling (#952633) (mkolman@redhat.com)
    Resolves: rhbz#952633
  - Replace Finish with Done on the next button (#1107887) (mkolman@redhat.com)
    Resolves: rhbz#1107887


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: David King <dking@redhat.com> - 0.8.4-2
changelog:
  - Sync bzip2 dependency with Fedora package
  - Make the libs subpackage depend on the base package for libostree
  - Fix multilib issues with XML-based documentation


author: Colin Walters <walters@verbum.org> - 0.8.7-2
changelog:
  - Fix libostree bundling:
    Ensure we do not Provide or Require libostree.
    Move the shared library into flatpak-libs so flatpak always
    depends on it.
    Keep the shared library filename as libostree, but put it
    under a private directory.  Renaming the file on disk did not
    really do much since the dynamic linker and RPM work from the
    soname.
    Resolves: #1476905
  - Tweak build to work both with and without BZ#1392354


author: David King <dking@redhat.com> - 0.8.7-3
changelog:
  - Fix crasher in xdg-desktop-portal
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Petr Machata <pmachata@redhat.com> - 2.5.35-15
changelog:
  - Rename flex-static to flex-devel so that it gets to repositories of
    minor multi-lib arch (i386 on x86_64 etc.)
  - Resolves: #674301


author: Petr Machata <pmachata@redhat.com> - 2.5.36-1
changelog:
  - Rebase to 2.5.36
    - Drop flex-2.5.35-sign.patch, flex-2.5.35-hardening.patch,
      flex-2.5.35-gcc44.patch, flex-2.5.35-missing-prototypes.patch
    - Add flex-2.5.36-bison-2.6.1.patch
    - Add a subpackage doc
  - Resolves #842073


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.3-16
changelog:
  - Added patch declaring explicit libm linking dependency (RHBZ #564899)
  - Updated source and URL tags


author: Akira TAGOH <tagoh@redhat.com> - 2.10.94-1
changelog:
  - New upstream release.
  - migrate the configuration for XDG Base Directory spec automatically (#882267)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Ray Strode <rstrode@redhat.com> 0.2.0-2
changelog:
  - Don't allow pam module to ever get unmapped, since that causes
    crashes in dbus-glib, gobject, etc.


author: Tomas Smetana <tsmetana@redhat.com> - 2.8.0-6
changelog:
  - fix #831336: fix broken menus; patch backported from upstream SVN revision
    1375 by Manfred Spraul


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.5-1
changelog:
  - Updated to freeipmi-1.2.5:
   - Support Supermicro X9SPU-F-O OEM sensors and events.
   - Support Supermicro X9DRI-LN4F+ OEM intepretations (previously
     forgotten).


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
   - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: John Dennis <jdennis@redhat.com> - 3.0.0-4
changelog:
  - resolves: bug#1031035
    remove radeapclient man page,
    upstream no longer supports radeapclient, use eapol_test instead
  - resolves: bug#1031061
    rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
  - move man pages for utils into utils subpackage from doc subpackage
  - fix HAVE_EC_CRYPTO test to include f20
  - add new directory /var/run/radiusd/tmp
    update mods-available/eap so tls-common.verify.tmpdir to point to it


author: John Dennis <jdennis@redhat.com> - 3.0.1-1
changelog:
  - Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
    This is a roll-up of all upstream bugs fixes found in 3.0.0
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - resolves: bug#1052450 (fedora 1053020)
  - resolves: bug#1044748 (fedora 1044747)
  - resolves: bug#1048475 (fedora 1048474)
  - resolves: bug#1043037 (fedora 1043036)


author: John Dennis <jdennis@redhat.com> - 3.0.1-3
changelog:
  - resolves: bug#1055073 (fedora 1055072)
    rlm_ippool; bad config file attribute and fails to send reply attributes
  - resolves: bug#1055567 (fedora 1056227)
    bad mysql sql syntax
  - change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
    where gdb will not display source information, only <command-line>


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-6
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751
    Resolves: Bug#1340334 freeradius: Decryption of very long Tunnel-Passwords
                          can cause buffer overflow
  - Remove rlm_eap_tnc support as the required package "tncfhh" was retired.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
changelog:
  - Upgrade to upstream v3.0.11 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1197551
    Resolves: Bug#1179745
    Resolves: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1289849 FreeRadius should start after ldap, ipa and krb5kdc
    Resolves: Bug#1208886 Add the latest Mikrotik dictionary into Freeradius
    Resolves: Bug#1198620 radutmp should not rotate
    Resolves: Bug#1180979 Freeradius is installing files under /etc/tmpfiles.d/
    Resolves: Bug#1187904 radiusd logrotate config file contains old style
                          "/sbin/service radius reload" reload call
    Resolves: Bug#1167846 radiusd fails to load clients from ldap
    Resolves: Bug#1422018 /usr/lib/systemd/system/radiusd.service is marked
                          executable. Please remove executable permission bits
    Resolves: Bug#1167843 support for older style generic attributes in
                          rlm_ldap doesn't work
    Resolves: Bug#1354234 home servers are marked as dead by radiusd


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                          detail file
    Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
    Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
    Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                          load
    Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Do not fail logrotate if radiusd is not running.
    Resolves: Bug#1365226 error running non-shared postrotate script for
                          /var/log/radius/radius.log of
                          '/var/log/radius/radius.log '
  - Fix output to log file specified with -l option.
    Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                          option
  - Fix long hostnames interpreted as IP addresses.
    Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                          name as a domain name
  - Avoid clashes with libtool library symbols.
    Resolves: Bug#1391960 undefined symbol: get_vtable in
                          /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
  - Remove mentions of Auth-Type = System from docs.
    Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
  - Improve ip/v4/v6/addr documentation.
    Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                          and AAAA entries


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
changelog:
  - Upgrade to upstream 3.0.4-rc2 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Add installation of SNMP MIB files.
  - Resolves: Bug#1036562 Missing doc page for kerberos module
  - Resolves: Bug#1099625 Default message digest defaults to sha1
  - Resolves: Bug#1109159 missing mib files in freeradius package
  - Resolves: Bug#1113010 radiusd doesn't send snmp trap when max_threads value
                          is reached
  - Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Resolves: Bug#1115128 radisud can't start if proto = udp is specified
  - Resolves: Bug#1115134 radiusd aborts after 'Access-Request' when listens on
                          TCP port
  - Resolves: Bug#1115137 radiusd listens on udp port even if proto = tcp is
                          specified
  - Resolves: Bug#1126725 radiusd silently fails when start_servers is higher
                          than max_servers
  - Resolves: Bug#1135446 Radeapclient is not available


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
changelog:
  - Upgrade to upstream 3.0.4 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
changelog:
  - Fix abort on home server triggers.
    Resolves: Bug#1113509 radiusd aborts when it has no proxy response with active
                          snmp traps
  - Fix segfault upon example.pl read failure.
    Resolves: Bug#1146403 radiusd segfaults when file for perl module has
                          wrong permissions
  - Fix example.pl permissions.
    Resolves: Bug#1146406 /etc/raddb/mods-config/perl/example.pl has wrong
                          permissions and radiusd fails to start
  - Fix integer handling in various cases.
    Resolves: Bug#1146441 upstream test suite fails
  - Fix dhcpclient's dictionary.dhcp loading.
    Resolves: Bug#1146939 dhcpclient lookups dictionary.dhcp file in wrong
                          location


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
changelog:
  - Fix a number of trigger issues.
    Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
                          files'"
    Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
                          opened,closed or fail
    Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
                          fails/opens/closes
    Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
                          and incomplete
  - Fix two omissions from radtest manpage.
    Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
                          of radtest man page
    Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
    confirm heartbleed is fixed.
    Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
                          OpenSSL version check


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-4
changelog:
  - Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
  - Fix file configuration item parsing.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-5
changelog:
  - Disable rlm_rest building explicitly to avoid unintended builds on some
    architectures breaking RPM build.
    Resolves: Bug#1162156
  - Add -D option support to dhcpclient.
    Related: Bug#1146939
  - Don't install rbmonkey - a test tool only useful to developers.
    Related: Bug#1146966
  - Update clients(5) man page
    Resolves: Bug#1147464


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-6
changelog:
  - Don't remove backslash from unknown escape sequences in LDAP values.
    Resolves: Bug#1173526
  - Improve dhcpclient and rad_counter online help.
    Resolves: Bug#1146966
  - raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
    to trigger variables from module configurations.
    Resolves: Bug#1155961
  - Fix ipaddr option fallback onto ipv6.
    Resolves: Bug#1168868
  - raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
    Resolves: Bug#1168247


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-8
changelog:
  - Disable internal OpenSSL cache and fix session cache file permissions.
    Resolves: Bug#1459131 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-3
changelog:
  - Man page fixes
    - Document that multiple connections don't work (988294)
    - Document the list of plugins (988307, 988308)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-3
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-10.el7_1.1
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197739


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.1
changelog:
  - libfuse 2.9.4 from mainline with bug fixes.
  - New features backported and added from libfuse 3.0
  - For eg: writeback_cache, async_dio , readdirplus etc.
  - Conatins the numa patches as well.


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.4.el7
changelog:
  - Revert "libfuse: add flags to ->rename()" (Ashish Samant)  
  - Revert "libfuse: Disable renameat2 until proper support is added" (Ashish Samant)  
  - libfuse: Fix definition of fuse_parse_cmdline() (Ashish Samant)  
  - libfuse: Remove preun script that deleted fuse group from spec file (Ashish Samant)  
  - Add compatibility symlinks for ol6 (Ashish Samant)  
  - fix fusermount so it can only be executed by memebers of the fuse group (Ashish Samant)


author: Peter Jones <pjones@redhat.com> - 9-6
changelog:
  - Rebuild to make some dependencies versioned, in order to make TPS's really
    broken builder setup work.
    Related: rhbz#1380825


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.0.0-1
changelog:
  - Remove gawk-3.1.8-syntax.patch, gawk-3.1.8-double-free-wstptr.patch
  - Update to upstream 4.0.0 (#717885)


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-55.el7
changelog:
  - Fix 'gdb for aarch64 needs the ability to single step through atomic
    sequences' (RH BZ 1093259, Kyle McMartin).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-56.el7
changelog:
  - Fix '[RHEL7] Can't access TLS variables in statically linked
    binaries' (RH BZ 1080657, Jan Kratochvil).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-57.el7
changelog:
  - Include testcase for 'Global variable nested by another dso shows up
    incorrectly in gdb' (RH BZ 809179).  The fix for this bug is already
    included in the RHEL-7.1 GDB.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-58.el7
changelog:
  - Include patch to fix ppc_collect/supply_ptrace_register GDBserver
    functions, related to PPC64LE support (RH BZ 1125820, Edjunior
    Barbosa Machado).  Rename PPC64LE patches to reflect the addition of
    the patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-59.el7
changelog:
  - Adjust previous patch to build on GDB 7.6.1, where we do not have
    multi-arch + multi-target on GDBserver yet (RH BZ 1125820).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-62.el7
changelog:
  - Include patch to fix internal-error when stack pointer is invalid
    (RH BZ 1125820, Edjunior Barbosa Machado).  Rename PPC64LE patches
    to reflect the addition of the patch.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-64.el7
changelog:
  - Fix '[FJ7.0 Bug]: gdb: fail to refer to errno on a core dump file'
    (RH BZ 1166549, Jan Kratochvil).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-71.el7
changelog:
  - Fix 'gdb invoked oom-killer analyzing a vmcore on aarch64' (Pedro
    Alves, Tom Tromey, RH BZ 1225569).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-72.el7
changelog:
  - Fix 'gdb output a internal-error: Assertion `num_lwps (GET_PID
    (inferior_ptid)) == 1' failed' (Pedro Alves, RH BZ 1184724).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-73.el7
changelog:
  - Remove wrongly backported patches (5of7, 6of7, 7of7) from RH BZ
    1225569 backport.  Add new patches necessary to fix failures.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-74.el7
changelog:
  - Fix '[7.2 FEAT] GDB Transactional Diagnostic Block support on System
    z' (Andreas Arnez, RH BZ 1105165).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-75.el7
changelog:
  - Fix typo/thinko on
    'gdb-rhbz1105165-ibm-tdb-support-system-z-3of9.patch', where the
    type of the 'hwcap' variable in the 's390_core_read_description'
    function should be 'CORE_ADDR', and not 'unsigned log'.  This caused
    a build breakage on s390 (31-bit) (RH BZ 1105165).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-77.el7
changelog:
  - Address issues from Coverity Scan related to '[7.2 FEAT] Enable
    reverse debugging support for PowerPC on GDB' (RH BZ 1218710).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.6.1-78.el7
changelog:
  - Fix 'Backport upstream GDB AArch64 SDT probe support to RHEL GDB'
    (Sergio Durigan Junior, RH BZ 1247107).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-85.el7
changelog:
  - Add --with buildisa, remove %{?_isa} from BuildRequires (RH BZ 1286777):
    https://github.com/msimacek/koschei/issues/54


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Ray Strode <rstrode@redhat.com> 3.14.2-3
changelog:
  - Add hack to make gdm work on machines that don't have video cards
    Resolves: #1168502
    Related: 1230255


author: Ray Strode <rstrode@redhat.com> 3.14.2-4
changelog:
  - Make sure user customizations to gdm via /etc/dconf/db/gdm.d
    continue to work following rebase.
    Related: #1174564


author: Ray Strode <rstrode@redhat.com> 3.14.2-7
changelog:
  - Make sure GDM is shutdown orderly so it can be restarted okay
    Related: #1174564
    Resolves: 1241227


author: Ray Strode <rstrode@redhat.com> 3.14.2-12
changelog:
  - don't log to systemd journal so logs end up in the same
    place they did in 7.1
    Resolves: #1253055


author: Ray Strode <rstrode@redhat.com> - 3.14.2-18
changelog:
  - Fix unlock with XDMCP
    Resolves: #1315342
  - Inform remote display about session exiting when using
    XDMCP
    Resolves: #1313059


author: Ray Strode <rstrode@redhat.com> - 3.22.3-4
changelog:
  - Drop reference to wayland in config file
  - use autosetup to simplify spec maintenance
    Related: #1386862


author: Ray Strode <rstrode@redhat.com> 3.22.3-8
changelog:
  - Reap transient login screens when they are no longer needed
  - Jump to login screen if we end up on a blank VT
    Resolves: #1301028


author: Ray Strode <rstrode@redhat.com> - 3.22.3-10
changelog:
  - Add patches to try to maintain some semblance of compatibility
    when live upgrading between 7.3 and 7.4
    Related: #1448786


author: Ray Strode <rstrode@redhat.com> 3.8.4-18
changelog:
  - Make sure pam_gnome_keyring gets notified when the password is changed
    in the middle of first login.
    Resolves: #1075714


author: Ray Strode <rstrode@redhat.com> 3.8.4-26
changelog:
  - Adjust path setting logic one more time to preserve
    /sbin and /bin ordering
    Related: #1080153
    Resolves: 1091053


author: Ray Strode <rstrode@redhat.com> 3.8.4-27.1
changelog:
  - Fix resource leak when reauthentication client is rejected
    Resolves: #1086189

  - Don't reject reauthentication clients with uids that don't
    match the uid of those clients' logind sessions.
    Related: #1086189 1057179


author: Ray Strode <rstrode@redhat.com> - 3.14.3-17
changelog:
  - Fix close after save functionality when closing window
    with unsaved documents
    Resolves: #1247999


author: Ray Strode <rstrode@redhat.com> - 2:3.14.3-3
changelog:
  - add backward compat gedit.desktop to keep user mime assocations working
    Related: #1174591 1235413


author: Ray Strode <rstrode@redhat.com> - 2:3.14.3-8
changelog:
  - Use ' instead of « in es locale for font parsing
    Resolves: #1247999
  - Add X-GNOME-UsesNotifications=false to compat desktop file
    Related: #1259292


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Andrew Price <anprice@redhat.com> - 3.1.8-4
changelog:
  - fsck.gfs2: Change duptree structure to have generic flags
  - fsck.gfs2: Detect, fix and clone duplicate block refs within a dinode
    Resolves: rhbz#1236669


author: Andrew Price <anprice@redhat.com> - 3.1.8-5
changelog:
  - gfs2-utils: Fix hang on withdraw (4 patches)
  - Include new withdraw helper scripts in files section
    Resolves: rhbz#1225634


author: Andrew Price <anprice@redhat.com> - 3.1.9-1
changelog:
  - Rebase to new upstream release 3.1.9
    Resolves: rhbz#1271674
    Resolves: rhbz#1162819
    Resolves: rhbz#1196321
    Resolves: rhbz#1202814
    Resolves: rhbz#1251036
    Resolves: rhbz#1257625
    Resolves: rhbz#1268045
    Resolves: rhbz#1283866
    Resolves: rhbz#1332728


author: Andrew Price <anprice@redhat.com> - 3.1.9-2
changelog:
  - fsck.gfs2: "undo" functions can stop too early on duplicates
    Resolves: rhbz#1348703
  - fsck.gfs2: link count checking wrong inode's formal inode number
    Resolves: rhbz#1350597
  - fsck.gfs2: check formal inode number when links go from 1 to 2
    Resolves: rhbz#1350600


author: Andrew Price <anprice@redhat.com> - 3.1.10-1
changelog:
  - Rebase to new upstream version 3.1.10
    Resolves: rhbz#1348601
    Resolves: rhbz#1356685
    Resolves: rhbz#1382087
    Resolves: rhbz#1405163
    Resolves: rhbz#1430399
  - Make dependency on libuuid explicit


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.6-5
changelog:
  - gfs2-utils tests: Switch to autotest
    Resolves: rhbz#1000066
  - fsck.gfs2: Allocate enough space for the block map (2 patches)
    Resolves: rhbz#1001583


author: Andrew Price <anprice@redhat.com> - 3.1.6-10
changelog:
  - libgfs2: Add lgfs2_open_mnt* functions
  - Switch is_pathname_mounted callers to lgfs2_open_mnt*
  - libgfs2: Remove is_pathname_mounted
    Resolves: rhbz#991204


author: Andrew Price <anprice@redhat.com> - 3.1.6-13
changelog:
  - gfs2_edit: Convert fssize to bytes before reporting fs size
  - mkfs.gfs2 tests: Enable debug output
    Resolves: rhbz#1059443
  - libgfs2: Superblock building and writing improvements
  - gfs2-utils: Ensure sb_uuid uses are guarded
  - libgfs2: Add support for new leaf hint fields
    Resolves: rhbz#1063842


author: Andrew Price <anprice@redhat.com> - 3.1.7-1
changelog:
  - Rebase to new upstream version 3.1.7
  - gfs2-utils tests: Fix unit tests for RHEL7
  - gfs2-utils tests: Build unit tests with consistent cpp flags
    Resolves: rhbz#1112342
    Resolves: rhbz#1017381
    Resolves: rhbz#1075135
    Resolves: rhbz#1079507
    Resolves: rhbz#1107238


author: Andrew Price <anprice@redhat.com> - 3.1.7-4
changelog:
  - mkfs.gfs2: Revert default resource group size
    Resolves: rhbz#1162817
  - Add ExclusiveArch
    Resolves: rhbz#1161936


author: Andrew Price <anprice@redhat.com> - 3.1.7-6
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - tests: test for incorrect inode i_goal values
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1178604


author: Andrew Price <anprice@redhat.com> - 3.1.8-1
changelog:
  - Rebase to new upstream version 3.1.8
    Resolves: rhbz#1184482
    Resolves: rhbz#1153316
    Resolves: rhbz#1154726
    Resolves: rhbz#1162216
    Resolves: rhbz#1165285
    Resolves: rhbz#1186515
    Resolves: rhbz#1186847
    Resolves: rhbz#1194446
    Resolves: rhbz#1195394


author: Andrew Price <anprice@redhat.com> - 3.1.9-3.1
changelog:
  - mkfs.gfs2: Disable rgrp alignment when dev topology is unsuitable
    Resolves: rhbz#1437009
  - gfs2_grow: Disable rgrp alignment when dev topology is unsuitable
    Resolves: rhbz#1437125


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.07-18
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105519).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19
changelog:
  - Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)
  - Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)
  - Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)
  - Fix the color printing on HP InkJet printers (bug #1225858)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-20_1
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7978 (bug #1382300)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Nils Philippsen <nils@redhat.com> - 2.8.0-1
changelog:
  - version 2.8.0
  - add po files missing in tarball
  - add new build requirements: dblatex, graphviz, pngnq, pngcrush
  - fix file list generation


author: Nils Philippsen <nils@redhat.com> - 2.8.1-1
changelog:
  - version 2.8.1
  - reenable parallel building
  - add Brazilian Portuguese translation
  - remove (empty) translations: Finnish, Hungarian, Lithuanian, Polish
  - fix translation that makes xml2po.py/libxml2 crash


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Yanko Kaneti <yaneti@declera.com> - 1.1-5.20130122
changelog:
  - Newer upstream snapshot. Minor upstream rearrangement.
  - Remove checkout script from sources and add to git.
  - Try to actually use the bundled mathml2. Fix warnings.


author: Kalev Lember <kalevlember@gmail.com> - 3.14.2-2
changelog:
  - Revise the summary for consistency with the parallel installable
    glade2/glade3 packages (#882557)


author: Colin Walters <walters@redhat.com> - 2.36.3-5
changelog:
  - Backport patch to fix gnome-shell lockups
    Resolves: #1030601
  - Backport patch to fix vmtoolsd hangs
    Resolves: #1063789


author: Richard Hughes <rhughes@redhat.com> - 2.42.2-2
changelog:
  - Update to 2.42.2
  - [walters] Switch to autosetup -Sgit for less painful patch management
  - [walters] Actually forward port patches
  - Resolves: #1203755


author: Colin Walters <walters@redhat.com> - 2.46.2-3
changelog:
  - Rebase to 2.46.2
  - Backport two additional notable+applicable patches from upstream
    branch
  - Resolves: #1305515


author: Martin Sebor <msebor@redhat.com> - 2.17-100
changelog:
  - Prevent tst-rec-dlopen from intermittently failing in parallel
    builds due to a missing makefile dependency (#1225959).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-102
changelog:
  - Remove workaround for kernel netlink bug (#1089836).
  - Use only 32-bit instructions in optimized 32-bit POWER functions (#1240796).


author: EL Errata <el-errata_ww@oracle.com> - 2.17-105.0.1
changelog:
  - Remove strstr and strcasestr implementations using sse4.2 instructions.
  - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
    1818483b15d22016b0eae41d37ee91cc87b37510 backported.


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.3
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296030).
  - Fix madvise performance issues (#1298930).
  - Avoid "monstartup: out of memory" error on powerpc64le (#1298956).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.5
changelog:
  - Fix memory leak in ftell for wide-oriented streams (#1323781).
  - Avoid race condition in _int_free involving fastbins (#1313308).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-106.6
changelog:
  - Fix NULL pointer dereference in stub resolver with unconnectable name
    server addresses (#1323839).


author: Carlos O'Donell <carlso@redhat.com> - 2.17-146
changelog:
  - s390: Restore signal mask on setcontext/swapcontext (#1249114).
  - s390: Fix backtrace in the presence of makecontext (#1249115).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-157.1
changelog:
  - Do not set initgroups in default nsswitch.conf (#1388638)
  - nss_db: Request larger buffers for long group entries (#1388637)
  - nss_db: Fix get*ent crash without preceding set*ent (#1388635)
  - nss_db: Fix endless loop in services database processing (#1388639)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-188
changelog:
  - Improve exp() and pow() performance in libm (#1409611)
  - Add optimized strcmp and strncmp for IBM POWER9 hardware (#1320947)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-190
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    Intel hardware with support for Intel TSX (#841653).
  - Update dynamic loader trampoline for Intel Skylake server (#1421155).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-191
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    IBM POWER hardware with support for IBM POWER HTM (#731835).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-192
changelog:
  - Exclude lock elision support for older Intel hardware with
    Intel TSX that has hardware errata (#841653).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-196.2
changelog:
  - Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
  - Improve memcpy performance for POWER9 DD2.1 (#1516402)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-53
changelog:
  - Fix offset caching for streams and use it for ftell (#1074410).
  - Change offset in fdopen only if setting O_APPEND (#1074410).
  - Fix up return codes for tests in tst-ftell-active-handler (#1074410).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-55.1
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.17-55.0.4.el7_0.3
changelog:
  - Remove strstr and strcasestr implementations using sse4.2 instructions.
  - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and
    1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-75
changelog:
  - Fix permission of debuginfo source files to allow multiarch
    debuginfo packages to be installed and upgraded (#1170110).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-76
changelog:
  - Fix application crashes during calls to gettimeofday on ppc64
    when kernel exports gettimeofday via VDSO (#1077389).
  - Prevent NSS-based file backend from entering infinite loop
    when different APIs request the same service (CVE-2014-8121, #1182272).


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.53rhs-1
changelog:
  - fixes bug 916857 1005663 1032034 1046294 1046318 1042830 1045313
    1046571 1046604 1045991 1022822 1031687 1045374 972021


author: Bala FA <barumuga@redhat.com> - v3.6.0.24-1
changelog:
  - fixes bugs bz#1104153 bz#1109149 bz#1112582 bz#1113961 bz#1114008 
    bz#1114592 bz#1115266 bz#1115267


author: Bala FA <barumuga@redhat.com> - v3.6.0.25-1
changelog:
  - fixes bugs bz#1007033 bz#1101910 bz#1104121 bz#1104921 bz#1109150 
    bz#1116376 bz#1116703 bz#1116992 bz#1117135 bz#1120198 bz#1120245 bz#BUG:


author: Bala FA <barumuga@redhat.com> - v3.6.0.26-1
changelog:
  - fixes bugs bz#1111029 bz#1111577 bz#1113852 bz#1116761 bz#1117135 
    bz#1117283 bz#1119223 bz#1120830 bz#1121059 bz#1121603


author: Bala FA <barumuga@redhat.com> - v3.6.0.28-1
changelog:
  - fixes bugs bz#1110694 bz#1116150 bz#1121099 bz#1124692 bz#1127234 
    bz#1136711 bz#921528 bz#969298


author: Bala.FA <barumuga@redhat.com> - 3.7.1-7
changelog:
  - fixes bugs bz#1227197 bz#1228127 bz#1230612 bz#1231782 bz#1235735 
    bz#1236556 bz#1237053 bz#1237165 bz#1238167


author: Bala.FA <barumuga@redhat.com> - 3.7.1-8
changelog:
  - fixes bugs bz#1223205 bz#1224177 bz#1228247 bz#1229567 bz#1230513 
    bz#1231635 bz#1231732 bz#1239280 bz#1240168 bz#1240245


author: Bala.FA <barumuga@redhat.com> - 3.7.1-9
changelog:
  - fixes bugs bz#1224177 bz#1224610 bz#1230525 bz#1231647 bz#1234725 
    bz#1235121 bz#1239057 bz#1239108 bz#1239317 bz#1240196 bz#1240338 bz#1240925 
    bz#1241048 bz#1241150 bz#1241366 bz#1241830 bz#1241839 bz#1241904 bz#1242046


author: Bala.FA <barumuga@redhat.com> - 3.7.1-10
changelog:
  - fixes bugs bz#1224177 bz#1230513 bz#1240617 bz#1242367 bz#1242423 
    bz#1242543 bz#1242585 bz#1242767


author: Bala.FA <barumuga@redhat.com> - 3.7.1-12
changelog:
  - fixes bugs bz#1027723 bz#1064265 bz#1065651 bz#1134288 bz#1213893 
    bz#1226665 bz#1226817 bz#1229606 bz#1229621 bz#1230532 bz#1232216 bz#1235571 
    bz#1236546 bz#1236672 bz#1236990 bz#1238049 bz#1238071 bz#1239075 bz#1240657 
    bz#1241649 bz#1241761 bz#1243542 bz#1243722 bz#1243886 bz#1244527 bz#1245448 
    bz#1245536 bz#1245542 bz#1245897 bz#1245915 bz#1245919 bz#1246946 bz#1252359 
    bz#1253549


author: Bala.FA <barumuga@redhat.com> - 3.7.1-13
changelog:
  - fixes bugs bz#1224184 bz#1225452 bz#1227759 bz#1228135 bz#1231080 
    bz#1234399 bz#1235971 bz#1236038 bz#1238070 bz#1238111 bz#1238171 bz#1238398 
    bz#1238977 bz#1239021 bz#1240918 bz#1245165 bz#1245636 bz#1245924 bz#1251409 
    bz#1255471 bz#1257007 bz#1247349


author: Bala.FA <barumuga@redhat.com> - 3.7.1-14
changelog:
  - fixes bugs bz#1115367 bz#1232569 bz#1234213 bz#1234610 bz#1241336 
    bz#1241385 bz#1241862 bz#1242803 bz#1245077 bz#1251457


author: Bala.FA <barumuga@redhat.com> - 3.7.1-15
changelog:
  - fixes bugs bz#1253774 bz#1257509 bz#1259221 bz#1259750 bz#1260086 
    bz#1260512 bz#1262236 bz#1262291


author: Milind Changire <mchangir@redhat.com> - 3.7.9-3
changelog:
  - fixes bugs bz#1325975 bz#1311839 bz#1321556 bz#1286911 bz#1323042 
    bz#1298724 bz#1327165 bz#1101702 bz#1326498 bz#1326663 bz#1328397 bz#1330881 
    bz#1331376 bz#1330901 bz#1326248 bz#1324338 bz#1115367 bz#1308837 bz#1322695 
    bz#1322247 bz#1329895 bz#1327552 bz#1118770


author: Milind Changire <mchangir@redhat.com> - 3.7.9-4
changelog:
  - fixes bugs bz#1097555 bz#1322306 bz#1327195 bz#1324820 bz#1306194 
    bz#1298724 bz#1299737 bz#1330385 bz#1258875 bz#1283957 bz#1311362 bz#1321550 
    bz#1332199 bz#1329514 bz#1224180 bz#1313370 bz#1328194 bz#1323424 bz#1332957 
    bz#1294755 bz#1328411 bz#1327751 bz#1332077 bz#1328721 bz#1330365


author: Milind Changire <mchangir@redhat.com> - 3.7.9-5
changelog:
  - fixes bugs bz#1261838 bz#1324820 bz#1325760 bz#1328194 bz#1331260 
    bz#1332949 bz#1333668 bz#1334234 bz#1334668 bz#1334985 bz#1335082 bz#1335114 
    bz#1335364 bz#1335437 bz#1335505 bz#1335826


author: Milind Changire <mchangir@redhat.com> - 3.7.9-7
changelog:
  - fixes bugs bz#1286582 bz#1330997 bz#1334092 bz#1337384 bz#1337649 
    bz#1339090 bz#1339163 bz#1339208 bz#1340085 bz#1340383


author: Milind Changire <mchangir@redhat.com> - 3.8.4-14
changelog:
  - fixes bugs bz#1408576 bz#1408705 bz#1409563 bz#1411270 bz#1413513 
    bz#1414247 bz#1414663 bz#1415583 bz#1417955 bz#1418011


author: Milind Changire <mchangir@redhat.com> - 3.8.4-15
changelog:
  - fixes bugs bz#1205162 bz#1315544 bz#1403180 bz#1409135 bz#1415101 
    bz#1417177 bz#1418901 bz#1420635 bz#1422431


author: Milind Changire <mchangir@redhat.com> - 3.8.4-18.2
changelog:
  - fixes bugs bz#1439731 bz#1439753 bz#1440162 bz#1445591 bz#1445593 
    bz#1447186 bz#1451200 bz#1451673


author: Tom Callaway <spot@fedoraproject.org> - 8.0.1-1.20121218git6eef979
changelog:
  - update to 8.0.1 (git checkout from 20121218)
  - update xdriinfo to 1.0.4
  - remove non-free files (bz892925)


author: Adam Jackson <ajax@redhat.com> 8.1.0-2
changelog:
  - Copy glxinfo to glxinfo%{__isa_bits}, to allow people to check that their
    compatibility drivers are working.


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1
changelog:
  - rebase to 5.1.0, de-ansi patch no longer applicable
  - upstream dropped libmp.so (bsdmp-like interface)
  - silenced bogus date in changelog


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Jakub Filak <jfilak@redhat.com> 0.3.0-1
changelog:
  - Do not include url files twice
  - Get rid of Stock Items usage
  - Do not remove invalid problems while sorting the list
  - Check if X display can be opened
  - Fix a condition in the source changed notification handler
  - Update Translations
  - Skip inotify events for sub folders in dump location watcher
  - Use GLib.io_add_watch() instead of IOChanell.add_watch()
  - Fix a typo in macro name
  - Remove shebang from non-executable scripts
  - Remember missing elements and load them only once
  - Download more problem elements in a single D-Bus call
  - Improve data caching
  - Display two sets of problems (My/System)
  - Fix typo in dbus error message
  - Don't crash if a new directory problem is invalid
  - Resolves: #956912, #973125, #967499


author: Jakub Filak <jfilak@redhat.com> 0.3.1-1
changelog:
  - Improve user experience
  - Make About dialog transient for the main window
  - Add AppData file
  - Ship the 256x256 icon in the right place
  - Recover from fork errors
  - Add ABRT configure application menu
  - Use absolute path in python shebang
  - Recover from invalid time stamp values
  - Use wrapped text for the bug report link
  - Resolves: #994749, #995337, #995868, #1005472


author: Jakub Filak <jfilak@redhat.com> 0.3.4-1
changelog:
  - Do not use deprecated GObject API
  - Make gnome-abrt compatible with Python GObject < 3.7.2
  - Do not fail if there is no Problem D-Bus service
  - Make all labels selectable
  - Run xdg-open for problem directory nonblocking
  - Fix translations (rhbz#1044241)
  - Make problem list resizable
  - Make info about Reported state of problem more clear
  - Remove message about missing Bugzilla ticket
  - Fix a bug in SIGCHLD handler causing 100% CPU usage
  - Show "yes" in Reported field only if no URL is available
  - Load only the most recent reported to value
  - Check if Application has valid name in filter fn
  - Fix issues found by new pylint
  - Related: #1044241
  - Resolves: #1044569


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-3
changelog:
  - Select multiple records to delete in gnome-abrt
  - Do not crash when a FileIcon can't be loaded
  - Resolves: #1048120, #1054089


author: Jakub Filak <jfilak@redhat.com> - 0.3.4-7
changelog:
  - Translation updates
  - Do not crash in case of a DBus timeout
  - Do not crash when testing availability of XServer
  - Resolves: #1178712, #1175662


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-10
changelog:
  - Set volume capacity in correct units (related: #1049316).
  - Refresh volume info after resize (related: #1049316).


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-11
changelog:
  - Don't hang on failure to handle a URL (related: #1046251).
  - Handle paths as well (related: #1046251).
  - Handle local paths to remote files (related: #1046251).


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-4
changelog:
  - Remove media from correct box (related: #846408).
  - Remove existing transition before adding new one (related: #1015079).


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.3-8
changelog:
  - Don't register for 'x-content/bootable-media' (related: #1072611).
  - Ignore CDROM devices (related: #1072611).
  - Ignore non-readable devices (related: #1043892)


author: Christophe Fergeau <cfergeau@redhat.com> 3.8.2-4
changelog:
  - ... and remove again the ExclusiveArch on fedora. If libvirt-daemon-qemu
    is available, this means we can create (very slow) x86 boxes regardless
    of the arch


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-2
changelog:
  - Backport some classic-mode improvements from 3.10 cycle:
    - context menu in window list (close, minimize, maximize)
    - use same order for favorites in applications menu as in dash


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-7
changelog:
  - Add missing resource files (related: #1028079).
  - Don't ignore removal of src/resources.c (related: #1028079).


author: Richard Hughes <rhughes@redhat.com> - 3.8.2-3
changelog:
  - Do not build the clutter support to allow us to drop two deps
    now unsuitable for RHEL.
  - Resolves: #1025270


author: Debarshi Ray <rishi@fedoraproject.org> - 3.8.5-8
changelog:
  - Fix the patch to preview encrypted PDFs
  - Fix the patch to protect against spurious view-as signals
    Resolves: #959175


author: Zeeshan Ali <zeenix@redhat.com> - 3.8.2-8
changelog:
  - Remove patch 'daemon: Exit gnome-keyring-daemon when the DBus connection
    closes' (related: rhbz#1030671).


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.4-2
changelog:
  - Use newer WebKit
  - Refresh the credentials during startup and network changes
  Resolves: #1174600, #1189888


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-3
changelog:
  - Don't remove Telepathy accounts or expire Kerberos credentials when stopping
    goa-daemon
  Resolves: #1267534


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.5-5
changelog:
  - Ensure that temporary accounts are really removed from the keyring and
    avoid a WARNING
  Resolves: #1261940


author: Ray Strode <rstrode@redhat.com> 3.8.5-14
changelog:
  - Fix provider object leak, sporadic crash, and a few other
    leaks I found along the way.
  Related: #1099115


author: Ray Strode <rstrode@redhat.com> 3.8.5-2
changelog:
  - Fix kerberos crash when user manually erases stored credentials with seahorse
    Resolves: #1027413


author: Richard Hughes <rhughes@redhat.com> - 3.14.3-3
changelog:
  - Re-apply the fix "Change the UI policy to show the comps tree" as it was
    lost in the rebase process.
  - Resolves: #1174550


author: Richard Hughes <rhughes@redhat.com> - 3.14.3-6
changelog:
  - Create a -common subpackage and make the "parent" package depend on all
    the split out applications. This fixes upgrades from old versions.
  - Resolves: #1290868


author: Richard Hughes <rhughes@redhat.com> - 3.8.2-2
changelog:
  - Ignore package progress updates when the transaction is being simulated which
    fixes the 100% CPU issue when trying to update a large number of packages.
  - Resolves: #969852


author: Richard Hughes <rhughes@redhat.com> - 3.8.2-3
changelog:
  - Show the update and installer items in a KDE desktop as RHEL does not
    ship Apper.
  - Resolves: #1033672


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-6
changelog:
  - Fix missing deps in -gnome and -bonobo subpkg (#689836).
    gnome-python2-gnome should "Requires: gnome-python2-bonobo"
    gnome-python2-bonobo should "Requires: gnome-python2-canvas"


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.28.1-7
changelog:
  - Drop unused/ancient -capplet subpackage definition remains.
  - Add %?_isa to all explicit dependencies on package names.
  - Make pygtk2 dependency arch-specific (#749835).


author: Colin Walters <walters@verbum.org> - 2.28.1-12
changelog:
  - Drop requires on bonobo-activation, since it is the same as libbonobo,
    but that package dropped the provides.


author: Bastien Nocera <bnocera@redhat.com> - 3.22.2-1
changelog:
  + gnome-settings-daemon-3.22.2-1
  - Update to 3.22.2
  - Fixes bugs in custom keyboard shortcuts handling and a smartcard
    regression
  Resolves: #1425487


author: Ray Strode <rstrode@redhat.com> 3.14.4-30
changelog:
  - Another timed login update.  Makes the indicator work
    when animations are disabled.
    Related: #1252424


author: Ray Strode <rstrode@redhat.com> 3.14.4-35
changelog:
  - Ensure the unlock password entry is desensitized when there's
    no password being asked for (Such as when the message is just
    "Please insert smartcard")
    Resolves: #1262999


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-49
changelog:
  - Fix bug where maximized windows would flicker to the wrong size when
    restarting the shell (on stereo enable or otherwise)
    Resolves: #1306802


author: Ray Strode <rstrode@redhat.com> - 3.22.3-14
changelog:
  - fix unlock after upgrade
    Related: #1448786
  - switch from setup to autosetup -S git for easier patch maintenance


author: Ray Strode <rstrode@redhat.com> 3.8.4-44
changelog:
  - If password authentication is disabled and smartcard authentication is
    enabled and smartcard isn't plugged in at start up, prompt user for
    smartcard
    Resolves: #1159385


author: Kalev Lember <klember@redhat.com> - 3.14.7-1
changelog:
  - Update to 3.14.7
  - Show installation progress when installing apps
  - Fix incomplete Japanese translations
  - Show a new notification when security updates remain unapplied
  - Resolves: #1237181, #1055643, #1136954


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Drop the appdata-tools BR from RHEL
  - Add BRs on vala-devel, vala-tools and yelp-tools to generate the build
    scripts
  - Resolves: #1174726, #1180775


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.8.1-2
changelog:
  - Drop gnome-tweak-tool-3.8.0-shell_themes.patch patch, since theme search is
    fixed with GS user theme extension 3.8.4


author: Rui Matos <rmatos@redhat.com> - 3.8.1-3
changelog:
  - Resolves: rhbz#998547 - Descriptions in drop-down lists don't fit in window
  - Resolves: rhbz#1014796 - Search does not work in gnome-tweak-tool


author: Rui Matos <rmatos@redhat.com> - 3.8.1-4
changelog:
  - Resolves: rhbz#1017208 - Restart button in gnome-tweak-tool does not restart gnome-shell
  - Resolves: rhbz#1016144 - User should not change state of Classic Mode extensions in gnome-tweak-tool


author: Rui Matos <rmatos@redhat.com> - 3.8.1-6
changelog:
  - Resolves: rhbz#1036226 - Search part of words does not work in gnome-tweak-tool
  - Resolves: rhbz#1037620 - Default/Document font set to italic shows normal font
  - Resolves: rhbz#1038003 - Some shortcuts for changing layout does not work
  - Resolves: rhbz#1038116 - "Use keyboard LED to show alternative layout" option does not light up selected LED
  - Resolves: rhbz#1037831 - Extension installed via website is shown in gnome-tweak-tool in wrong order in the real time


author: Rui Matos <rmatos@redhat.com> - 3.8.1-7
changelog:
  - Resolves: rhbz#1001511 - Power Management: suspend when laptop lid close should be easily configurable
  - Add an upstream patch to fix intltool and gettext brokenness


author: Hans de Goede <hdegoede@redhat.com> - 0.4.0-4
changelog:
  - Drop Requires for gstreamer-plugins, as we may be used with both
    gstreamer-0.10 and 1.0. Instead apps using gnome-video-effects should add
    the necessary Requires themselves


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4
changelog:
  - reverted change to use the p11-kit certificate storage (#1110750)
  - added functions to test DH/ECDH in FIPS-140-2 mode and fixed
    RSA key generation (#1110696)
  - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7
  - fixed SHA224 in SSSE3 optimized code
  - fixed issue with handshake buffer resets (#1153106)
  - fixed issue in RSA key generation with specific seeds in FIPS140-2 mode


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.4.2-2
changelog:
  - update to 1.4.2 (iterative build)
  - emacs and vim subpackages obsoleted as they're no longer provided


author: Pravin Satpute <psatpute@redhat.com> - 20130807-1
changelog:
  - Resolves: rh#1023312 Upstream new release of 20130807 tarball.
  - Packages unhinted upstream tarball.
  - This pulled fonts for number of missing Unicode scripts in Fedora


author: Pravin Satpute <psatpute@redhat.com> - 20141001-1
changelog:
  - Google stops release tarball. Zip file derived from git Download zip.
  - 45 new packages added as follows.
  - kufi-arabic-fonts, naskh-arabic-fonts, naskh-arabic-ui-fonts, sans-balinese-fonts, 
  - sans-bamum-fonts, sans-batak-fonts, sans-buginese-fonts, sans-buhid-fonts, 
  - sans-canadian-aboriginal-fonts, sans-cham-fonts, sans-cuneiform-fonts, sans-cypriot-fonts, 
  - sans-gothic-fonts, sans-gurmukhi-fonts, sans-gurmukhi-ui-fonts, 
  - sans-inscriptional-pahlavi-fonts, sans-inscriptional-parthian-fonts, sans-javanese-fonts, 
  - sans-lepcha-fonts, sans-limbu-fonts, sans-linearb-fonts, sans-mongolian-fonts, 
  - sans-myanmar-fonts, sans-myanmar-ui-fonts, sans-new-tai-lue-fonts, sans-ogham-fonts, 
  - sans-ol-chiki-fonts, sans-old-italic-fonts, sans-old-persian-fonts, sans-phags-pa-fonts, 
  - sans-rejang-fonts, sans-runic-fonts, sans-samaritan-fonts, sans-saurashtra-fonts, 
  - sans-sinhala-fonts, sans-sundanese-fonts, sans-syloti-nagri-fonts, sans-syriac-eastern-fonts, 
  - sans-syriac-estrangela-fonts, sans-syriac-western-fonts, sans-tagbanwa-fonts, 
  - sans-tai-le-fonts, sans-tifinagh-fonts, sans-yi-fonts
  - Resolves #1148413


author: Jens Petersen <petersen@redhat.com> - 20141117-1
changelog:
  - update to latest git (aae16d0cd626)
  - package Japanese, Korean, and CJK fonts
  - add Thaana font
  - add common subpackage for license and doc files
  - order spec subpackages lexically


author: Jens Petersen <petersen@redhat.com> - 20141117-2
changelog:
  - move cjk fonts fontconfig priority from 65-0 to 66
  - generate the appinfo metainfo for the subpackages
  - use a single for-loop to install the font config and appdata files
  - move parent appinfo metainfo to common (Parag Nemade)


author: Pravin Satpute <petersen@redhat.com> - 20141117-5
changelog:
  - Resolves: #1269444: including CJK subpackage
  - Rebase from Fedora 22 - 20141117-5 SRPM
  - improve generated font subpackage descriptions
  - it is Hanunoo not Hanuno!
  - specify font filenames more precisely


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - gp-Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch [bz#1339710]
  - Resolves: bz#1339710
    (initalization of 'recursive' tls variable in libunwind stack capturer occasionally triggers deadlock in ceph)


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.2.0-2
changelog:
  - revert the wrongly committed f18 spec to f19
  - spec file cleanup
  - thanks to jnovy for finding me minimum texlive BR
  - partial multilib fix for manual.html


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.2.0-4
changelog:
  - Drop refman.pdf as its same as manual.html
  - patch install path for cmake files as they are arch dependent


author: Till Maas <opensource@till.name> - 1.2.4-4
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13-1
changelog:
  - New version
    Resolves: rhbz#837749
  - Fixed -i option
    Resolves: rhbz#828844
  - Added virtual provide and FPC ticket link for bundled gnulib
    Resolves: rhbz#821759


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Bastien Nocera <bnocera@redhat.com> 0.2.14-6
changelog:
  - Enable a number of missing plugins
  Related: #1184200
  - Disable blip.tv plugin as service has now closed
  - Add patch to downgrade the gom requirements
  - Port back local-metadata plugin to libmediaart-1.0


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Make editenv utilities (grub2-editenv, grub2-set-default, etc.) from
    non-UEFI builds work with UEFI builds as well, since they're shared
    from grub2-tools.
    Resolves: rhbz#1119943
  - Make more grub2-mkconfig generate menu entries with the OS name and version
    included.
    Resolves: rhbz#996794
  - Minimize the sort ordering for .debug and -rescue- kernels.
    Resolves: rhbz#1065360
  - Add GRUB_DISABLE_UUID to disable filesystem searching by UUID.
    Resolves: rhbz#1027833
  - Allow "fallback" to specify titles like the documentation says
    Resolves: rhbz#1026084


author: Peter Jones <pjones@redhat.com> - 2.02-0.11
changelog:
  - Fix grub2 segfault when root isn't set.
    Resolves: rhbz#1084536
  - Make the aarch64 loader be SB-aware.
    Related: rhbz#1100048
  - Enable regexp module
    Resolves: rhbz#1125916


author: Jacob Wang <jacob.wang@oracle.com> - 2.02-0.16.0.1
changelog:
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Use different titles for UEK and RHCK kernels [bug 18504756]


author: Natalya Naumova <natalya.naumova@oracle.com> - 2.02-0.17.0.1
changelog:
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Use different titles for UEK and RHCK kernels [bug 18504756]
  - Remove symlink to grub environment file during uninstall on EFI platforms
    [bug 19231481


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.02-0.2.10.0.5
changelog:
  - Add loadenv module to EFI images and create /boot/efi/EFI/redhat/grubenv
    for EFI environments [bug 18508957]


author: Peter Jones <pjones@redhat.com> - 2.02-0.26
changelog:
  - Be more aggressive about trying to make sure we use the configured SNP
    device in UEFI.
    Resolves: rhbz#1257475


author: Peter Jones <pjones@redhat.com> - 2.02-0.27
changelog:
  - Remove multiboot and multiboot2 modules from the .efi builds; they
    should never have been there.
    Resolves: CVE-2015-5281


author: EL Errata <el-errata_ww@oracle.com> - 2.02-0.29.0.1
changelog:
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms
    [bug 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Use different titles for UEK and RHCK kernels [bug 18504756]


author: Peter Jones <pjones@redhat.com> - 2.02-0.30
changelog:
  - Fix security issue when reading username and password
    Resolves: CVE-2015-8370
  - Do a better job of handling GRUB_PASSWORD
    Resolves: rhbz#1290089


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Peter Jones <pjones@redhat.com> - 2.02-0.57
changelog:
  - Make "grub2" require the grub2-efi-... package on arches where there's no
    legacy build.
    Related: rhbz#1440787


author: Peter Jones <pjones@redhat.com> - 2.02-0.58
changelog:
  - Add Aarch64 FDT #address-cells and #size-cells support
    Resolves: rhbz#1436745
  - Fix ppc64 "grub2.chrp" to be "grub.chrp"
    Resolves: rhbz#1442970


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: Livy Ge <livy.ge@oracle.com> - 2.02-0.64.0.1
changelog:
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms
    [bug 19231481]
  - replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev)
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Use different titles for UEK and RHCK kernels [bug 18504756]


author: Peter Jones <pjones@redhat.com> - 2.02-0.65.1
changelog:
  - More precise requires and obsoletes on the -tools* subpackages to avoid
    issues with mixing and matching repos the subpackages are split between.
    Resolves: rhbz#1499669


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-0.65.0.4
changelog:
  - Restore symlink to grub environment file, that was removed during grub2-efi update
    if grub2 package is also installed on UEFI machines
    [27345750]
  - fix symlink removal scriptlet, to be executed only on removal
    [bug 19231481]


author: d.marlin <dmarlin@redhat.com>
changelog:
  - Only set RPM_OPT_FLAGS if undefined to avoid overwriting 
    the platform defaults.
    Resolves: rhbz#1023793


author: Peter Jones <pjones@redhat.com> - 8.28-8
changelog:
  - Fix crash when config file doesn't match command line.
    Related: rhbz#1070646
  - Make crashes work with abrt better.
    Resolves: rhbz#1070646


author: Peter Jones <pjones@redhat.com> - 8.28-10
changelog:
  - Use the correct load commands for aarch64 efi.
    Resolves: rhbz#1081269
  - Support "devicetree" directive in grub2.
    Resolves: rhbz#1063534
  - Explain the default bootloaders and configuration paths slightly better
    in the manual.
    Resolves: rhbz#1001664
  - Conditionally create debug entries when installing kernels.
    Resolves: rhbz#957681
  - Make sure --banner from the command line is used correctly.
    Resolves: rhbz#1032048


author: Peter Jones <pjones@redhat.com> - 8.28-11
changelog:
  - Fix a memory corruption issue we're hitting on s390/s390x
    Resolves: rhbz#1152152
  - Don't use spaces on zipl platforms to describe debugging entries
    Related: rhbz#1152152


author: Jacob Wang <jacob.wang@oracle.com> - 8.28-11.0.1
changelog:
  - Added temporary patch to set whatever entry before the saved entry [bug 19159678] (Tianyue Lan)
  - Correct menuentry contents to match the result of running grub2-mkconfig [bug 18466957]
  - Correct the check for uek [bug  18466957]
  - Have different entries for UEK and RHCK kernels [bug 18504756] (Kevin Lyons)


author: Peter Jones <pjones@redhat.com> - 8.28-12
changelog:
  - Do a better job recognizing "title" and "default" position and formatting
    on extlinux
    Resolves: rhbz#1200045
  - Do a better job recognizing stanza names and defaults on grub1 and grub2
    Related: rhbz#1142545
  - (reordered some patches to match the ordering in master)
    Related: rhbz#1200045
    Related: rhbz#1142545
  - Add test suite coverage and minor fixes related to zipl and
    --default-{kernel,index,title}
    Related: rhbz#1184014
  - Use systemd debug options that work on RHEL 7
    Resolves: rhbz#1212128


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: Jingdong Lu <jingdong.lu@oracle.com> - 8.28-17.0.1
changelog:
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [bug 18504756] (Kevin Lyons)


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: EL Errata <el-errata_ww@oracle.com> - 8.28-18.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [bug 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [bug 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [bug 18504756] (Kevin Lyons)


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1420749
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1420749
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1420749


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Tianyue Lan <tianyue.lan@oracle.com> - 8.28-8.0.2
changelog:
  - Correct menuentry contents to match the result of running grub2-mkconfig [bug 18466957]
  - Correct the check for uek [bug  18466957]


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Guenther Deschner <gdeschner@redhat.com> 0.2.3-8
changelog:
  - Fix default proxymech documentation and fix LOCAL_FIRST implementation
  - resolves: https://fedorahosted.org/gss-proxy/ticket/105


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-0
changelog:
  - New upstream release 0.3.0:
    * Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
    * Add support for new rpc.gssd mode of operation that forks and changes uid
    * Add 2 new options allow_any_uid and cred_usage


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-3
changelog:
  - Fix flags handling in gss_init_sec_context()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/106
  - resolves: #1031713
  - Fix OID handling in gss_inquire_cred_by_mech()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/107
  - resolves: #1031712
  - Fix continuation processing for not yet fully established contexts.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/108
  - resolves: #1031711
  - Add flags filtering and flags enforcing.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/109
  - resolves: #1031710


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-4
changelog:
  - Use secure_getenv
  - resolves: https://fedorahosted.org/gss-proxy/ticket/110
  - resolves: #1032684
  - Use strerror_r instead of strerror
  - resolves: https://fedorahosted.org/gss-proxy/ticket/111
  - resolves: #1033350


author: Roland Mainz <rmainz@redhat.com> 0.4.1-6
changelog:
  - Remove extra whitespaces from #1208640/#1194299 patches
  - spec file cleanup
  related: #1208640 #1194299


author: Roland Mainz <rmainz@redhat.com> 0.4.1-0
changelog:
  - Rebase gssproxy to 0.4.1 per bug #1132389 ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").


author: Roland Mainz <rmainz@redhat.com> 0.4.1-1
changelog:
  - Add patch to remove -fno-strict-aliasing (gssproxy ticket #140,
    a dependicy for the fix for bug #1092515 (see below))
  - Add patch to fix bug #1092515 ("gssproxy - PIE and RELRO check")


author: Roland Mainz <rmainz@redhat.com> 0.4.1-2
changelog:
  - The following bugs have been fixed by the rebase to 0.4.1
    in bug ("[RFE] Rebase gssproxy to the latest to match
    expectations of other projects"):
    - Bug #1196371 ("rpc.gssd segfaults in gssproxy (proxymech.so)")
      Upstream tickets { #137, #144 }
    - Bug #1053730 ("KrbLocalUserMapping does not work with
      Apache & GSS-Proxy")
      Upstream ticket #101
    - Bug #1168962 ("gssproxy is not working with httpd on ppc64 and s390x")
      Upstream ticket #146


author: Roland Mainz <rmainz@redhat.com> 0.4.1-3
changelog:
  - Bug #1213852 ("[gssproxy] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy") was
    fixed by the rebase to 0.4.1 in bug ("[RFE] Rebase
    gssproxy to the latest to match expectations of other
    projects").
    Note that the same bug was also fixed in the kernel with
    "9507271 svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT
    decoding failures" (see
    https://bugzilla.redhat.com/show_bug.cgi?id=1213852#c2
    and RH Bug #1120860 ("[NFS] NFS clients cannot mount with
    sec=krb5 if the NFS server is running gssproxy")) to
    handle various corner cases not covered by gssproxy,
    for example individual krb5 ticket fields exceeding
    the kernel's buffer size.


author: Robbie Harwood <rharwood@redhat.com> 0.6.2-1
changelog:
  - Rebase to latest version since we have krb5-1.15
  - Resolves: #1379836
  - Resolves: #1344518
  - Resolves: #1366782
  - Resolves: #1379005
  - Resolves: #1379482
  - Resolves: #1379616
  - Resolves: #1380490
  - Resolves: #1378600
  - Resolves: #1285012
  - Resolves: #1333813


author: Colin Walters <walters@verbum.org> 0.10.23-17
changelog:
  - Hack the gtk-doc to remove plugin docs that are not shipped
  - Drop mythtv, opencv sources that are no longer buildable


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400838


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400838


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400839


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400839


author: Hans de Goede <hdegoede@redhat.com> - 0.10.31-3
changelog:
  - v4l2: Don't probe UVC devices for being interlaced, this saves seconds when
    starting a pipeline with a v4l2 element (rhbz#797188, gnome#677722)


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400897


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0 release (rhbz #1416783)
  - Release held keys when loosing focus (rhbz #921008)
  - Avoid warnings when disconnecting (rhbz #1126825)
  - Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
  - CVE-2017-5884 - fix bounds checking for RRE, hextile and
    copyrect encodings (rhbz #1425367)
  - CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-2
changelog:
  - Fix reserved data size (rhbz #1416783)
  - Fix inverted args in tests (rhbz #1416783)	  
  - Avoid sign extension problems (rhbz #1416783)
  - Fix crash with opening via GSocketAddress (rhbz #1416783)
  - Fix crash & error reporting during connection timeout (rhbz #1441120)
  - Fix incompatibility with libvncserver websockets (rhbz #921330)


author: Matthias Clasen <mclasen@redhat.com> 3.14.13-8
changelog:
  - Don't emit warnings for 'new' deprecations by default
  - Disable GtkMenuButton if the associated action says so
  Resolves: #1210747
  Resolves: #1223463


author: Ray Strode <rstrode@redhat.com> 3.14.13-20.1
changelog:
  - Ensure motif and related windows get told to supply resize borders
    for CSD decorated windows
  Resolves: #1416874


author: Benjamin Otte <otte@redhat.com> - 3.8.8-6
changelog:
  - Properly resize toplevel when collapsing GtkExpander
  - Add missing man pages
  - Allow remapping all keys
  - Resolves: #982295, #948432, #1090126


author: Matthias Clasen <mclasen@redhat.com> - 3.8.4-5
changelog:
  - Avoid losing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tables
  - Related: #881175


author: Matthias Clasen <mclasen@redhat.com> - 3.8.4-5
changelog:
  - Avoid losing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic
  - Related: #881175


author: Kalev Lember <kalevlember@gmail.com> - 2.24.2-1
changelog:
  - Update to 2.24.2
  - Removed mm-common buildrequire which is no longer needed for tarball builds
  - Cleaned up the spec file for modern rpmbuild


author: Matthew Barnes <mbarnes@redhat.com> - 2.0.16-1.fc13
changelog:
  - Update to 2.0.16
  - No need to run libtoolize and autoreconf.
  - Remove language comparison patch (fixed upstream).


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.10.2-1
changelog:
  - 0.10.2 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.2.news

   * Wed Apr 10 2013 Peter Robinson <pbrobinson@fedoraproject.org> 0.10.1-1
  - 0.10.1 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-dlna/0.10/gupnp-dlna-0.10.1.news


author: Jiri Popelka <jpopelka@redhat.com> 5.2.9-8
changelog:
  - Added IEEE 1284 Device ID for Kyocera FS-1118MFP (bug #782379).
  - Use arch-specific dependency when requiring base package.


author: Tim Waugh <twaugh@redhat.com> - 5.2.9-17
changelog:
  - More fixes for bug #948967:
    - Supply man page for gutenprint-foomaticupdate.
    - Link to cups-genppd(8) man page from cups-genppd.5.2(8).


author: Ondrej Holy <oholy@redhat.com> - 1.22.4-1
changelog:
  - Update to 1.22.4
  - Remove obsolete upstream patches
  - Add translations updates from upstream
  - Resolves: #1174716


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Michal Luscon <mluscon@redhat.com> 1.5-1
changelog:
  - New upstream version
  - Removed gzip-1.3.9-stderr.patch
  - Removed gzip-1.3.10-zgreppipe.patch
  - Removed gzip-1.3.13-noemptysuffix.patch


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Aleš Kozumplik <ales@redhat.com> - 0.5.1-1
changelog:
  - pool_split_evr() assert if we hit unexpected data. (Related:RhBug:1141634) (Ales Kozumplik)
  - README: changed references to new repo location (Jan Silhan)
  - iutil-py: removed pyseq_to_packagelist function (Jan Silhan)
  - improved performance of python sequence iteration (RhBug:1109554) (Jan Silhan)
  - reldep: constructor accepts unicode strings (RhBug:1124968) (Jan Silhan)
  - Fix pool_split_evr's handling of EVRs without releases. (Radek Holy)
  - added sha512 support (RhBug:1082658) (Jan Silhan)
  - cosmetic: removed unneeded semicolon (Jan Silhan)
  - goal: does not raise exception on empty selector (Related:RhBug:1127206) (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-1
changelog:
  - README: made readthedoc documentation official (Jan Silhan)
  - sack: deprecation of create_cmdline_repo (Jan Silhan)
  - does not break Sack.__init__ API from 8ce3ce7 (Jan Silhan)
  - doc: document the new logdir parameter of Sack.__init__. (Radek Holy)
  - New version: 0.5.3 (Jan Silhan)
  - apichange: sack: added optional param logdir (Related:RhBug:1175434) (Jan Silhan)
  - apichange: py: rename: Sack.cache_path -> Sack.cache_dir (Radek Holy)
  - doc: add Sack to the Python API reference manual. (Radek Holy)
  - cosmetic: autopep8 applied on __init__.py (Jan Silhan)
  - query: support multiple flags in filter (RhBug:1173027) (Jan Silhan)
  - packaging: make the spec file compatible with GitHub packaging guideliness. (Radek Holy)
  - New version: 0.5.2 (Michal Luscon)
  - hy_chksum_str() returns NULL in case of incorrect type (Michal Luscon)
  - Fix defects found by coverity scan (Michal Luscon)
  - selector: allow selecting provides with globs (RhBug: 1148353) (Michal Luscon)
  - py: nevra_init() references possibly uninitialized variable. (Ales Kozumplik)
  - package: add weak deps attributes. (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.5.3-2
changelog:
  - bumped release to be greater than f21 release
  - Add Peter to Authors (Peter Hjalmarsson)
  - Add support for armv6hl (Peter Hjalmarsson)


author: Michal Luscon <mluscon@redhat.com> 0.5.4-1
changelog:
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - New version 0.5.4 (Michal Luscon)
  - goal: implement methods for optional installation (RhBug:1167881) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 0.5.5-1
changelog:
  - get rid of yum references (Jan Silhan)
  - sack: force recomputing excludes (Jan Silhan)
  - doc: cosmetic: made Sack headline more readable (Jan Silhan)
  - doc: sack: warning about using excludes, includes, disabling and enabling
    repos (Jan Silhan)
  - cosmetic: removed commented code (Jan Silhan)
  - sack: calls reinitiate provides after changing considered map (RhBug:1099342)
    (Jan Silhan)
  - fixed memleak from d8f2ca7 (Jan Silhan)
  - doc: add to CMDLINE_REPO_NAME and SYSTEM_REPO_NAME the Python API reference
    manual. (Radek Holy)
  - doc: add Repo to the Python API reference manual. (Radek Holy)
  - updated load_test_repo() to be able to load non-standard system repo (Michael
    Mraka)
  - python tests for goal.run(verify=True) (Michael Mraka)
  - test for HY_VERIFY flag (Michael Mraka)
  - introduced verify option for goal.run() (Michael Mraka)
  - AUTHORS: fixed name (Michael Mraka)
  - AUTHORS: added 3 Michaels (Jan Silhan)
  - Build for x86_64, correction for C++ (Michal Ruprich)


author: Michal Luscon <mluscon@redhat.com> 0.5.7-1
changelog:
  - spec: add a %{snapshot} macro for easier snapshot building (Radek Holy)
  - doc: sack: deep copy added to warning section (Jan Silhan)
  - doc: sack: warning about multiple Sack usage (Jan Silhan)
  - doc: sack: len(sack) -> method __len__ (Jan Silhan)
  - Package.files returns list of Unicode objects (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-1
changelog:
  - added implicit-function-declaration compile flag (Jan Silhan)
  - subject: Fix compiler warning introduced by previous commit (Colin Walters)
  - python: Verify that nosetest actually ran any tests (Colin Walters)
  - AUTHORS: updated (Jan Silhan)
  - subject: Remove internal header includes from public header (Colin Walters)
  - maintain result map in query (RhBug:1049205) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - package: Don't assume the same pool in hy_package_cmp() (Matthew Barnes)


author: Jan Silhan <jsilhan@redhat.com> 0.5.8-2
changelog:
  - tito: change vesiontagger to releasetagger (Jan Silhan)
  - don't require python3 in rhel (Jan Silhan)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.13-2
changelog:
  - Bring back config patch to fix -debuginfo, it hasn't been upstreamed yet.
  - Drop empty TODO from docs.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.8-1
changelog:
  - New upstream version 1.3.8.
  - Fixes handling of keys which use ri-records, for both reading and
    writing (RHBZ#717583, RHBZ#987463).
  - Remove upstream patch.
  - Rebase dirs patch against new upstream sources.
  - Rebase ruby patch against new upstream sources.
  - Modernize the RPM spec file.
  - Fix .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.7-6
changelog:
  - Fix for latest Ruby in Rawhide.  Fixes build failure identified
    by mass rebuild yesterday.
  - Do not ignore error from running autoreconf.


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-1
changelog:
  - treat unexpected command-line arguments as an error to avoid setting
    incorrect expectations, and warn when a check file doesn't appear to
    contain anything for us to check (#1016706)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-4
changelog:
  - only BuildRequire: prelink on the arches on which we know it runs (currently
    %{ix86}, x86_64, ppc, ppc64, s390, s390x), so that it can be built on the
    rest (#1061889)


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Jiri Popelka <jpopelka@redhat.com> - 3.13.6-1
changelog:
  - 3.13.6
  - hplip-ipp-accessors.patch merged upstream
  - /etc/cron.daily/hplip_cron -> /usr/share/hplip/hplip_clean.sh


author: Tim Waugh <twaugh@redhat.com> - 3.13.7-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Lyude Paul <cpaul@redhat.com> - 1.0.0-7
changelog:
  - Initial port from Fedora to RHEL 7.3
  - Add patch for building with gcc4
  - Call autoreconf before starting build
  Resolves: rhbz#1311004


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14
changelog:
  - Remove dependency on initscripts
  - Add After=network.target to systemd service
  - Resolves: rhbz#1283893, rhbz#1269717


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1480321


author: Joe Orton <jorton@redhat.com> - 2.4.6-13
changelog:
  - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
  - mod_proxy_http: fix brigade memory usage (#1040447)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077907)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077907)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - mod_cgid: add security fix for CVE-2014-0231 (#1120607)
  - mod_proxy: add security fix for CVE-2014-0117 (#1120607)
  - mod_deflate: add security fix for CVE-2014-0118 (#1120607)
  - mod_status: add security fix for CVE-2014-0226 (#1120607)
  - mod_cache: add secutiry fix for CVE-2013-4352 (#1120607)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1170217)
  - mod_proxy: support Unix Domain Sockets (#1170286)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1168050)
  - mod_proxy: support Unix Domain Sockets (#1168081)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31.1
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32
changelog:
  - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_status: honor remote_ip as documented (#1169081)
  - mod_deflate: fix decompression of files larger than 4GB (#1170214)
  - core: improve error message for inaccessible DocumentRoot (#1170220)
  - ab: try all addresses instead of failing on first one when not available (#1125276)
  - mod_proxy_wstunnel: add support for SSL (#1180745)
  - mod_proxy_wstunnel: load this module by default (#1180745)
  - mod_rewrite: add support for WebSockets (#1180745)
  - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1170206)
  - mod_ssl: fix memory leak on httpd reloads (#1181690)
  - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
  - mod_cgi: return error code 408 on timeout (#1162152)
  - mod_dav_fs: set default value of DAVLockDB (#1176449)
  - add Documentation= to the httpd.service and htcacheclean.service (#1184118)
  - do not display "bomb" icon for files ending with "core" (#1170215)
  - add missing Reason-Phrase in HTTP response headers (#1162159)
  - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
  - apachectl: ignore HTTPD variable from sysconfig (#1214401)
  - apachectl: fix "graceful" documentation (#1214398)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34
changelog:
  - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
  - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
  - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219)
  - mod_ssl: do not send NPN extension with not configured (#1226015)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35
changelog:
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_dav: send complete response when resource is created (#1235383)
  - apachectl: correct the apachectl status man page (#1231924)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36
changelog:
  - Revert fix for #1162152, it is not needed in RHEL7
  - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41
changelog:
  - mod_cache: merge r->err_headers_out into r->headers when the response
    is cached for the first time (#1264989)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1298148)
  - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038)
  - fix apache user creation when apache group already exists (#1299889)
  - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757)
  - mod_proxy: fix slow response time for reponses with error status code
    when using ProxyErrorOverride (#1283653)
  - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149)
  - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495)
  - rotatelogs: improve support for localtime (#1244545)
  - ab: fix read failure when targeting SSL server (#1255331)
  - mod_log_debug: fix LogMessage example in documentation (#1279465)
  - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
    of DB lookup entries independently of the selected DB engine (#1287844)
  - mod_ssl: fix hardware crypto support with custom DH parms (#1291865)
  - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)


author: Joe Orton <jorton@redhat.com> - 2.4.6-45.3
changelog:
  - prefork: fix delay completing graceful restart (#1327624)
  - mod_ldap: fix authz regression, failing to rebind (#1415257)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59
changelog:
  - Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
    are broken during buffer resize


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60
changelog:
  - Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61
changelog:
  - Related: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62
changelog:
  - Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
    patch to set worker secret passed to tomcat


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64
changelog:
  - Resolves: #1442872 - apache user is not created during httpd installation
    when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67.2
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Caolan McNamara <caolanm@redhat.com> - 2.4-0.4.20070901
changelog:
  - it_IT_README.1st says GPLv2+, but it_IT_README.txt says GPLv3+ -> 
    change license field to GPLv3+


author: Parag <pnemade AT redhat DOT com> - 20080425-7
changelog:
  - Resolves:rh#959987: Error message: “0 is wrong flag id” occurs when using hunspell-ne
  - Resolves:rh#967638: ne_NP.dic contains both CRLF and LF line terminators


author: Parag Nemade <pnemade AT redhat.com> - 0.2.1-2
changelog:
  - Resolves: rh#571710: Fix license tag in spec file with new upstream release
  - Removed CREDITS file as upstream provides now README and LICENSE files.


author: Parag <pnemade@redhat.com> - 0.20050929-3
changelog:
  - Use aspell source instead to pull source as BR:aspell-te
  - Resolves:rh#511262 buildrequires aspell-te


author: Michal Minar <miminar@redhat.com> 0.247-1
changelog:
  - Moved blacklist.conf from /etc/modprobe.d to /usr/lib/modprobe.d.
  - Renamed it to dist-blacklist.conf.
  - Data files update


author: Michal Minar <miminar@redhat.com> 0.252-7.1
changelog:
  - Bumped release to reflect rhel version.
  - Fixed bogus dates in changelog.
  - Generate and install hwdb.d/* files.


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.1
changelog:
  - Remove build dependencies on libXNVCtrl-devel and w3m because RHEL
    does not have them (w3m is available on x86_64, but not s390).
    Resolves: rhbz978752


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Tomas Hozza <thozza@redhat.com> - 0-0.20.20130826git
changelog:
  - Build daemons only for x86_64 architecture (#1010220)
  - Bump release to 20 to prevent RHEL6 -> RHEL7 update path issues


author: Tomas Hozza <thozza@redhat.com> - 0-0.21.20130826git
changelog:
  - Use 'hypervkvpd' directory in libexec for KVP daemon scripts (#1010280)
  - daemons are now WantedBy multi-user.target instead of basic.target (#1010284)


author: Matej Muzila <mmuzila@redhat.com> - 0-0.25.20141008git
changelog:
  - Daemons updated to the last git snapshot
  - Use kernel-headers instead of kernel-devel to build
  - Added Hyper-V fcopy daemon as hypervfcopyd subpackage


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.26.20150402git
changelog:
  - 2015-04-02 git snapshot
  - VSS: skip all readonly-mounted filesystems (#1160584)
  - VSS: support partitions mounted several times (#1169724)


author: Vitaly Kuznetsov <vkuznets@redhat.com> - 0-0.30.20161211git
changelog:
  - Use '-gt' instead of '>' to do the right comparison (#1414822)
  - hyperv-tools subpackage added (#1378710)
  - Update to upstream v4.9 (#1406397)


author: Caolán McNamara <caolanm@redhat.com> - 2.8.3-4
changelog:
  - Resolves: rhbz#813481 x86_64 valgrind spews, see rhbz#813780
  - Related: rhbz#813481 dump valgrind failure log


author: Jaromir Capik <jcapik@redhat.com> - 3.1.0-5
changelog:
  - Introducing man pages for binaries in the eepromer subpackage
  - Introducing -r switch in the i2cset help


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.1.0-11
changelog:
  - 1071397 - Load i2c-dev module when i2cdetect is executed
  - 1195285 - Ship modprobe.d files in /usr/lib/modprobe.d


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.1.20150717git825da3ccd2
changelog:
  - Update to pre-release git snapshot of 1.0.10.
  - Adds libibacmp shared library.
  - Rebase coverity patch.
  - Minor spec file cleanup.
  - Resolves: bz1169952


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.3.20150717git825da3ccd2
changelog:
  - Put libibacmp.so in the main package, it's needed at runtime.
  - No need to run ldconfig, the .so is not in the linker path.
  - Filter the plugin from RPM provides.
  - Related: bz1169952


author: Jarod Wilson <jarod@redhat.com> - 12-3
changelog:
  - Take libi40iw out of tech-preview state (rhbz 1428930)
  - Add ibv_*_pingpong man pages (rhbz 1416541)


author: Jarod Wilson <jarod@redhat.com> - 12-4
changelog:
  - Clean up devel files list
  - Fix up a few dependencies rpmdiff complained about (rhbz 1404035)
  - Add Requires: pciutils for dracut to behave in minimalist cases (rhbz 1429046)
  - Adjust Conflicts: on infiniband-diags to match RHEL packaging (rhbz 1428785)


author: Jarod Wilson <jarod@redhat.com> - 13-1
changelog:
  - Update to rdma-core v13 release (rhbz 1404035)
  - Mellanox mlx5 Direct Verbs support (rhbz 1426430)
  - Get build working on s390x, less mlx5 (rhbz 1434029)


author: Jarod Wilson <jarod@redhat.com> 13-6
changelog:
  - Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
  - Add necessary Provides/Obsoletes for old -static packages
  - Remove ibverbs providers that we aren't currently able to support
  - Resolves: rhbz#1453096, rhbz#1451607


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-1
changelog:
  - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built with $RPM_OPT_FLAGS
  - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing: ibus: visible 
    password entry flaw [fedora-all]
    Thanks czchen for the GitHub pull request 39.
  - Added translations: fr_FR, ja_JP, ko_KR
  - Adopt cmake-fedora-1.2.0


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-7
changelog:
  - Target "translation" is built separately with all, 
    in order to tame multiple job make.
  - Resolves Bug 1013977 - ibus-chewing needs to have ibus write-cache --system in %post and %postun
  - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing: ibus: visible password entry flaw [rhel-7.0]
  - Resolves Bug 1028911 - [zh_TW]'Chinese<->English' switch does not work when clicking on the Chewing menu list.
  - Resolves Bug 1045868 - ibus-chewing *again* not built with $RPM_OPT_FLAGS
  - Option "Sync between caps lock and IM":
    + Default of  is changed to "disable",  because the previous default
      "keyboard" cause bug 1028911 for GNOME Shell.
    + Now Sync from "input method" can control Caps LED in GNOME shell.
  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA
  - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing log.


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.4-9
changelog:
  - Resolves Bug 1119963 - Slow focus change with ibus-chewing
  - Resolves Bug 1062133 - ibus-chewing may not handle key event after focus change
  - Resolves Bug 1073797 - Cannot identify input mode for Chinese IME (ibus-chewing)


author: Ding-Yi Chen <dchen at redhat.com> - 1.4.3-1
changelog:
  - Fixed GitHub issue #30: Rework decorate_preedit
    by merging pull request #30 from buganini
  - Fixed GitHub issue #31: Properly refresh property
    by merging pull request #31 from buganini


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-3
changelog:
  - Remove have_bridge_hotkey and need_pygobject3 macros which does no
    longer make sense after F17
  - Add ibus-hangul-dconf-prefix.patch
  - Fix bug 909509 - Hangul Keybaord doesn't be changed in IBusHangul Setup


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-7
changelog:
  - Invoke ibus-setup-hangul with the absolute path.
  - Fix bug 1012732 - Click ibus hangul setup on gnome-shell top bar's
    ibus -> No Response


author: Daiki Ueno <dueno@redhat.com> - 1.4.2-10
changelog:
  - Add ibus-hangul-hangul-toggle.patch
  - Fix bug 1071351 - Cannot switch English input mode and Hangul
    (Korean) input mode by Hangul key


author: Daiki Ueno <dueno@redhat.com> - 1.5.18-6
changelog:
  - add ibus-kkc-16th-candidate.patch (Closes: #1251882)
  - add ibus-kkc-page-settings.patch (Closes: #1251891)
  - add ibus-kkc-ignore-annotations.patch (Closes: #1251896)


author: Peng Wu <pwu@redhat.com> - 1.6.91-4
changelog:
  - Resolves: rhbz#1068338, rhbz#1068448
  - Add patch ibus-libpinyin-update-gnome-shell-indicatior.patch
  - Add patch ibus-libpinyin-drop-xdg-depends.patch


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-4
changelog:
  - Add ibus-m17n-translit-layout.patch
  - Fix bug 847495 - For non-US keyboard layout Ibus-m17n adds English
    (US) to the list of input methods and other input methods use US
    layout
  - Require eekboard-service instead of eekboard
  - Fix bug 847500 - Don't install Eekboard by default in the desktop spin


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-6
changelog:
  - Add ibus-m17n-desktop-file.patch
    Fix bug 860955 - ibus-m17n setup is not enabled in
    gnome-control-center region, .desktop file is missing


author: Daiki Ueno <deno@redhat.com> - 1.3.4-8
changelog:
  - Update ibus-m17n-HEAD.patch to the latest upstream master
  - Remove unnecessary and not upstreamable patches
  - Use gtk3 always
  - Fix bug 912592 - ibus-m17n should use default keyboard in most cases


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-9
changelog:
  - Update ibus-m17n-xkb-options.patch to set XKB option for Inscript2
  - Fix bug 957993 - ibus-m17n doesn't automatically map Alt_R to AltGr
    when Inscript2 maps are used


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-10
changelog:
  - Add ibus-m17n-fix-data-location.patch
  - Fix bug 962144 [abrt] ibus-m17n-1.3.4-9.fc19:
    setup_dialog_load_config: Process /usr/libexec/ibus-setup-m17n was
    killed by signal 11 (SIGSEGV)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20120907-3
changelog:
  - Resolves: #856903
  - Fix ipa-x-sampa table and phrases containing spaces in emoji-table
    Currently there is a regular expression which filters out several
    lines defining valid phrases. The emoji-table for example has phrases
    containing spaces which are currently filtered out and the ipa-x-sampa
    table has trailing comments which are filtered out as well.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20121113-1
changelog:
  - update to latest upstream 1.4.99.20121113 from Caius ‘kaio’ Chance’s repository, using rel20121101 git tag
  - remove ibus-table-1.4.99.20120907-improve-chinese-category-check.patch (included upstream)
  - remove fix-ipa-x-sampa-table-and-phrases-containing-spaces.patch (included upstream)
  - Fix marking of translatable strings for gettext
  - update zh_??.po files
  - Add German translation
  - Do not fail if the ~/.ibus/byo-tables/ directory does not exist


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130108-1
changelog:
  - update to latest upstream 1.4.99.20130108 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - includes port to GObjectIntrospection now


author: Mike FABIAN <mfabian@redhat.com> - 1.4.99.20130110-1
changelog:
  - Resolves: #513901 ibus-table setup does not store config settings
  - update to latest upstream 1.4.99.20130110 from Caius ‘kaio’ Chance’s repository, 1.5.0 branch
  - When detecting the Chinese mode from the environment, also check LC_ALL
  - Fix typo in self._chinese_mode variable (The typo broke the SC/TC property)
  - Make cursor in lookup table always visible (became invisible after the port to GObjectIntrospection)
  - apply changes in values of dconf keys immediately


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-1
changelog:
  - update to latest upstream 1.5.0  from Caius ‘kaio’ Chance’s repository
  - add patches for better simplified/traditional Chinese detection
  - Resolves: #857967 - simplified/traditional Chinese detection in ibus-table does not work well


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-2
changelog:
  - Resolves: #911487 - Non-Chinese tables from the ibus-table-other package do not work
  - Add auto_select functionality to select the first phrase when typing.
    Useful for Cyrillic transliteration
  - Update cmode property in chinese mode only
  - Fall back to auto_select = False if neither dconf nor the table
    have a value for auto_select
  - Preedit needs to be updated on page-up and page-down


author: Mike FABIAN <mfabian@redhat.com> - 1.5.0-5
changelog:
  - Resolves: rhbz#1049760 - [ALL LANG] Traceback produced when run ibus-table-createdb from terminal.
  - When tabcreatedb.py is called without any options, print a usage message. Do not just show a cryptic backtrace.


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.0.20110114-1
changelog:
  - Fix Bug 667877: ibus-table-yinma and ibus-table-xingma have been obsoleted.
  - Now depends on cmake-fedora


author: Ding-Yi Chen <dchen@redhat.com> - 1.3.4-1
changelog:
  - Fixed Bug 715707 - FTBFS ibus-table-chinese-1.3.0.20110114-2.fc15
  - Fixed Bug 629212 - bad candidate orders in ibus-table-quick
  - Merged patch from sagara @ github, which address IBus issue 787
  - Make it compatible with cmake-fedora-0.7.994
  - Move the cmake policies to the front
  - Suppress the misleading warning from rpm -V


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.0-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.5-1
changelog:
  - Table build scripts has been refactored.
  - cmake-fedora is added as submodule.
  - Fixed Bug 855250 - Change the default filtering for Quick and Cangjie by
    merging maxiaojun's repository
  - Fixed Google Issue 1405: failed to build ibus-table-chinese due to missing db files
  - Fixed Google issue 1507: Add CJKV Extension C/D support for Array30
  - Merge GitHub Pull request 3: Added the inter punct
  - Merge GitHub Pull request 4: Give Cangjie and Quick users 9 candidates per page


author: Ding-Yi Chen <dchen@redhat.com> - 1.4.6-1
changelog:
  - Fixed IBus Google issue 1126: An error in ChineseTableLicenseAuditing
  - Complete LICENSE tag for all of the tables.


author: Mike FABIAN <mfabian@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3 upstream version
  - Don’t output page_size in “/usr/libexec/ibus-engine-typing-booster --xml” (Resolves: rhbz#975449 - ibus-daemon prints warnings because “/usr/libexec/ibus-engine-typing-booster --xml” prints the invalid element “page_size”)
  - Use ~/.local/share/ibus-typing-booster/ to store user data and log files (Resolves: rhbz#949035 - don't use a hidden directory under .local/share)


author: Mike FABIAN <mfabian@redhat.com> - 1.1.0-1
changelog:
  - Update to 1.1.0 upstream version
  - Add a commit=True parameter to check_phrase_and_update_frequency()
  - Fix that the page_size is shown as 0 in the setup tool if it has not been set before
  - Do not use AUTOINCREMENT
  - Make it possible to exit the setup tool by typing Control-C in the terminal
  - Add feature to read a text file for training the user database
  - Update German translations and .pot file
  - Fix error when the hunspell dictionary for an engine is missing


author: Mike FABIAN <mfabian@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 upstream version
  - Make TAB when used to enable/disable the lookup table work as a toogle
  - Create a VIEW for “LIKE input_phrase%” in select_words() and use that
    in the following SELECT statements (Makes candidate calculation more
    than 10 times faster)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.1-1
changelog:
  - Update to 1.2.1 upstream version
  - Pop up a message box when a file has been read to train the database, indicating success or failure (Resolves: rhbz#979933)
  - Update German translation
  - Ignore most punctuation characters and mathematical symbols when tokenizing (Resolves: rhbz#979939)


author: Mike FABIAN <mfabian@redhat.com> - 1.2.2-1
changelog:
  - Update to 1.2.2 upstream version
  - Commit immediately when certain punctuation characters are typed and transliteration is not used (Resolves: rhbz#981179)
  - Add an option to try completion only when a minimum number of characters has been typed


author: Mike FABIAN <mfabian@redhat.com> - 1.2.3-1
changelog:
  - Update to 1.2.3 upstream version
  - Fix exception handling when trying to install a rpm package (Resolves: rhbz#986178)


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Doug Ledford <dledford@redhat.com> - 1.5.7-12
changelog:
  - Change ExclusiveArch to ExcludeArch instead so we don't have
    the same problem again in the future
  - Update to the git repo tarball that we shipped in rhel6.6
  - Related: bz1123998


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-5
changelog:
  - Resolves: rhbz#875496
  - Build with $RPM_LD_FLAGS and %{_smp_mflags}.
  - Run unit tests during build.


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to latest ustream release of 1.3 branch - 1.3.2
   - Security Updates
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
   - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
   - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch to remove GTK dependency
    - icedtea-web-pr1260-remove-gtk-dep.patch


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - commented out check - some junit4  incompatibility


author: Jiri Vanek <jvanek@redhat.com> 1.4-1
changelog:
  - Adapted to latest openjdk changes
  - added build requires for autoconf and automake
  - minor clean up


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page (resolves 948443)
  - removed upstreamed  patch1 b25-appContextFix.patch
  - removed upstreamed  patch2 rhino-pac-permissions.patch
  - make check enabled again
  - should be build for non-standart archs !-)
  - removed unused multilib arches (yupii!)
  - Resolves: rhbz#1009820


author: Jiri Vanek <jvanek@redhat.com> 1.5-2
changelog:
  - add not yet upstreamed DE localisation of 1.5
   - patch0 DElocalizationforIcedTea-Web1.5-0001.patch
  - autoreconf gog  -vfi, see RH1077898
  - ./configure changed to %configure
  - Resolves: rhbz#1077287


author: Jiri Vanek <jvanek@redhat.com> 1.6.0-1
changelog:
  - update to upstream 1.6
  - made to use jdk8 (rh1184970)
  - it will be necessary for 1.6.1 anyway (rh1233687)
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-1
changelog:
  - updated to upstream release 1.6.1
  - metadata xml files enhanced for javaws
  - forced to use jdk8 by default
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.x86_64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.3-3
changelog:
  - IlmBase.pc: +Requires.private: gl glu
  - -devel: drop hard-coded libGL/pkgconfig deps, let rpm autodetect now


author: Akira TAGOH <tagoh@redhat.com> - 1.6.2-1
changelog:
  - New upstream release.
  - the spec file cleanup.
  - Correct License field
  - Add Provides: bundled(egglib) to im-chooser-common since
    it actually contains things in libimchooseui.so.0


author: Akira TAGOH <tagoh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release.
    - Add a link to the log file in the error dialog (#950488)
    - Fix a crash issue (#859624)


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)


author: Doug Ledford <dledford@redhat.com> - 1.6.2-1
changelog:
  - Update to latest upstream release (resolves bz998816)
  - Revive all_hcas patch (otherwise would be a regression)
  - Fix ibnodes -h output (another regression, bz1054545)
  - Resolves: bz998816, bz1054545


author: Michal Schmidt <mschmidt@redhat.com> - 1.6.5-1
changelog:
  - Update to latest upstream release. Adds rdma-ndd daemon.
  - Rebase patches, cherry-pick fixes from upstream git.
  - Enable build on s390(x).
  - Fixed bogus changelog dates.
  - Add Conflicts with old rdma. It needs to be aware of rdma-ndd.
  - Resolves: bz1169968


author: Honggang Li <honli@redhat.com> - 1.6.7-1
changelog:
  - Rebase to latest upstream release 1.6.7.
  - Remove patches merged into upstream release.
  - Remove sub-package rdma-ndd as it merged into rdma-core.
  - Resolves: bz1382809


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Jay Fenlason <fenlason@redhat.com> 3.1-1
changelog:
  - Upgrade to new upstream version.
  - add the -edata patch to handle the type-change of the edata sypmbol
    from 'A' to 'D'.


author: jay Fenlason <fenlason@redhat.com> 3.1-2.r364.1140_open
changelog:
  - Pull in upstream patch to close
    Resolves: rhbz907730 - [RHEL-7.0] libpsm_infinipath.so: undefined reference to knem_open_device


author: Jay Fenlason <fenlason@redhat.com> 3.1-3.r364.1140_open
changelog:
  - Fix the path to the udev file to close
    Resolves: rhbz1034508 - [RHEL-7.0] /dev/ipath* permissions are wrong


author: Jay Fenlason <fenlason@redhat.com> -3.2-2_ga8c3e3e_open.2
changelog:
  - Update the -build patch and this spec file so the library is built
    with the standard optimization and security flags.
    Resolves: rhbz1070814


author: Honggang Li <honli@redhat.com> - 3.3-22_g4abbc60_open.1
changelog:
  - Rebase to latest upstream release.
  - Link against system libuuid library.
  - Spec file cleanup.
  - Related: bz1272022


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.6-1
changelog:
  - Ignore .po and generated files in po/ (dshea)
    Related: rhbz#1040240
  - Mark title strings in the initial-setup hub as translatable (dshea)
    Resolves: rhbz#1040240
  - Reword the EULA spokes' status messages (vpodzime)
    Resolves: rhbz#1039672
  - Cancel formatting of EULA when putting it into the text buffer (vpodzime)
    Resolves: rhbz#1039675


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.9-1
changelog:
  - Try to quit plymouth before running our X server instance
    Resolves: rhbz#1058329
  - Get rid of the empty debuginfo package
    Related: rhbz#1057590


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.12-1
changelog:
  - Set initial-setup translation domain for the hub and EULA spoke (mkolman)
    Resolves: rhbz#1040240


author: Jingdong Lu <jingdong.lu@redhat.com> - 0.3.9.12-1.0.1.el7
changelog:
  - add initial-setup-oracle.patch to change EULA location
    and bugzilla URL to http://linux.oracle.com


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.18-1
changelog:
  - Fix Initial Setup to correctly support the Anaconda built-in Help (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.19-1
changelog:
  - Point to the new Initial Setup wiki page (#1154656) (mkolman)
    Resolves: rhbz#1154656
  - Add syslog logging support (#1153768) (mkolman)
    resolves: rhbz#1153768


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.20-1
changelog:
  - Explicitly require the main package in the GUI sub package (#1078917) (mkolman)
    Related: #1078917


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.21-1
changelog:
  - Move the firstboot(windowmanager) dependency to the GUI package (#999464) (mkolman)
    Related: rhbz#999464


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.23-1
changelog:
  - Redirect the EULA spoke help button to the Initial Setup hub help file (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.24-1
changelog:
  - Make Initial Setup compatible with rebased Anaconda (#1229747) (mkolman)
    Resolves: rhbz#1229747
  - Log the reason if GUI import fails (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.25-2
changelog:
  - Don't show the EULA spoke in reconfig mode if license is already accepted (#1110439) (mkolman)
    Related: rhbz#1110439
  - Read the kickstart from previous IS run, if available (#1110439) (mkolman)
    Related: rhbz#1110439
  - Add support for externally triggered reconfig mode (#1110439) (mkolman)
    Resolves: rhbz#1110439


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.26-1
changelog:
  - Use systemd service status for run detection on the S390 console (#1181209) (mkolman)
    Resolves: rhbz#1181209
  - Bump the required Anaconda version (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.28-1
changelog:
  - Run the TUI service before hvc0.service (#1209731) (mmatsuya)
    Resolves: rhbz#1209731
  - Don't create /etc/sysconfig/initial-setup on s390 (#1181209) (mkolman)
    Related: rhbz#1181209
  - Setup the locale before starting the UI (dshea)
    Resolves: rhbz#1198642


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.30-1
changelog:
  - Only root should be able to read the initial-setup-ks.cfg file (#1264336) (mkolman)
    Resolves: rhbz#1264336


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.31-1
changelog:
  - Makefile improvements (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make Initial Setup startup more robust (#1249598) (mkolman)
    Resolves: rhbz#1249598
  - Move the s390 profile scripts to a subfolder (#1249598) (mkolman)
    Realeted: rhbz#1249598
  - Improve log messages for kickstart parsing error (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make sure full screen is used & window header bar is hidden (#1290321) (mkolman)
    Resolves: rhbz#1290321
  - Use blank title for the Initial Setup window (#1310179) (mkolman)
    Resolves: rhbz#1310179


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.32-1
changelog:
  - Fix reconfiguration service name (mkolman)
    Related: rhbz#1257624
  - Fix installation path for a reconfiguration related script (mkolman)
    Related: rhbz#1257624
  - Use the environs flag when setting the environment (mkolman)
    Related: rhbz#1270354
  - Some typo fixes and logging improvements (mkolman)
    Related: rhbz#1257624
  - Add a systemd service that enables Initial Setup if /.unconfigured exists (#1257624) (mkolman)
    Resolves: rhbz#1257624
  - Initialize Thread Manager as early as possible (#1249598) (mkolman)
    Related: rhbz#1249598
  - Adapt to addon execute() signature change (mkolman)
    Related: rhbz#1288636
  - Suppress an error message about missing initial-setup-graphical.unit (#1249598) (mkolman)
    Related: rhbz#1249598


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.34-1
changelog:
  - Suppress logging to stdout when TUI is started by s390 startup scripts (mkolman)
    Related: rhbz#1366776
  - Fix path to TUI executable in the s390 startup scripts (#1366776) (mkolman)
    Resolves: rhbz#1366776
  - Canonicalize symlinks returned by readlink (mkolman)
    Related: rhbz#1360343


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.35-1
changelog:
  - Change how Initial Setup reconfig mode is started (#1342536) (mkolman)
    Related: rhbz#1342536
  - Add systemd scriptlets for initial-setup-reconfigure.service (#1342536) (mkolman)
    Related: rhbz#1342536


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.39-1
changelog:
  - Run GUI on the s390 if possible (#1378082) (mkolman)
    Resolves: rhbz#1378082
  - Make it possible to set stdout log verbosity level (mkolman)
    Related: rhbz#1378082
  - Make it possible to show window header (mkolman)
    Related: rhbz#1378082


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.11-1
changelog:
  - Revert: provide KVM guest count and limit info message (#1014731)
  - add C implementation of reverted patch


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.12-1
changelog:
  - use iw instead of iwconfig and friends (#915343)
  - don't care about rc.local anymore (#1034156)
  - udev-kvm-check: simplify reading of threshold (#1031568)
  - brandbot: read only first line (#1031490)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.13-1
changelog:
  - delete IPX support
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - set shmmax and shmall defaults to match rhel6 values (#1056547)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.14-1
changelog:
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - service: add condrestart to allowed commands (#1069222)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.18-1
changelog:
  - is_available_wait: properly propage return value from is_available
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - custom naming for VLAN devices
  - ifup-wireless: add support for wowlan
  - vi.po: fix parentheses
  - network-functions: ETHTOOL_DELAY introduction patch
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - use pie and relro by default
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - fedora-readonly: fix prefix detection (#1059749)
  - network: tell nm to wake the slaves
  - bridging: add possibility to set prio and ageing
  - network: add support for team devices
  - inittab: fix path and mention set-default
  - fedora-domainname: DefaultDependencies=no


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.25-1
changelog:
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - brandbot: move to /usr/libexec/initscripts
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - rename_device: allow non-channel nics for s390x machines
  - network-functions: fix check in install_bonding_driver
  - ifup-aliases: don't return with error when arping fails
  - network-functions: fix change_resolv_conf after grep update
  - clarify daemon() usage message
  - ifup: don't call NM for loopback
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.26-1
changelog:
  - import-state: don't run restorecon when it does not exist
  - network-functions: reeplace iwconfig with iw
  - fedora-readonly: use --make-slave with --bind mounts


author: EL Errata <el-errata_ww@oracle.com> - 9.49.30-1.0.1.3
changelog:
  - modify SUBSCRIPTION_MSG
  - autorelabel: turn quota off before relabeling
  - autorelabel: call dracut-initramfs-restore before forced reboot


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.31-1
changelog:
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ifup-aliases: inherit ARPCHECK from parent device
  - rhel-dmesg: don't start in containers
  - ifup-eth: fix typo in error message (#1038776)
  - sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ipcalc: detect invalid mask
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service
  - ifup-post: check resolve.conf also with DNS2
  - ifdown-post: remove resolv.conf only in specific cases
  - spec: ghost /var/log/dmesg
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - autorelabel: turn quota off before relabeling
  - autorelabel: call dracut-initramfs-restore before forced reboot


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.38-1
changelog:
  - ifdown-eth: we need to flush global scope as well
  - killproc/status: add missing '-b <binary>' option
  - specfile: mark 'rwtab' and 'statetab' as config files
  - spec: we need newer lvm
  - rwtab: add /var/lib/systemd/timers
  - ifup-eth: remove quote marks
  - 9.70-sync: Move everything to github
  - 9.70-sync: rwtab updated
  - 9.70-sync: service file updated
  - 9.70-sync: syconfig.txt updated
  - 9.70-sync: systemd/rhel-import-state updated
  - 9.70-sync: sysconfig/network-scripts/* updated - part 2
  - 9.70-sync: sysconfig/network-scripts/* updated - part 1
  - 9.70-sync: rc.d/init.d/network updated
  - 9.70-sync: rc.d/init.d/netconsole updated
  - 9.70-sync: rc.d/init.d/functions updated
  - 9.70-sync: ipv6-6to4.howto example updated
  - 9.70-sync: examples/networking/ifcfg-bridge updated
  - network: load NetworkManager connection via dbus
  - network: check for running NetworkManager via dbus


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.39-1
changelog:
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - rhel-autorelabel: synchronize cached writes before reboot


author: Alon Levy <alevy@redhat.com>
changelog:
  - Update to 0.50.0
  - Drop patch carried for bz#568845 (schemas-merge) per last comment
    in that bug.


author: Jon Ciesla <limburgher@gmail.com> - 0.50.2-1
changelog:
  - Latest stable release.
  - Merge review BZ 225902 fixes:
  - Removed Obsoletes/Provides for xml-i18n-tools.
  - Swapped gettext/gettext-devel Requires, BuildRequires.
  - Added %check section.


author: Andrew Price <anprice@redhat.com> - 0.0-1.20130117git26d4e95
changelog:
  - Further improve the versioning
  - Preserve timestamp on man page
  - Remove BuildRoot, the clean and defattr sections and don't clean buildroot
  - Install to DESTDIR
  - Update Source and add a comment on how the tarball was generated
  - Use _smp_mflags in build
  - Thanks to Eduardo Echeverria for reviewing the package


author: Andrew Price <anprice@redhat.com> - 1.0-4
changelog:
  - Fix a label overflow in plot_io
    Resolves: rhbz#1004820
  - Add bounds checking in find_step
    Resolves: rhbz#1004882
  - Fix processing of trace filenames containing spaces
    Resolves: rhbz#1004865


author: Andrew Price <anprice@redhat.com> - 1.0-6
changelog:
  - Add Requires: librsvg2-tools to enable video generation
  - Merge trace dumping functions into one
  - Check program exit code properly
  - Fix up directory trace processing
    Resolves: rhbz#1004865


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-20
changelog:
  - trustdomain-find with pkey-only fails (#1068611)
  - Invalid credential cache in trust-add (#1069182)
  - ipa-replica-install prints unexpected error (#1069722)
  - Too big font in input fields in details facet in Firefox (#1069720)
  - trust-add for POSIX AD does not fetch trustdomains (#1070925)
  - Misleading trust-add error message in some cases (#1070926)
  - Access is not rejected for disabled domain (#1070924)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-22
changelog:
  - ipa-replica-install never checks for 7389 port (#1075165)
  - Non-terminated string may be passed to LDAP search (#1075091)
  - ipa-sam may fail to translate group SID into GID (#1073829)
  - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-26
changelog:
  - When IdM server trusts multiple AD forests, IPA client returns invalid group
    membership info (#1079498)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28
changelog:
  - ipa-client-automount fails with incompatibility error when installed against
    older IPA server (#1083108)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28.1
changelog:
  - Server installation fails using external signed certificates with
    "IndexError: list index out of range" (#1130031)
  - Add rhino to BuildRequires to fix Web UI build error


author: Jan Cholasta <jcholast@redhat.com> - 3.3.3-28.2
changelog:
  - Implement a fallback for situation where no closest server available during
    trust setup (#1143779)
  - trust-add should not be run with DCs without PDC role (#1144030)
  - Improve handling of forest trust domains when establishing a cross-forest
    trust (#1144031)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-11
changelog:
  - Throw zonemgr error message before installation proceeds (#1163849)
  - Winsync: Setup is broken due to incorrect import of certificate (#1169867)
  - Enable last token deletion when password auth type is configured (#919228)
  - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641)
  - add --hosts and --hostgroup options to allow/retrieve keytab methods
    (#1007367)
  - Extend host-show to add the view attribute in set of default attributes
    (#1168916)
  - Prefer TCP connections to UDP in krb5 clients (#919228)
  - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214)
  - webui: increase notification duration (#1171089)
  - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931)
  - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert
    (#1170003)
  - Improve validation of --instance and --backend options in ipa-restore
    (#951581)
  - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964)
  - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-12
changelog:
  - RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible
    (#1169591)
  - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression)
    (#1172578)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-13
changelog:
  - Expand the token auth/sync windows (#919228)
  - Access is not rejected for disabled domain (#1172598)
  - krb5kdc crash in ldap_pvt_search (#1170695)
  - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-14
changelog:
  - IPA Replicate creation fails with error "Update failed! Status: [10 Total
    update abortedLDAP error: Referral]" (#1166265)
  - running ipa-server-install --setup-dns results in a crash (#1072502)
  - DNS zones are not migrated into forward zones if 4.0+ replica is added
    (#1175384)
  - gid is overridden by uid in default trust view (#1168904)
  - When migrating warn user if compat is enabled (#1177133)
  - Clean up debug log for trust-add (#1168376)
  - No error message thrown on restore(full kind) on replica from full backup
    taken on master (#1175287)
  - ipa-restore proceed even IPA not configured (#1175326)
  - Data replication not working as expected after data restore from full backup
    (#1175277)
  - IPA externally signed CA cert expiration warning missing from log (#1178128)
  - ipa-upgradeconfig fails in CA-less installs (#1181767)
  - IPA certs fail to autorenew simultaneouly (#1173207)
  - More validation required on ipa-restore's options (#1176034)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-16
changelog:
  - PassSync does not sync passwords due to missing ACIs (#1181093)
  - ipa-replica-manage list does not list synced domain (#1181010)
  - Do not assume certmonger is running in httpinstance (#1181767)
  - ipa-replica-manage disconnect fails without password (#1183279)
  - Put LDIF files to their original location in ipa-restore (#1175277)
  - DUA profile not available anonymously (#1184149)
  - IPA replica missing data after master upgraded (#1176995)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-17
changelog:
  - Wrong directories created on full restore (#1186398)
  - ipa-restore crashes if replica is unreachable (#1186396)
  - idoverrideuser-add option --sshpubkey does not work (#1185410)


author: Martin Kosek <mkosek@redhat.com> 4.1.0-18
changelog:
  - Fix ipa-pwd-extop global configuration caching (#1187342)
  - group-detach does not add correct objectclasses (#1187540)


author: Curt Carter <curt.carter@oracle.com> 4.1.0-18.0.1
changelog:
  - Replace login-screen-logo.png [20362818]
  - Drop subscription-manager requires for OL7
  - Drop redhat-access-plugin-ipa requires for OL7
  - Blank out header-logo.png product-name.png


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.1
changelog:
  - "an internal error has occurred" during ipa host-del --updatedns (#1198431)
  - Renamed patch 1013 to 0114, as it was merged upstream
  - Fax number not displayed for user-show when kinit'ed as normal user.
    (#1198430)
  - Replication agreement with replica not disabled when ipa-restore done without
    IPA installed (#1199060)
  - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.1.0-18.2
changelog:
  - IPA extdom plugin fails when encountering large groups (#1193759)
  - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
    (#1202997)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.3
changelog:
  - [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
    (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.4
changelog:
  - krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp 00007fffd68b2340 error 6 in
    libc-2.17.so (#1245097)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-7
changelog:
  - Resolves: #1256840 [webui] majority of required fields is no longer marked as
    required
    - fix missing information in object metadata
  - Resolves: #1256842 [webui] no option to choose trust type when creating a
    trust
    - webui: add option to establish bidirectional trust
  - Resolves: #1256853 Clear text passwords in KRA install log
    - Removed clear text passwords from KRA install log.
  - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be
    discouraged
    - vault: change default vault type to symmetric
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: prevent rename (modrdn)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-8
changelog:
  - Resolves: #1254689 Storing big file as a secret in vault raises traceback
    - vault: Limit size of data stored in vault
  - Resolves: #1255880 ipactl status should distinguish between different
    pki-tomcat services
    - ipactl: Do not start/stop/restart single service multiple times


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-9
changelog:
  - Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not
    tracked
    - cert renewal: Include KRA users in Dogtag LDAP update
    - cert renewal: Automatically update KRA agent PEM file
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: remove 'rename' option
  - Resolves: #1257968 kinit stop working after ipa-restore
    - Backup: back up the hosts file
  - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings
    - DNSSEC: remove "DNSSEC is experimental" warnings
  - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts
    - Installer: do not modify /etc/hosts before user agreement
  - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1
    zone
    - DNSSEC: backup and restore opendnssec zone list file
    - DNSSEC: remove ccache and keytab of ipa-ods-exporter
    - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart
    - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction
    - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC
      key master
    - DNSSEC: Fix key metadata export
    - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.
  - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install
    - Using LDAPI to setup CA and KRA agents.
  - Resolves: #1259848 server closes connection and refuses commands after
    deleting user that is still logged in
    - ldap: Make ldap2 connection management thread-safe again
  - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute
    'ra_certprofile' while ipa-ca-install
    - load RA backend plugins during standalone CA install on CA-less IPA master


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-10
changelog:
  - Resolves: #1260663 crash of ipa-dnskeysync-replica component during
    ipa-restore
    - IPA Restore: allows to specify files that should be removed
  - Resolves: #1261806 Installing ipa-server package breaks httpd
    - Handle timeout error in ipa-httpd-kdcproxy
  - Resolves: #1262322 Failed to backup CS.cfg message in upgrade.
    - Server Upgrade: backup CS.cfg when dogtag is turned off


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-11
changelog:
  - Resolves: #1258965 ipa vault: set owner of vault container
    - baseldap: make subtree deletion optional in LDAPDelete
    - vault: add vault container commands
    - vault: set owner to current user on container creation
    - vault: update access control
    - vault: add permissions and administrator privilege
    - install: support KRA update
  - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses
    - config: allow user/host attributes with tagging options
  - Resolves: #1262315 Unable to establish winsync replication
    - winsync: Add inetUser objectclass to the passsync sysaccount


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-12
changelog:
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
    - winsync-migrate: Convert entity names to posix friendly strings
    - winsync-migrate: Properly handle collisions in the names of external groups
  - Resolves: #1261074 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Resolves: #1263337 IPA Restore failed with installed KRA
    - ipa-backup: Add mechanism to store empty directory structure
  - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate
    and private key in world readable file [rhel-7.2]
    - install: fix KRA agent PEM file permissions
  - Resolves: #1265086 Mark IdM API Browser as experimental
    - WebUI: add API browser is experimental warning
  - Resolves: #1265277 Fix kdcproxy user creation
    - install: create kdcproxy user during server install
    - platform: add option to create home directory when adding user
    - install: fix kdcproxy user home directory
  - Resolves: #1265559 GSS failure after ipa-restore
    - destroy httpd ccache after stopping the service


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-13
changelog:
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
    - Fix an integer underflow bug in libotp
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - install: always export KRA agent PEM file
    - vault: select a server with KRA for vault operations
  - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files
    - do not overwrite files with local users/groups when restoring authconfig
  - Renamed patch 1011 to 0138, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-14
changelog:
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - upgrade: make sure ldap2 is connected in export_kra_agent_pem
  - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by
    external CA
    - schema: do not derive ipaVaultPublicKey from ipaPublicKey


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15
changelog:
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - vault: fix private service vault creation


author: EL Errata <el-errata_ww@oracle.com> - 4.2.0-15.0.1
changelog:
  - Drop redhat-access-plugin-ipa requires for OL7
    Blank out header-logo.png product-name.png
    Replace login-screen-logo.png [20362818]


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.7
changelog:
  - Resolves: #1304333 In IPA-AD trust environment some secondary IPA based Posix
    groups are missing
    - ipa-kdb: map_groups() consider all results


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.8
changelog:
  - Resolves: #1303052 install fails when locale is "fr_FR.UTF-8"
    - Do not decode HTTP reason phrase from Dogtag
  - Resolves: #1303059 --setup-dns and other options is forgotten for using an
    external PKI
    - installer: Propagate option values from components instead of copying them.
    - installer: Fix logic of reading option values from cache.
  - Resolves: #1309362 User should be notified for wrong password in password
    reset page
    - Fixed login error message box in LoginScreen page
  - Resolves: #1309382 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - ipa-ca-install: print more specific errors when CA is already installed
    - cert renewal: import all external CA certs on IPA CA cert renewal
    - CA install: explicitly set dogtag_version to 10
    - fix standalone installation of externally signed CA on IPA master
    - replica install: validate DS and HTTP server certificates


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.9
changelog:
  - Resolves: #1311468 shared certificateProfiles container is missing on a
    freshly installed RHEL7.2 system
    - upgrade: unconditional import of certificate profiles into LDAP
  - Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - upgrade: fix config of sidgen and extdom plugins
    - trusts: use ipaNTTrustPartner attribute to detect trust entries
    - Warn user if trust is broken
    - fix upgrade: wait for proper DS socket after DS restart
  - Resolves: #1311502 [RFE] compat tree: show AD members of IPA groups
    - slapi-nis: update configuration to allow external members of IPA groups


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.10
changelog:
  - Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - Insure the admin_conn is disconnected on stop
    - Fix connections to DS during installation
  - Renamed patch 1011 to 0196, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.11
changelog:
  - Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - Fix broken trust warnings


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.12
changelog:
  - Resolves: #1309382 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - replica install: improvements in the handling of CA-related IPA config
      entries


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.13
changelog:
  - Resolves: #1324060 Installers fail when there are multiple versions of the
    same certificate
    - certdb: never use the -r option of certutil


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.15
changelog:
  - Related: #1327197 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.16
changelog:
  - Resolves: #1337820 URI details missing and OCSP-URI details are incorrectly
    displayed when certificate generated using IPA on RHEL 7.2up2.
    - Prevent replica install from overwriting cert profiles
    - Detect and repair incorrect caIPAserviceCert config


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.17
changelog:
  - Resolves: #1339304 CA installed on replica is always marked as renewal master
    - replica install: do not set CA renewal master flag


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.18
changelog:
  - Resolves: #1350305 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?
    - mod_auth_gssapi: enable unique credential caches names
  - Related: #1347175 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.19
changelog:
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.1
changelog:
  - Resolves: #1283882 IPA certificate auto renewal fail with "Invalid
    Credential"
    - cert renewal: make renewal of ipaCert atomic
  - Resolves: #1283883 ipa upgrade causes vault internal error
    - install: export KRA agent PEM file in ipa-kra-install
  - Resolves: #1283884 ipa-kra-install: fails to apply updates
    - suppress errors arising from adding existing LDAP entries during KRA
      install
  - Resolves: #1283890 installer options are not validated at the beginning of
    installation
    - install: fix command line option validation
  - Resolves: #1283915 Caching of ipaconfig does not work in framework
    - fix caching in get_ipa_config
  - Resolves: #1284025 sshd_config change on ipa-client-install can prevent sshd
    from starting up
    - client install: do not corrupt OpenSSH config with Match sections
  - Resolves: #1284052 IPA DNS Zone/DNS Forward Zone details missing after
    upgrade from RHEL 7.0 to RHEL 7.2
    - upgrade: fix migration of old dns forward zones
  - Resolves: #1284803 Default CA ACL rule is not created during
    ipa-replica-install
    - TLS and Dogtag HTTPS request logging improvements
    - Avoid race condition caused by profile delete and recreate
    - Do not erroneously reinit NSS in Dogtag interface
    - Add profiles and default CA ACL on migration
  - Resolves: #1284811 ipa-cacert-manage renew fails on nonexistent ldap
    connection
    - ipa-cacert-renew: Fix connection to ldap.
  - Resolves: #1284813 ipa-otptoken-import fails on nonexistent ldap connection
    - ipa-otptoken-import: Fix connection to ldap.


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.2
changelog:
  - Resolves: #1283890 installer options are not validated at the beginning of
    installation
    - Fix incorrectly rebased patch 0144
  - Resolves: #1284803 Default CA ACL rule is not created during
    ipa-replica-install
    - disconnect ldap2 backend after adding default CA ACL profiles
    - do not disconnect when using existing connection to check default CA ACLs


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.3
changelog:
  - Resolves: #1284052 IPA DNS Zone/DNS Forward Zone details missing after
    upgrade from RHEL 7.0 to RHEL 7.2
    - Fix upgrade of forwardzones when zone is in realmdomains


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.4
changelog:
  - Resolves: #1298097 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl
  - Resolves: #1298098 ipa-nis-manage does not update ldap with all NIS maps
    - Upgrade: Fix upgrade of NIS Server configuration
  - Resolves: #1298099 umask setting causes named-pkcs11 issue with directory
    permissions on /var/lib/ipa/dnssec
    - DNS: fix file permissions
    - Explicitly call chmod on newly created directories
    - Fix: replace mkdir with chmod
  - Resolves: #1298100 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison
    - Fix version comparison
    - use FFI call to rpmvercmp function for version comparison
  - Resolves: #1298101 Sysrestore did not restore state if a key is specified in
    mixed case
    - Allow to used mixed case for sysrestore
  - Resolves: #1298102 DNSSEC key purging is not handled properly
    - DNSSEC: Improve error reporting from ipa-ods-exporter
    - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in
      LDAP
    - DNSSEC: Make sure that current key state in LDAP matches key state in BIND
    - DNSSEC: remove obsolete TODO note
    - DNSSEC: add debug mode to ldapkeydb.py
    - DNSSEC: logging improvements in ipa-ods-exporter
    - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP
    - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP
    - DNSSEC: ipa-ods-exporter: add ldap-cleanup command
    - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal
    - DNSSEC: Log debug messages at log level DEBUG
  - Resolves: #1298103 ipa-server-upgrade fails if certmonger is not running
    - prevent crash of CA-less server upgrade due to absent certmonger
  - Resolves: #1298104 The ipa -e skip_version_check=1 still issues
    incompatibility error when called against RHEL 6 server
    - ipalib: assume version 2.0 when skip_version_check is enabled


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.5
changelog:
  - Resolves: #1298097 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15.6
changelog:
  - Resolves: #1298103 ipa-server-upgrade fails if certmonger is not running
    - always start certmonger during IPA server configuration upgrade


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-4
changelog:
  - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos
    aliases)
    - harden the check for trust namespace overlap in new principals
  - Resolves: #1351142 CLI is not using session cookies for communication with
    IPA API
    - Fix session cookies
  - Resolves: #1353888 Fix the help for ipa otp and other topics
    - help: Add dnsserver commands to help topic 'dns'
  - Resolves: #1354406 host-del updatedns options complains about missing ptr
    record for host
    - Host-del: fix behavior of --updatedns and PTR records
  - Resolves: #1355718 ipa-replica-manage man page example output differs actual
    command output
    - Minor fix in ipa-replica-manage MAN page
  - Resolves: #1358229 Traceback message should be fixed, seen while editing
    winsync migrated user information in Default trust view.
    - baseldap: Fix MidairCollision instantiation during entry modification
  - Resolves: #1358849 CA replica install logs to wrong log file
    - unite log file name of ipa-ca-install
  - Resolves: #1359130 ipa-server-install command fails to install IPA server.
    - DNS Locations: fix update-system-records unpacking error
  - Resolves: #1359237 AVC on dirsrv config caused by IPA installer
    - Use copy when replacing files to keep SELinux context
  - Resolves: #1359692 ipa-client-install join fail with traceback against
    RHEL-6.8 ipa-server
    - compat: fix ping call
  - Resolves: #1359738 ipa-replica-install --domain=<IPA primary domain> option
    does not work
    - replica-install: Fix --domain
  - Resolves: #1360778 Vault commands are available in CLI even when the server
    does not support them
    - Revert "Enable vault-* commands on client"
    - client: fix hiding of commands which lack server support
  - Related: #1281704 Rebase to softhsm 2.1.0
    - Remove the workaround for softhsm bug #1293340
  - Related: #1298288 [RFE] Improve performance in large environments.
    - Create indexes for krbCanonicalName attribute


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-5
changelog:
  - Resolves: #1353829 traceback message seen in ipaserver-uninstall.log file.
    - Do not initialize API in ipa-client-automount uninstall
  - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin
    client changes
    - idrange: fix unassigned global variable
  - Resolves: #1360792 Migrating users doesn't update krbCanonicalName
    - re-set canonical principal name on migrated users
  - Resolves: #1362012 ipa hbactest produces error about cannot concatenate 'str'
    and 'bool' objects
    - Fix ipa hbactest output
  - Resolves: #1362260 ipa vault-mod no longer allows defining salt
    - vault: add missing salt option to vault_mod
  - Resolves: #1362312 ipa vault-retrieve internal error when using the wrong
    public key
    - vault: Catch correct exception in decrypt
  - Resolves: #1362537 ipa-server-install fails to create symlink from
    /etc/ipa/kdcproxy/ to /etc/httpd/conf.d/
    - Correct path to HTTPD's systemd service directory
  - Resolves: #1363756 Increase length of passwords generated by installer
    - Increase default length of auto generated passwords


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-6
changelog:
  - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6
    - Revert "spec: add conflict with bind-chroot to freeipa-server-dns"
  - Resolves: #1341249 Subsequent external CA installation fails
    - install: fix external CA cert validation
  - Resolves: #1353831 ipa-server-install fails in container because of
    hostnamectl set-hostname
    - server-install: Fix --hostname option to always override api.env values
    - install: Call hostnamectl set-hostname only if --hostname option is used
  - Resolves: #1356091 ipa-cacert-manage --help and man differ
    - Improvements for the ipa-cacert-manage man and help
  - Resolves: #1360631 ipa-backup is not keeping the
    /etc/tmpfiles.d/dirsrv-<instance>.conf
    - ipa-backup: backup /etc/tmpfiles.d/dirsrv-<instance>.conf
  - Resolves: #1361047 ipa-replica-install --help usage line suggests the replica
    file is needed
    - Update ipa-replica-install documentation
  - Resolves: #1361545 ipa-client-install starts rhel-domainname.service but does
    not rpm-require it
    - client: RPM require initscripts to get *-domainname.service
  - Resolves: #1364197 caacl: error when instantiating rules with service
    principals
    - caacl: fix regression in rule instantiation
  - Resolves: #1364310 ipa otptoken-add bytes object has no attribute confirm
    - parameters: move the `confirm` kwarg to Param
  - Resolves: #1364464 Topology graph: ca and domain adders shows question marks
    instead of plus icon
    - Fix unicode characters in ca and domain adders
  - Resolves: #1365083 Incomplete output returned for command ipa vault-add
    - client: add missing output params to client-side commands
  - Resolves: #1365526 build fails during "make check"
    - ipa-kdb: Fix unit test after packaging changes in krb5


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-7
changelog:
  - Resolves: #1361119 UPN-based search for AD users does not match an entry in
    slapi-nis map cache
    - support multiple uid values in schema compatibility tree


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-8
changelog:
  - Resolves: #1298288 [RFE] Improve performance in large environments.
    - cert: speed up cert-find
  - Resolves: #1317379 [EXPERIMENTAL][RFE] Web UI: allow Smart Card
    authentication
    - service: add flag to allow S4U2Self
    - Add 'trusted to auth as user' checkbox
    - Added new authentication method
  - Resolves: #1353881 ipa-replica-install suggests about
    non-existent --force-ntpd option
    - Don't show --force-ntpd option in replica install
  - Resolves: #1354441 DNS forwarder check is too strict: unable to add
    sub-domain to already-broken domain
    - DNS: allow to add forward zone to already broken sub-domain
  - Resolves: #1356146 performance regression in CLI help
    - schema: Speed up schema cache
    - frontend: Change doc, summary, topic and NO_CLI to class properties
    - schema: Introduce schema cache format
    - schema: Generate bits for help load them on request
    - help: Do not create instances to get information about commands and topics
    - schema cache: Do not reset ServerInfo dirty flag
    - schema cache: Do not read fingerprint and format from cache
    - Access data for help separately
    - frontent: Add summary class property to CommandOverride
    - schema cache: Read server info only once
    - schema cache: Store API schema cache in memory
    - client: Do not create instance just to check isinstance
    - schema cache: Read schema instead of rewriting it when SchemaUpToDate
  - Resolves: #1360769 ipa-server-certinstall couldnt unlock private key file
    - server install: do not prompt for cert file PIN repeatedly
  - Resolves: #1364113 ipa-password: ipa: ERROR: RuntimeError: Unable to create
    cache directory: [Errno 13] Permission denied: '/home/test_user'
    - schema: Speed up schema cache
  - Resolves: #1366604 `cert-find` crashes on invalid certificate data
    - cert: do not crash on invalid data in cert-find
  - Resolves: #1366612 Middle replica uninstallation in line topology works
    without '--ignore-topology-disconnect'
    - Fail on topology disconnect/last role removal
  - Resolves: #1366626 caacl-add-service: incorrect error message when service
    does not exists
    - Fix ipa-caalc-add-service error message
  - Resolves: #1367022 The ipa-server-upgrade command failed when named-pkcs11
    does not happen to run during dnf upgrade
    - DNS server upgrade: do not fail when DNS server did not respond
  - Resolves: #1367759 [RFE] [webui] warn admin if there is only one IPA server
    with CA
    - Add warning about only one existing CA server
    - Set servers list as default facet in topology facet group
  - Resolves: #1367773 thin client ignores locale change
    - schema check: Check current client language against cached one


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-9
changelog:
  - Resolves: #1081561 CA not start during ipa server install in pure IPv6 env
    - Fix ipa-server-install in pure IPv6 environment
  - Resolves: #1318169 Tree-root domains in a trusted AD forest aren't marked as
    reachable via the forest root
    - trust: make sure ID range is created for the child domain even if it exists
    - ipa-kdb: simplify trusted domain parent search
  - Resolves: #1335567 Update Warning in IdM Web UI API browser
    - WebUI: add API browser is tech preview warning
  - Resolves: #1348560 Mulitple domain Active Directory Trust conflict
    - ipaserver/dcerpc: reformat to make the code closer to pep8
    - trust: automatically resolve DNS trust conflicts for triangle trusts
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)
  - Resolves: #1353936 custodia.conf and server.keys file is world-readable.
    - Remove Custodia server keys from LDAP
    - Secure permissions of Custodia server.keys
  - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is
    converted from CA-less to CA-full
    - custodia: include known CA certs in the PKCS#12 file for Dogtag
    - custodia: force reconnect before retrieving CA certs from LDAP
  - Resolves: #1362333 ipa vault container owner cannot add vault
    - Fix: container owner should be able to add vault
  - Resolves: #1365546 External trust with root domain is transitive
    - trust: make sure external trust topology is correctly rendered
  - Resolves: #1365572 IPA server broken after upgrade
    - Require pki-core-10.3.3-7
  - Resolves: #1367864 Server assumes latest version of command instead of
    version 1 for old / 3rd party clients
    - rpcserver: assume version 1 for unversioned command calls
    - rpcserver: fix crash in XML-RPC system commands
  - Resolves: #1367773 thin client ignores locale change
    - schema cache: Fallback to 'en_us' when locale is not available
  - Resolves: #1368754 ipa server uninstall fails with Python "Global Name error"
    - Fail on topology disconnect/last role removal
  - Resolves: #1368981 ipa otptoken-add --type=hotp --key creates wrong OTP
    - otptoken, permission: Convert custom type parameters on server
  - Resolves: #1369414 ipa server-del fails with Python stack trace
    - Handled empty hostname in server-del command
  - Resolves: #1369761 ipa-server must depend on a version of httpd that support
    mod_proxy with UDS
    - Require httpd 2.4.6-31 with mod_proxy Unix socket support
  - Resolves: #1370512 Received ACIError instead of DuplicatedError in
    stageuser_tests
    - Raise DuplicatedEnrty error when user exists in delete_container
  - Resolves: #1371479 cert-find --all does not show information about revocation
    - cert: add missing param values to cert-find output
  - Renamed patch 1011 to 0100, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-10
changelog:
  - Resolves: #1355753 adding two way non transitive(external) trust displays
    internal error on the console
    - Always fetch forest info from root DCs when establishing two-way trust
    - factor out `populate_remote_domain` method into module-level function
    - Always fetch forest info from root DCs when establishing one-way trust
  - Resolves: #1356101 Lightweight sub-CA certs are not tracked by certmonger
    after `ipa-replica-install`
    - Track lightweight CAs on replica installation
  - Resolves: #1357488 ipa command stuck forever on higher versioned client with
    lower versioned server
    - compat: Save server's API version in for pre-schema servers
    - compat: Fix ping command call
    - schema cache: Store and check info for pre-schema servers
  - Resolves: #1363905 man page for ipa-replica-manage has a typo in -c flag
    - Fix man page ipa-replica-manage: remove duplicate -c option
      from --no-lookup
  - Resolves: #1367865 webui: cert_revoke should use --cacn to set correct CA
    when revoking certificate
    - cert: include CA name in cert command output
    - WebUI add support for sub-CAs while revoking certificates
  - Resolves: #1368424 Unable to view certificates issued by Sub CA in Web UI
    - Add support for additional options taken from table facet
    - WebUI: Fix showing certificates issued by sub-CA
  - Resolves: #1368557 dnsrecord-add does not prompt for missing record parts
    internactively
    - dns: normalize record type read interactively in dnsrecord_add
    - dns: prompt for missing record parts in CLI
    - dns: fix crash in interactive mode against old servers
  - Resolves: #1370519 Certificate revocation in service-del and host-del isn't
    aware of Sub CAs
    - cert: fix cert-find --certificate when the cert is not in LDAP
    - Make host/service cert revocation aware of lightweight CAs
  - Resolves: #1371901 Use OAEP padding with custodia
    - Use RSA-OAEP instead of RSA PKCS#1 v1.5
  - Resolves: #1371915 When establishing external two-way trust, forest root
    Administrator account is used to fetch domain info
    - do not use trusted forest name to construct domain admin principal
  - Resolves: #1372597 Incorrect CA ACL evaluation of SAN DNS names in
    certificate request
    - Fix CA ACL Check on SubjectAltNames
  - Resolves: #1373272 CLI always sends default command version
    - cli: use full name when executing a command
  - Resolves: #1373359 ipa-certupdate fails with "CA is not configured"
    - Fix ipa-certupdate for CA-less installation
  - Resolves: #1373540 client-install with IPv6 address fails on link-local
    address (always)
    - Fix parse errors with link-local addresses


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-11
changelog:
  - Resolves: #1373359 ipa-certupdate fails with "CA is not configured"
    - Fix regression introduced in ipa-certupdate


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-12
changelog:
  - Resolves: #1373910 IPA server upgrade fails with DNS timed out errors.
  - Resolves: #1375269 ipa trust-fetch-domains throws internal error


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-13
changelog:
  - Resolves: #1318616 CA fails to start after doing ipa-ca-install --external-ca
    - Keep NSS trust flags of existing certificates
  - Resolves: #1360813 ipa-server-certinstall does not update all certificate
    stores and doesn't set proper trust permissions
    - Add cert checks in ipa-server-certinstall
  - Resolves: #1371479 cert-find --all does not show information about revocation
    - cert: add revocation reason back to cert-find output
  - Resolves: #1375133 WinSync users who have First.Last casing creates users who
    can have their password set
    - ipa passwd: use correct normalizer for user principals
  - Resolves: #1377858 Users with 2FA tokens are not able to login to IPA servers
    - Properly handle LDAP socket closures in ipa-otpd
  - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1
    - Make httpd publish its CA certificate on DL1


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14
changelog:
  - Resolves: #1378353 Replica install fails with old IPA master sometimes during
    replication process
    - spec file: bump minimal required version of 389-ds-base
  - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1
    - Fix missing file that fails DL1 replica installation
  - Resolves: #1387782 WebUI: Services are not displayed correctly after upgrade
    - WebUI: services without canonical name are shown correctly
  - Resolves: #1389709 Traceback seen in error_log when trustdomain-del is run
    - trustdomain-del: fix the way how subdomain is searched


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.1
changelog:
  - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
    by abusing password policy
    - password policy: Add explicit default password policy for hosts and
      services
  - Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in
    certprofile-mod
    - certprofile-mod: correctly authorise config update


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.1.1
changelog:
  - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
    by abusing password policy
    - ipa-kdb: search for password policies globally
  - Renamed patches 1011 and 1012 to 0146 and 0145, as they were merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.2
changelog:
  - Resolves: #1401953 ipa-ca-install on promoted replica hangs on creating a
    temporary CA admin
    - replication: ensure bind DN group check interval is set on replica config
    - add missing attribute to ipaca replica during CA topology update
  - Resolves: #1404169 IPA upgrade of replica without DNS fails during restart of
    named-pkcs11
    - bindinstance: use data in named.conf to determine configuration status
  - Resolves: #1404171 Creation of replica for disconnected environment is
    failing with CA issuance errors; Need good steps.
    - gracefully handle setting replica bind dn group on old masters


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.3
changelog:
  - Resolves: #1404338 Check IdM Topology for broken record caused by replication
    conflict before upgrading it
    - Check for conflict entries before raising domain level


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.4
changelog:
  - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
    by abusing password policy
    - ipa-kdb: search for password policies globally
  - Renamed patches 1011 and 1012 to 0151 and 0150, as they were merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.5
changelog:
  - Resolves: #1410760 ipa-ca-install fails on replica when IPA Master is
    installed without CA
    - Set up DS TLS on replica in CA-less topology
  - Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for
    ca-del, ca-disable and ca-enable commands
    - ca: correctly authorise ca-del, ca-enable and ca-disable
  - Resolves: #1416481 IPA replica install fails with dirsrv errors.
    - Do not configure PKI ajp redirection to use "::1"


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.6
changelog:
  - Resolves: #1416488 replication race condition prevents IPA to install
    - wait_for_entry: use only DN as parameter
    - Wait until HTTPS principal entry is replicated to replica
    - Use proper logging for error messages


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.7
changelog:
  - Resolves: #1429872 ipa-replica-install fails promotecustodia.create_replica
    with cert errors (untrusted)
    - added ssl verification using IPA trust anchor
  - Resolves: #1430674 batch param compatibility is incorrect
    - compat: fix `Any` params in `batch` and `dnsrecord`
  - Renamed patches 1011 and 1012 to 0159 and 0157, as they were merged upstream


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-12.el7
changelog:
  - Resolves: #1447284 Upgrade from ipa-4.1 fails when enabling KDC proxy
    - python2-ipalib: add missing python dependency
    - installer service: fix typo in service entry
    - upgrade: add missing suffix to http instance
  - Resolves: #1444791 Update man page of ipa-kra-install 
    - ipa-kra-install manpage: document domain-level 1
  - Resolves: #1441493 ipa cert-show raises stack traces when
    --certificate-out=/tmp 
    - cert-show: writable files does not mean dirs 
  - Resolves: #1441192 Add the name of URL parameter which will be check for
    username during cert login
    - Bump version of ipa.conf file
  - Resolves: #1378797 Web UI must check OCSP and CRL during smartcard login
    - Turn on NSSOCSP check in mod_nss conf
  - Resolves: #1322963 Errors from AD when trying to sign ipa.csr, conflicting
    template on
    - renew agent: respect CA renewal master setting
    - server upgrade: always fix certmonger tracking request
    - cainstance: use correct profile for lightweight CA certificates
    - renew agent: allow reusing existing certs
    - renew agent: always export CSR on IPA CA certificate renewal
    - renew agent: get rid of virtual profiles
    - ipa-cacert-manage: add --external-ca-type
  - Resolves: #1441593 error adding authenticator indicators to host 
    - Fixing adding authenticator indicators to host
  - Resolves: #1449525 Set directory ownership in spec file 
    - Added plugins directory to ipaclient subpackages
    - ipaclient: fix missing RPM ownership
  - Resolves: #1451279 otptoken-add-yubikey KeyError: 'ipatokenotpdigits'
    - otptoken-add-yubikey: When --digits not provided use default value


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-13.el7
changelog:
  - Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
    error observed during ipa upgrade with latest package. 
    - ipa-server-install: fix uninstall
  - Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
    replica 
    - ca install: merge duplicated code for DM password
    - installutils: add DM password validator
    - ca, kra install: validate DM password


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-14.el7
changelog:
  - Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
    handle PKINIT certificates/anchors
    - certdb: add named trust flag constants
    - certdb, certs: make trust flags argument mandatory
    - certdb: use custom object for trust flags
    - install: trust IPA CA for PKINIT
    - client install: fix client PKINIT configuration
    - install: introduce generic Kerberos Augeas lens
    - server install: fix KDC PKINIT configuration
    - ipapython.ipautil.run: Add option to set umask before executing command
    - certs: do not export keys world-readable in install_key_from_p12
    - certs: do not export CA certs in install_pem_from_p12
    - server install: fix KDC certificate validation in CA-less
    - replica install: respect --pkinit-cert-file
    - cacert manage: support PKINIT
    - server certinstall: support PKINIT
  - Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
    option
    - certs: do not export CA certs in install_pem_from_p12
    - server install: fix KDC certificate validation in CA-less
  - Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
    decommissioned
    - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
  - Resolves: #1451712 KRA installation fails on server that was originally
    installed as CA-less
    - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
  - Resolves: #1441499 ipa cert-show does not raise error if no file name
    specified
    - ca/cert-show: check certificate_out in options
  - Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
    - Remove pkinit-anonymous command
  - Resolves: #1449523 Provide an API command to retrieve PKINIT status
    in the FreeIPA topology
    - Allow for multivalued server attributes
    - Refactor the role/attribute member reporting code
    - Add an attribute reporting client PKINIT-capable servers
    - Add the list of PKINIT servers as a virtual attribute to global config
    - Add `pkinit-status` command
    - test_serverroles: Get rid of MockLDAP and use ldap2 instead
  - Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
    - Fix rare race condition with missing ccache file
  - Resolves: #1455045 Simple service uninstallers must be able to handle
    missing service files gracefully
    - only stop/disable simple service if it is installed
  - Resolves: #1455541 after upgrade login from web ui breaks
    - krb5: make sure KDC certificate is readable
  - Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
    command "ipa cert-request --add" after upgrade
    - Change python-cryptography to python2-cryptography


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-15.el7
changelog:
  - Resolves: #1442233 IPA client commands fail when pointing to replica 
    - httpinstance: wait until the service entry is replicated
  - Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
    not indexed
    - Fix index definition for ipaAnchorUUID
  - Resolves: #1438016 gssapi errors after IPA server upgrade
    - Avoid possible endless recursion in RPC call
    - rpc: preparations for recursion fix
    - rpc: avoid possible recursion in create_connection
  - Resolves: #1446087 services entries missing krbCanonicalName attribute.
    - Changing cert-find to do not use only primary key to search in LDAP.
  - Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
    - ipa-kdb: reload certificate mapping rules periodically
  - Resolves: #1455541 after upgrade login from web ui breaks
    - kdc.key should not be visible to all 
  - Resolves: #1435606 Add pkinit_indicator option to KDC configuration
    - ipa-kdb: add pkinit authentication indicator in case of a successful
      certauth
  - Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
    issuance when ipa-ca records are not resolvable
    - Turn off OCSP check
  - Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
    server_del - TypeError: 'NoneType' object is not iterable
    - fix incorrect suffix handling in topology checks


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-16.el7
changelog:
  - Resolves: #1377973 ipa-server-install fails when the provided or resolved
    IP address is not found on local interfaces
    - Only warn when specified server IP addresses don't match intf
  - Resolves: #1438016 gssapi errors after IPA server upgrade
    - Bump version of python-gssapi
  - Resolves: #1457942 certauth: use canonical principal for lookups
    - ipa-kdb: use canonical principal in certauth plugin
  - Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
    breaking older clients
    - Add code to be able to set default kinit lifetime
    - Revert setting sessionMaxAge for old clients


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-17.el7
changelog:
  - Resolve: #1455946 Provide a tooling automating the configuration 
    of Smart Card authentication on a FreeIPA master
    - server certinstall: update KDC master entry
    - pkinit manage: introduce ipa-pkinit-manage
    - server upgrade: do not enable PKINIT by default
    - Extend the advice printing code by some useful abstractions
    - Prepare advise plugin for smart card auth configuration
  - Resolve: #1461053 allow to modify list of UPNs of a trusted forest
    - trust-mod: allow modifying list of UPNs of a trusted forest
    - WebUI: add support for changing trust UPN suffixes


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-18.el7
changelog:
  - Resolves: #1449189 ipa-kra-install timeouts on replica
    - kra: promote: Get ticket before calling custodia


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-19.el7
changelog:
  - Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
    internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
    - ipa-sam: replace encode_nt_key() with E_md4hash() 
    - ipa_pwd_extop: do not generate NT hashes in FIPS mode
  - Resolves: #1377973 ipa-server-install fails when the provided or resolved
    IP address is not found on local interfaces 
    - Fix local IP address validation 
    - ipa-dns-install: remove check for local ip address
    - refactor CheckedIPAddress class
    - CheckedIPAddress: remove match_local param
    - Remove ip_netmask from option parser
    - replica install: add missing check for non-local IP address
    - Remove network and broadcast address warnings


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-20.el7
changelog:
  - Resolves: #1452216 Replica installation grants HTTP principal
    access in WebUI
    - Make sure we check ccaches in all rpcserver paths


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7
changelog:
  - Resolves: #1470125 Replica install fails to configure IPA-specific
    temporary files/directories
    - replica install: drop-in IPA specific config to tmpfiles.d
  - Resolves: #1469978 bind package is not automatically updated during
    ipa-server upgrade process
    - Bumped Required version of bind-dyndb-ldap and bind package


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7.1
changelog:
  - Resolves: #1473272 Provide a tooling automating the configuration
    of Smart Card authentication on a FreeIPA master
    - smart-card advises: configure systemwide NSS DB also on master
    - smart-card advises: add steps to store smart card signing CA cert
    - Allow to pass in multiple CA cert paths to the smart card advises
    - add a class that tracks the indentation in the generated advises
    - delegate the indentation handling in advises to dedicated class
    - advise: add an infrastructure for formatting Bash compound statements
    - delegate formatting of compound Bash statements to dedicated classes
    - Fix indentation of statements in Smart card advises
    - Use the compound statement formatting API for configuring PKINIT
    - smart card advises: use a wrapper around Bash `for` loops
    - smart card advise: use password when changing trust flags on HTTP cert
    - smart-card-advises: ensure that krb5-pkinit is installed on client
  - Resolves: #1477046 Use CommonNameToSANDefault in default profile 
    (new installs only)
    - Add CommonNameToSANDefault to default cert profile
  - Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
    during search in cn=ad,cn=trusts,dc=example,dc=com
    - NULL LDAP context in call to ldap_search_ext_s during search


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7.1.1
changelog:
  - Resolves: #1477046 Use CommonNameToSANDefault in default profile
    (new installs only)
    - Restore old version of caIPAserviceCert for upgrade only


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.0-21.el7.2
changelog:
  - Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
    validate message: Incorrect number of results (0) searching forpublic
    key for host
      - Always check peer has keys before connecting
  - Resolves: #1489300 - Unable to set ca renewal master on replica
      - Fix ipa config-mod --ca-renewal-master
  - Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
    back to self-signed CA
      - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
  - Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
      - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
  - Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
    versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
    thus startup of Web UI fails
      - Adds whoami DS plugin in case that plugin is missing
  - Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
      - Fixing how sssd.conf is updated when promoting a client to replica
  - Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
    parameters!
      - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
  - Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
    (ipa-server-upgrade)
      - Backport 4-5: Fix ipa-server-upgrade with server cert tracking


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.0-21.el7.2.2
changelog:
  - Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
    expecting IPA services listening on IPv6 ports
      - Make sure upgrade also checks for IPv6 stack
      - control logging of host_port_open from caller
      - log progress of wait_for_open_ports
  - Resolves: #1493411 ipa help command returns traceback when no cache
    is present
      - Store help in Schema before writing to disk
      - Disable pylint in get_help function because of type confusion.


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.0-22.el7
changelog:
  - Resolves: #1506528 In case full PKINIT configuration is failing during
    server/replica install the error message should be more meaningful.
      - Less confusing message for PKINIT configuration during install
  - Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
    "CA:FALSE" IPA CA CSR
      - Include the CA basic constraint in CSRs when renewing a CA
  - Resolves: #1506913 ipa-replica-install might fail because of an already
    existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
      - Checks if replica-s4u2proxy.ldif should be applied
  - Resolves: #1506525 server-del doesn't remove dns-server configuration
    from ldap
      - server.py: Removes dns-server configuration from ldap


author: Michal Ruprich <mruprich@redhat.com> - 3.1.7-1
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding latest version before including iperf3 in RHEL-7


author: Michal Ruprich - 3.1.7-2
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding requires to spec file for devel package


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Petr Šabata <contyk@redhat.com> - 3.10.0-6
changelog:
  - Fix lnstat -i (#1024426)
  - Support IPv6 peer addresses (#1017228)
  - Add the replace command to bridge fdb (#1024697)
  - Document link type vlan (#979326)


author: Pavel Šimerda <psimerda@redhat.com> - 3.10.0-19
changelog:
  - Resolves: #1081081 - lnstat man page references iproute-doc when it should
    reference iproute-<ver>


author: Phil Sutter - 3.10.0-47
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Related: #1219280 - backport: iproute2: vti6 support


author: Phil Sutter - 3.10.0-48
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Resolves: #1247315 - Fix limitation in iproute/ss regarding dual-stack sockets


author: Phil Sutter - 3.10.0-49
changelog:
  - Resolves: bz#1241486 - backport: tc: fq scheduler
  - Related: #1215006 - backport current version of the ss command


author: Phil Sutter - 3.10.0-50
changelog:
  - Resolves: #1244851 - vti tunnel does not work
  - Resolves: #1155116 - iproute2: implement "-d" option for "ip mon"


author: Phil Sutter - 3.10.0-51
changelog:
  - Resolves: bz#1251451 - can't change the remote/local address of tunnel
    interface to "any" in ipip mode
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features
  - Related: #1215006 - [RFE] backport current version of the ss command
  - Resolves: #1251070 - Fix multiple programming errors in iproute package
  - Related: #1198456 - backport: dynamic precision, human readable, and IEC
    output to ip stats
  - Related: #1210402 - [6wind 7.2 Feat]: backport: vxlan: unable to configure
    UDP checksums
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features


author: Phil Sutter - 3.10.0-52
changelog:
  - Resolves: #1254095 - bridge: Add master device name to bridge fdb show
  - Resolves: #1255316 - tc does not allow to attach pfifo_fast qdisc
  - Related: #1251070 - Fix multiple programming errors in iproute package


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Phil Sutter <psutter@redhat.com> [3.10.0-66.el7]
changelog:
  - ip-link: Support printing VF trust setting (Phil Sutter) [1302119]
  - iplink: Support VF Trust (Phil Sutter) [1302119]
  - add new IFLA_VF_TRUST netlink attribute (Phil Sutter) [1302119]
  - ipaddress: Allow listing addresses by type (Phil Sutter) [1341343]
  - man ip-link: Small example of 'ip link show master' (Phil Sutter) [1341343]
  - ip link: Show devices by type (Phil Sutter) [1341343]
  - ip link: Allow to filter devices by master dev (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-67.el7]
changelog:
  - geneve: fix IPv6 remote address reporting (Phil Sutter) [1339178]
  - geneve: add support to set flow label (Phil Sutter) [1339178]
  - geneve: Add support for configuring UDP checksums. (Phil Sutter) [1339178]
  - geneve: add support for lwt tunnel creation and dst port selection (Phil Sutter) [1339178]
  - geneve: add support for IPv6 link partners (Phil Sutter) [1339178]
  - iplink_geneve: add tos configuration at link creation (Phil Sutter) [1339178]
  - iplink_geneve: add ttl configuration at link creation (Phil Sutter) [1339178]
  - iproute2: update ip-link.8 for geneve tunnels (Phil Sutter) [1339178]
  - iproute2: GENEVE support (Phil Sutter) [1339178]
  - man: ip-address, ip-link: Document 'type' quirk (Phil Sutter) [1341343]
  - man: ip-link.8: Fix 'ip link delete' description (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-68.el7]
changelog:
  - devlink: add manpage for shared buffer (Phil Sutter) [1342515]
  - devlink: implement shared buffer occupancy control (Phil Sutter) [1342515]
  - devlink: implement shared buffer support (Phil Sutter) [1342515]
  - devlink: allow to parse both devlink and port handle in the same time (Phil Sutter) [1342515]
  - devlink: introduce dump filtering function (Phil Sutter) [1342515]
  - devlink: split dl_argv_parse_put to parse and put parts (Phil Sutter) [1342515]
  - devlink: introduce helper to print out nice names (ifnames) (Phil Sutter) [1342515]
  - devlink: introduce pr_out_port_handle helper (Phil Sutter) [1342515]
  - list: add list_add_tail helper (Phil Sutter) [1342515]
  - list: add list_for_each_entry_reverse macro (Phil Sutter) [1342515]
  - devlink: fix "devlink port" help message (Phil Sutter) [1342515]
  - devlink: ignore build result (Phil Sutter) [1342515]
  - add devlink tool (Phil Sutter) [1342515]
  - include: add linked list implementation from kernel (Phil Sutter) [1342515]
  - configure: cleanup (Phil Sutter) [1342515]
  - configure: Check for libmnl (Phil Sutter) [1342515]
  - configure: Add check for the doc tools (Phil Sutter) [1342515]
  - add if_macsec header (Davide Caratti) [1300765]
  - RH-INTERNAL: update kernel headers to v4.6.0 (Davide Caratti) [1300765]
  - utils: fix hex digits parsing in hexstring_a2n() (Davide Caratti) [1300765]
  - ip: add MACsec support (Davide Caratti) [1300765]
  - utils: provide get_hex to read a hex digit from a char (Davide Caratti) [1300765]
  - utils: add get_be{16, 32, 64}, use them where possible (Davide Caratti) [1300765]
  - utils: make hexstring_a2n provide the number of hex digits parsed (Davide Caratti) [1300765]
  - lib/ll_addr: improve ll_addr_n2a() a bit (Davide Caratti) [1300765]
  - iproute2: arpd: use ll_addr_a2n and ll_addr_n2a (Davide Caratti) [1300765]
  - iproute2: utils: change hexstring_n2a and hexstring_a2n to do not work with ":" (Davide Caratti) [1300765]


author: Phil Sutter <psutter@redhat.com> [3.10.0-69.el7]
changelog:
  - ip-address.8: Document autojoin flag (Phil Sutter) [1333513]
  - ip-link.8: Fix font choices (Phil Sutter) [1269528]
  - ip-link: fix man page warnings (Phil Sutter) [1269528]
  - vxlan: fix help and man text (Phil Sutter) [1269528]
  - ip-link: fix unterminated string in manpage (Phil Sutter) [1269528]
  - ip-link.8: Add slave type option descriptions (Phil Sutter) [1269528]
  - ip-link.8: Place 'ip link set' warning more prominently (Phil Sutter) [1269528]
  - ip-link.8: Extend type list in synopsis (Phil Sutter) [1269528]
  - man ip-link: Remove extra GROUP explanation (Phil Sutter) [1269528]
  - man ip-link: Add short description about 'group' (Phil Sutter) [1269528]
  - man ip-link: Add deleting links by group (Phil Sutter) [1269528]
  - iplink: bond_slave: Add missing help functions (Phil Sutter) [1269528]
  - iplink: List valid 'type' argument in ip link help text (Phil Sutter) [1269528]
  - ip link: Add group in usage() for 'ip link delete' (Phil Sutter) [1269528]
  - iproute: constify rtattr_cmp (Phil Sutter) [1348133]
  - ip route: restore route entries in correct order (Phil Sutter) [1348133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-70.el7]
changelog:
  - man: ip-link: Document query_rss option (Phil Sutter) [1264146]
  - Document VF link state control in the ip-link man page (Phil Sutter) [1264146]
  - ipneigh: List all nud states in help output (Phil Sutter) [1276661]
  - iproute2: ip-route.8.in: Add expires option for ip route (Phil Sutter) [1357020]
  - ip route: timeout for routes has to be set in seconds (Phil Sutter) [1357020]
  - route: allow routes to be configured with expire values (Phil Sutter) [1357020]


author: Phil Sutter <psutter@redhat.com> [3.10.0-71.el7]
changelog:
  - ip: add paren to silence warning (Phil Sutter) [1340914]
  - Fix MAC address length check (Jakub Sitnicki) [1253767 1271580]
  - iplink: Check address length via netlink (Jakub Sitnicki) [1253767 1271580]
  - iplink: Add missing variable initialization (Jakub Sitnicki) [1253767 1271580]
  - ip link: Fix crash on older kernels when show VF dev (Jakub Sitnicki) [1340914]
  - ip link: Remove unnecessary device checking (Jakub Sitnicki) [1340914]
  - ip: check for missing dev arg when doing VF rate (Jakub Sitnicki) [1340914]
  - Add support to configure SR-IOV VF minimum and maximum Tx rate through ip tool (Jakub Sitnicki) [1340914]


author: Phil Sutter <psutter@redhat.com> [3.10.0-72.el7]
changelog:
  - macsec: cipher and icvlen can be set separately (Davide Caratti) [1354408]
  - ip {link,address}: add 'macsec' item to TYPE list (Davide Caratti) [1354702]
  - man: macsec: fix macsec related typos (Davide Caratti) [1354702 1354319]
  - Revert "Allow specifying bridge port STP state by name rather than number." (Phil Sutter) [1288042]
  - Revert "fix ip -force -batch to continue on errors" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for addrlabel" (Phil Sutter) [1288042]
  - Revert "link dump filter" (Phil Sutter) [1288042]
  - Revert "ip: return correct exit code on route failure" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for rule failures" (Phil Sutter) [1288042]
  - man: ip-link: Drop fou and gue related documentation (Phil Sutter) [1013584]
  - man: ip-link, ip-address: Drop references to ipvlan (Phil Sutter) [1013584]
  - doc, man: ip-rule: Remove incorrect statement about rule 0 (Phil Sutter) [1362561]


author: Phil Sutter <psutter@redhat.com> [3.10.0-73.el7]
changelog:
  - ip-link: add missing {min,max}_tx_rate to help text (Phil Sutter) [1340914]
  - man: ip-link.8: Document missing geneve options (Phil Sutter) [1339178]
  - iproute.spec: Fix for missing cbq.8 man page (Phil Sutter) [1362551]


author: Phil Sutter <psutter@redhat.com> [3.10.0-80.el7]
changelog:
  - tc: m_xt: Drop needless parentheses from #if checks (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault with iptables-1.6.0 (Phil Sutter) [1326726]
  - m_xt: whitespace cleanup (Phil Sutter) [1326726]
  - tc: m_xt: Introduce get_xtables_target_opts() (Phil Sutter) [1326726]
  - tc: m_xt: Simplify argc adjusting in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of iargc variable in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of rargc in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Drop unused variable fw in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of one indentation level in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Fix indenting (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault when adding multiple actions at once (Phil Sutter) [1326726]
  - tc: m_xt: Prevent segfault with standard targets (Phil Sutter) [1326726]
  - man: update doc after support of ESN and anti-replay window (Phil Sutter) [1425059]
  - xfrm: add support of ESN and anti-replay window (Phil Sutter) [1425059]


author: Phil Sutter <psutter@redhat.com> [3.10.0-81.el7]
changelog:
  - man: ip-link: Specify min/max values for bridge slave priority and cost (Phil Sutter) [1374360]
  - man: ip-link.8: document bridge options (Phil Sutter) [1373869]


author: Ivan Vecera <ivecera@redhat.com> [3.10.0-84.el7]
changelog:
  - tc: Add support for the matchall traffic classifier. (Ivan Vecera) [1435624]
  - tc: man: Add man entry for the matchall classifier. (Ivan Vecera) [1435624]
  - tc: add missing limits.h header (Ivan Vecera) [1435624]
  - tc: man: matchall: Fix example indentation (Ivan Vecera) [1435624]
  - tc: matchall: Print skip flags when dumping a filter (Ivan Vecera) [1435624]
  - tc, clsact: add clsact frontend (Ivan Vecera) [1435624]


author: Eric Garver <egarver@redhat.com> [3.10.0-86.el7]
changelog:
  - Revert "ip-route man: add usage and description for lwtunnel encap attributes" (Eric Garver) [1459975]
  - Revert "lwtunnel: implement support for ip6 encap" (Eric Garver) [1459975]
  - Revert "lwtunnel: fix argument parsing" (Eric Garver) [1459975]
  - Revert "lwtunnel: Add encapsulation support to ip route" (Eric Garver) [1459975]


author: Sabrina Dubroca <sdubroca@redhat.com> [3.10.0-87.el7]
changelog:
  - devlink: Add e-switch support (Sabrina Dubroca) [1459772]
  - devlink: whitespace cleanup (Sabrina Dubroca) [1459772]
  - devlink: Convert conditional in dl_argv_handle_port() to switch() (Sabrina Dubroca) [1459772]
  - devlink: write usage help messages to stderr (Sabrina Dubroca) [1459772]
  - devlink: Add usage help for eswitch subcommand (Sabrina Dubroca) [1459772]
  - devlink: Call dl_free in early exit case (Sabrina Dubroca) [1459772]


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-6
changelog:
  - Removed gpg key check during build RHBZ#1248529
  - Fixed the license tag to include external code RHBZ#1248538
  - Use full path url RHBZ#1251149


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-7
changelog:
  - Added dependency on python-requests for client RHBZ#1254644
  - Fixed possible XSS flaws CVE-2015-5215, CVE-2015-5216
  - Fixed permission check CVE-2015-5217


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-8
changelog:
  - Moved ipsilon-client-install man page to client subpackage RHBZ#1255103
  - Backported patch to count IPA as login plugin RHBZ#1256517
  - Backported patch to log error if nameid is invalid RHBZ#1256520
  - Backported patch to add city attribute RHBZ#1257213


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 1.0.0-9
changelog:
  - Backport database keys patch RHBZ#1252392
  - Backport SAML path check patch RHBZ#1253821
  - Backport database cleanup RHBZ#1256518


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Phil Sutter - 1.4.21-18.2
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1491963)
  - Don't restart services upon upgrade (RHBZ#1491961)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-6
changelog:
  - fix 1283773 - segfault in rate_add_rate

    Jun 17 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix 1109768 bad configuration logrotate
    Mar 02 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix bug 1020552 - rpm report /var/lock/ipraf-ng is missing
    added missing file iptraf-nf-tmpfiles.conf
    Dec 03 2013 Nikola Pajkovsky <npajkovs@redhat.com>
    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.
    202b2e7b27a1 Makefile: add -Werror=format-security
    Resolved: #1037133


author: Jan Synáček <jsynacek@redhat.com> - 20121125-2
changelog:
  - Comment patches and cleanup
  - Update ifaddrs patch
  - Call usage() before limiting capabilities
  - Correct ifaddrs patch
  - Drop corr_type patch (gcc 4.4 build hack)
  - Fix missing end tags in sgml documentation


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-delete-useless-editor-backup-of-spec.template.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-7.gitc4bce43.el7
changelog:
  - ipxe-Extract-timing-parameters-out-to-config-dhcp.h.patch [bz#1196352]
  - ipxe-Use-spec-compliant-timeouts.patch [bz#1196352]
  - Resolves: bz#1196352
    ([RFE] option to increase gpxe retry timeout)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-2.git6366fa7a.el7
changelog:
  - ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
  - Resolves: bz#1350167
    (ipxe: enable IPV6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-3.git6366fa7a.el7
changelog:
  - ipxe-Add-pci_find_next_capability.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
  - ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
  - ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
  - ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
  - Resolves: bz#1242850
    (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-4.git6366fa7a.el7
changelog:
  - ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
  - ipxe-enable-e1000e-rom.patch [bz#1361534]
  - Resolves: bz#1322056
    (ipxe freeze during HTTP download with last RPM)
  - Resolves: bz#1361534
    (RFE: Integrate e1000e implementation in downstream QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-5.git6366fa7a.el7
changelog:
  - ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
  - Resolves: bz#1316329
    ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170123-1.git4e85b27.el7_4.1
changelog:
  - ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
  - Resolves: bz#1481180
    (iommu platform support for ipxe [rhel-7.4.z])


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.8.15-8
changelog:
  - Fixed crash that can occur if term is resized during irssi init
    (init-resize-crash-fix patch)
    Resolves: rhbz#796457


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-19
changelog:
  - 1007388 fixes for iscsiadm to support qla4xxx
  - refresh boot session info patches to final version from upstream,
    fixes context issues with later patches
  - 1006156, 1006161 Add/Update entries in chap table through Open-iSCSI
  - 948134 extend support to set additional parameters for network configuration
  - 1049710 update open-iscsi to support host statistics
  - 1043019 iscsiuio fix for arp cache flush issue
  - 1059332 Fix broken discovery sessions over iser
  - 1017393 split out iscsiuio into a seperate sub-package


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-20
changelog:
  - 1049710 host0 being treated as an invalid in the host stats command
  - 1015563 revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1069825
  - boot session handling improvements
  - Fix iscsi-mark-root for changed iscsiadm output
  - Make sure iscsiuio is running for boot session recovery when using the
    bnx2i transport by forcing iscsiuio.service start
  - Make NM dispatch triggered re-check for autostart sessions async
  - Accept exit code 21, no records, from iscsiadm as success in
    iscsi.service


author: Jingdong Lu <jingdong.lu@oracle.com> - 6.2.0.873-21.0.1
changelog:
  - Rename 0053-use-red-hat-name.patch to 0153-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-22
changelog:
  - 1081798 retry login on host not found error
  - 1111925 ignore iscsiadm return in iscsi.service
  - 1126524 make sure systemd order against remote mounts is correct
  - 963039 add discovery as a valid mode in iscsiadm.8
  - sync with upstream


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24
changelog:
  - 1040343 segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.873-32.0.1
changelog:
  - Include patches required by QLogic [bug 21765604] (Guangyu Sun)
  - Rename 0053-use-red-hat-name.patch to 0153-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.873-33.0.1
changelog:
  - Include patches required by QLogic [bug 22493306] (Ethan zhao)
  - Include patches required by QLogic [bug 21765604] (Guangyu Sun)
  - Rename 0053-use-red-hat-name.patch to 0153-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Chris Leech <cleech@redhat.com> - 0.93-4
changelog:
  - set hardened build flag, required for long running processes (isnsd)
  - patch makefile to actually use LDFLAGS


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8
changelog:
  - Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426)
  - Fix up Obsoletes to all use <= comparisons


author: Jingdong Lu <jingdong.lu@oracle.com> - 20140213-0.3.git4164c23.0.1
changelog:
  - Update ql2400 and ql2500 fw to 7.03.00 [orabug 18640045] (Jerry Snitselaar)
  - Allow amd-ucode to load. Let's find out what bug 1007411 is. [orabug: 18520524] (Vaughan Cao)


author: Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Adds Intel Quick Assist Technology firmware (rhbz 1127338)
  - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403)
  - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702)
  - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595)


author: Jacob Wang <jacob.wang@oracle.com> - 20140911-0.1.git365e80c.0.1
changelog:
  - Update ql2400 fw to 7.04.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2500 fw to 7.05.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2400 and ql2500 fw to 7.03.00 [orabug 18640045] (Jerry Snitselaar)
  - Allow amd-ucode to load. Let's find out what bug 1007411 is. [orabug: 18520524] (Vaughan Cao)


author: Rafael Aquini <aquini@redhat.com> - 20150612-37.git3161bfa
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: Update firmware to revision 1.13.32.0 (rhbz 1189256)
  - qat: Update to the latest upstream firmware (rhbz 1173792)
  - Use a common version number for both the iwl*-firmware packages and linux-firmware itself


author: Rafael Aquini <aquini@redhat.com> - 20150904-42.git6ebf5d5
changelog:
  - Add Intel Omni-Path Architecture hfi1 Firmware (rhbz 1194910)
  - Update skl firmware for gpu (rhbz 1210012)


author: Jarod Wilson <jarod@redhat.com> - 20150904-43.git6ebf5d5
changelog:
  - Add more old chelsio firmwares, they nuked the one the driver in
    RHEL7.2 is expecting from upstream (rhbz 1262128)
  - Remove amd-ucode again, it simply breaks too many systems (rhbz 1246393)


author: EL Errata <el-errata_ww@oracle.com> - 20150904-43.git6ebf5d5.0.1
changelog:
  - Add bnx2x firmware at version 7.12.30.00 [Orabug 22066196]
  - Update ql2400 firmware to version 8.02.00-1 [Orabug 22003659] (Dan Duval)
  - Update ql2500 firmware to version 8.02.00-1 [Orabug 22003659] (Dan Duval)
  - Add ql2600 firmware, version 8.07.00-18.39.0K [orabug 21417522] (Dan Duval)
  - Add ql2700 firmware, version 8.07.00-18.39.0K [orabug 21417522] (Dan Duval)
  - Add ql8300 firmware, version 8.07.00-18.39.0K [orabug 21417522] (Dan Duval)
  - update ql2500 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)
  - Update ql2400 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)
  - Update ql2500 fw to 7.05.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2400 fw to 7.04.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2400 and ql2500 fw to 7.03.00 [orabug 18640045] (Jerry Snitselaar)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20160604-44.git57b649d9
changelog:
  - Pull last update from upstream linux-firmware repo. (Orabug 23337630)
  - Merged firmware from vendors for bug22066196,bug22066196,bug22003659


author: Ethan Zhao <ethan.zhao@oracle.com> - 20160909-47.gitc883a6b6
changelog:
  - Merge update from upstream linux-firmware repo.
  - Merge spec update from RHEL7.3 (Orabug 24602475)


author: Guru Anbalagane <guru.anbalagane@oracle.com> - 20160909-50.gitc883a6b6.0.1.el7
changelog:
  - BUILDINFO: commit=0576a98e6488e46d161c45b67fbaa12b05f7c72c
  - SPEC: version for 7.3 release (Guru Anbalagane)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170411-52.gitb1413458.0.1.el7
changelog:
  - BUILDINFO: commit=a25bf1f8a1d1e87215f8274f5f75474e9193af0e
  - ol7/spec: update version for merging upstream change


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170803-56.git7d2c913d.0.1.el7
changelog:
  - Merge upstream change and bump up version (Orabug 26566815)
  - opa: Revert switch firmware back to 0.47 (rhbz 1464629)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170803-56.git7d2c913d.0.1.el7
changelog:
  - BUILDINFO: commit=e217f1ba4cfb98457dd170f7b65350da31e800d5
  - ol7/spec: merge upstream change and bump up version


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-56.git17e62881.0.1.el7
changelog:
  - Merge upstream change and bump up version (Orabug 27181170)
  - Update qla2600,qla2700,qla8300 FW files (Orabug 27160916)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-57.git17e62881.0.1.el7
changelog:
  - BUILDINFO: commit=e2168cb41bba63b8fb02bc6dcd1ad53e96bef1bc
  - ol7/spec: Increase release number to avoid iwl packages building conflict


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-57.git17e62881.0.2.el7
changelog:
  - BUILDINFO: commit=4059fcbdda54626b43798eb07320a2fa17daee32
  - ol7/spec: fix cxgb4 FW symlinks script (Ethan Zhao)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Dave Anderson <anderson@redhat.com> - 01.00.00.2113-1
changelog:
  - Copied upstream v01.00.00.2113.tar.gz into ixpdimm_sw-01.00.00.2113.tar.gz
    and did an rhpkg new-sources to replace the mismatched checksum version 
    included in the Fedora src.rpm
  - Resolves: rhbz#1270993


author: Eric Sandeen <sandeen@redhat.com> - 01.00.00.2111-1
changelog:
  - Downgrade to v01.00.00.2113 to satisfy existing RHEL7 deps
  - Add explicit inter-package dependencies
  - Resolves: rhbz#1270993


author: Michal Srb <msrb@redhat.com> - 0:1.1.2-13
changelog:
  - Prevent XXE and RCE in JSTL XML tags
  - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
  - Resolves: CVE-2015-0254


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws
    lead to arbitrary code execution (CERT VU#887409) (#765660)
  - Fixed problems found by static analysis of code (#761440)
  - spec file modernized


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.1
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171210)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.2
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173568)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173568)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-26.3
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183673)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183681)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - updated to icedtea6 1.10.4
  - Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
    - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
  - Bug fixes
    - RH727195 : Japanese font mappings are broken
  - Backports
    - S6826104, RH730015: Getting a NullPointer exception when clicked on Application & Toolkit Modal dialog
  - Zero/Shark
    - PR690: Shark fails to JIT using hs20.
    - PR696: Zero fails to handle fast_aldc and fast_aldc_w in hs20.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - omajid have added Patch6 as (probably temporally) solution for S7103224 for buildability on newest glibc libraries.


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.64.1.11.12
changelog:
  - Removed the temporary libffi-compat-5 requirement
  - Updated BR to java6-1.6.0-devel
  - Build with OpenJDK6 specifically


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - removed patch100: 8000791-regression-fix.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - added:
     - Patch103 type_hsx23_patch3.patch
     - Patch104 type_hsx23_patch4.patch
   -to fix zero type error
   -aplied everywhere, as should go upstream
  - Resolves: rhbz#1018679


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed upstreamed  patch103 type_hsx23_patch3.patch
  - Resolves: rhbz#1053279


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1099563


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115869


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148901


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180292


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Resolves: rhbz#1180292


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115870
  - forwardported from rhel 6.6, patch10, add-final-location-rpaths.patch (rh1059925)
   - Work when capabilities are set on the binary
   - Include hardcoded install path as well as $ORIGIN in RPATH
   - Don't Expect LD_LIBRARY_PATH to be set in the launcher


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148902


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Resolves: rhbz#1209067


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235153


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Add ExcludeArch directive for RH1209326
  - Resolves: rhbz#1209068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235154


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350046


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Add MD5 checksums for last two version of the java.security file.
  - Resolves: rhbz#1295768


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320658


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop AArch64 patch (PR2914) included in 2.6.6
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
  - Resolves: rhbz#1350041


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350041


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938, PR2939, PR3012, PR3013 and PR1437) applied upstream.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.3
changelog:
  - Add additional changes to 8162344 to fix issues which only show up on a full build.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.0
changelog:
  - Bump to 2.6.10 and u141b00.
  - Adjust RH1022017 following application of 8173783
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Bump to u141b01 to include S8043723 fix for s390.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.1
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Add blacklisted.certs to installation file list.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.2
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Handle unsupported architectures by calling the error function rather than a parse failure
  - ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
  - Resolves: rhbz#1373986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.3
changelog:
  - Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1422738


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.1
changelog:
  - Bump to 2.6.10 and u141b00.
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Drop 8173783 backport which is now applied upstream.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.3
changelog:
  - Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
  - Resolves: rhbz#1273760


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.4
changelog:
  - Fix merge error with "native2ascii changes file permissions of input file"
  - Resolves: rhbz#1446700


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.141-2.6.10.5
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - aligned with this change, applied repackReproduciblePolycies.sh
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.1
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Drop 7177216 merge fix which is applied upstream.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716 patch, now applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.0
changelog:
  - Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
  - Drop PR3497 AArch64 patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Fix file path in rh1022017.patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Update to new tarball with AArch64 return value fixes, dropping local patch.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.0
changelog:
  - Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
  - Resolves: rhbz#1528233


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.fel7
changelog:
  - Removed obsoletes for java-1.6.0-openjdk* ,  until decided its presence in el7
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el7
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
   - and so removed patch121 FixPPC64StackOverflow.patch
  - added patch412 zero-x32.diff to try to fix zero builds build
  - Resolves: rhbz#1053280


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.5.0.el7
changelog:
  - updated to icedtea 2.4.5 + sync with f21
   - http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
  - removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
   -  but kept libs-devel)
  - removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
   - patch410 1015432.patch (upstreamed)
   - patch411 1029588.patch
   - patch412 zero-x32.diff
   - patch104 java-1.7.0-ppc-zero-jdk.patch
   - patch105 java-1.7.0-ppc-zero-hotspot.patch
  - patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
   (again thanx to gnu_andrew)
  - merged other gnu_andrew's changes
   - FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls 
   - buildver bumbed to 31
  - added build requires  nss-devel
  - removed build requires mercurial
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
  - Related: rhbz1038092


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el7
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed Requires: rhino, BuildRequires is enough
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.6 forward port)
  - nss enabled, but notused as default (6.6 forward port)
  - Resolves: rhbz#1099565


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1.7.0.55-2.4.7.2
changelog:
  - Remove NSS patches. Issues with PKCS11 provider mean it shouldn't be enabled.
  - Always setup nss.cfg and depend on nss-devel at build-time to do so.
  - This allows users who wish to use PKCS11+NSS to just add it to java.security.
  - Patches to PKCS11 provider will be included upstream in 2.4.8 (ETA July 2014)
  - Resolves: rhbz#1099565


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115876


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.3.1
changelog:
  - Bump to 2.5.3 for latest security fixes.
  - Remove obsolete patches.
  - Add hsbootstrap option to pre-build HotSpot when required.
  - Resolves: rhbz#1148893


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Bump AArch64 port to 2.6.0pre17.
  - Remove AArch64-specific patches, following rebase on 2.6.x.
  - Fix abrt_friendly_hs_log_jdk7.patch to apply again.
  - Resolves: rhbz#1180297


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.1
changelog:
  - Fix elliptic curve list as part of fsg.sh
  - Enable abrt_friendly_hs_log_jdk7.patch on all archs
  - Resolves: rhbz#1180297


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix hsbootstrap option on ppc64le where JDK_TO_BUILD_WITH is changed.
  - Print uname to feedback to upstream OpenJDK.
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.5.0
changelog:
  - Bump to 2.5.5 using OpenJDK 7u79 b14.
  - Update OpenJDK tarball creation comments
  - Remove test case for RH1191652 now fix has been verified.
  - Drop AArch64 version of RH1191652 HotSpot patch as included upstream.
  - Resolves: rhbz#1209072


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Add GConf2-devel dependency for native proxy fallback support.
  - Remove libxslt dependency pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.1
changelog:
  - Pass SYSTEM_GSETTINGS="true" to the OpenJDK build to explicitly enable the GSettings API.
  - Resolves: rhbz#1235158


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.0
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271921


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Drop patches for PR2560/RH1245855 as now applied upstream.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271923


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-0.b14
changelog:
  - Update to u92b14.
  - Remove upstreamed patches for AArch64 byte behaviour and template issue.
  - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
  - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112.
  - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
  - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
  - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
  - Replace PR2974/RH1343832 patch with u92 version used in IcedTea 3.
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-0.b13
changelog:
  - Update to u101b13.
  - Backport REPOS option in generate_source_tarball.sh
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-2.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1350036


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13
changelog:
  - Add upstream patch for S8157306, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1365620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-5.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1368440


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13
changelog:
  - added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation
  - rhbz1358661
  - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks
  - rhbz1204159
  - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64
  - rhbz1360863
  - added all virtual provides of java-devel
  - Resolves: rhbz#1216018


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13
changelog:
  - Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1360863


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13
changelog:
  - Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch.
  - Resolves: rhbz#1358661


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1359857


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005)
  - Resolves: rhbz#1295754


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14
changelog:
  - Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750)
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14
changelog:
  - Runtime native library requirements need to match the architecture of the JDK
  - Resolves: rhbz#1375224


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1368440


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b15
changelog:
  - Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
  - Swap java.security md5sum for 7.2.z version with ECC patch.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it.
  - Resolves: rhbz#1382736


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-0.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-0.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11
changelog:
  - Rename SystemTap tapset tarball to avoid conflicts with previous version.
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1443417


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12
changelog:
  - Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
  - Resolves: rhbz#1319875


author: Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12
changelog:
  - Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
  - Resolves: rhbz#1448880


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup tarball creation documentation to avoid duplication.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b13
changelog:
  - Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command"
  - Resolves: rhbz#1442162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-3.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1449258


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b12
changelog:
  - Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-0.b15
changelog:
  - Update to aarch64-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Add MD5 checksum for the new java.security file (SHA1 disabled for server-side certificates in jdkCA)
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b16
changelog:
  - Update to aarch64-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-0.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Resolves: rhbz#1481947


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-0.b12
changelog:
  - 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
  - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-5.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
  - Resolves: rhbz#1515212


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26
changelog:
  - Remove LIBDIR and funny definition of _libdir.
  - Fix rpmlint warnings about macros in comments.
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Fix configure script to use ppc64le, not ppc64.
  - Add ppc64le support to LIBJSOUND_CFLAGS.
  - Add a jvm.cfg for ppc64le
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Print contents of spec.gmk to see what is being passed to the HotSpot build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build.
  - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7.
  - Print contents of hotspot-spec.gmk
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build.
  - Add property test case from java-1.7.0-openjdk build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13
changelog:
  - Adjust ppc64le HotSpot patch for OpenJDK 8.
  - Enable AArch64 configure/JDK patch on all archs to minimise patching issues.
  - Adjust ppc64le patches to apply after the enableAArch64 patch.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Resolves: rhbz#1194378


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209076


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-7.b13
changelog:
  - Re-add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Remove ppc64le test case now fix has been verified.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Add md5sum for January 2015 java.security update so it gets updated this time.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257656


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257657


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - moved to integration forest 
  - sync with fedora (all but extracted luas and family)
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-0.b15
changelog:
  - January 2016 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Provide optional boostrap build and turn it off by default.
  - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Update to u77b03.
  - Drop 8146566 which is applied upstream.
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Only use z format specifier on s390, not s390x.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Correct spelling mistakes in tarball generation script.
  - Synchronise minor changes from Fedora.
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1320664


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Remove what remains of the SunEC sources in the remove-intree-libraries script.
  - Resolves: rhbz#1320664


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway.
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add 8132051 port to Zero.
  - Turn on bootstrap build for all to ensure we are now good to go.
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Resolves: rhbz#1325422


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Ville Skyttä <ville.skytta@iki.fi> - 20091111-6
changelog:
  - Address more comments/TODO's from #655601:
  - Patch test suite generation to use Xalan.
  - Include license texts in jing-javadoc.
  - Make datatype-sample buildable out of the box, drop prebuilt jar.


author: Ville Skyttä <ville.skytta@iki.fi> - 20091111-10
changelog:
  - Tweak java-devel build dep for buildability without Java 1.6.
  - Fix build classpath with recent TestNG.


author: Jan Pokorný <jpokorny@redhat.com> - 20091111-14
changelog:
  - Resync with recent spec file changes in Fedora by Ville Skyttä:
  - BuildRequire ant instead of -trax (non-EL).
  - Depend on headless JRE where available.
  - Fix build (#1048867) and depend on headless JRE on EL7


author: Chris Spike <spike@fedoraproject.org> 2.1-1.tzdata2012g
changelog:
  - Updated to 2.1
  - New tzdata (2012g)
  - Updated spec file according to latest java packaging guidelines


author: Parag <pnemade AT redhat DOT com> - 0.003-13
changelog:
  - Resolves:rh#847621 - better enabling autohinting by default
  - Resolves:rh#847623 - fontconfig file isn't shipped in rpm
  - Resolves:rh#847627 - Malformed fontconfig config file


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Juan Hernandez <juan.hernandez@redhat.com> 1.1.1-1
changelog:
  - Adapted (mostly copied, in fact) from the corresponding package from Mageia
    (http://www.mageia.org) with support from Gil Cattaneo <puntogil@libero.it>.


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-40
changelog:
  - Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS
    (edewata)
  - Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa.
    (cfu)
  - PKI ticket 801 - Merge pki-symkey into jss (phase 1)
    (jmagne)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding one patch
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.10-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Ryan Rix <ry@n.rix.si> - 0.3.1-3
changelog:
  - Update the category to adhere to new SC 4.5 systemsettings layout. Will now
    appear under the "input devices" section.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.3.1-6
changelog:
  - Merge bugfixes from Kubuntu, fixes circular scrolling and more (#633353)
  - Drop default kcmtouchpadrc, use driver defaults (#611611)
  - Make the Scrolling tab use a vertical scrollbar if needed (#600121)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.10.3-2
changelog:
  - pull in a few upstream fixes, including a couple minor security issues
  - Crash in DialogShadows::Private::freeX11Pixmaps() (kde#319137)


author: Martin Briza <mbriza@redhat.com> - 4.10.5-3
changelog:
  - make kpac_dhcp_helper full relro
  - set the variables in the generated cmake files to contain both 64b and 32b paths
  - hide "command not found" for one pkg-config invocation in the spec
  - fix macro expansion in the spec changelog
  - Resolves: #884052


author: Martin Briza <mbriza@redhat.com> - 4.10.5-4
changelog:
  - use a better way to figure out if lib or lib64 should be used
  - use -fno-strict-aliasing for type punned source files
  - Resolves: #884052


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jarod Wilson <jarod@redhat.com> [3.10.0-116.el7]
changelog:
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1077650]
  - [kernel] rh_taint: Remove taint and update unsupported hardware message (Prarit Bhargava) [1076974]
  - [fs] proc/vmcore: continue vmcore initialization if PT_NOTE is found empty (Chao WANG) [1077535]
  - [net] ipv6: ip6_append_data_mtu do not handle the mtu of the second fragment properly (Jiri Pirko) [1079873]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-117.el7]
changelog:
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1081781]
  - [md] dm: take care to copy the space map roots before locking the superblock (Mike Snitzer) [1081781]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1081781]
  - [md] dm-era: fixes for issues identified upstream (Mike Snitzer) [1081781]
  - [md] dm-cache: remove remainder of distinct discard block size (Mike Snitzer) [1062679]
  - [md] dm-cache: prevent corruption caused by discard_block_size > cache_block_size (Mike Snitzer) [1062679]
  - [ipc] change kern_ipc_perm.deleted type to bool (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] introduce ipc_valid_object() helper to sort out IPC_RMID races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [ipc] shm: fix shm_file deletion races (Phillip Lougher) [1043807] {CVE-2013-7026}
  - [drm] udl: take reference to device struct for dma-bufs (Dave Airlie) [1077774]
  - [security] keys: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMIN (David Howells) [1074240]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-118.el7]
changelog:
  - [wireless] ath9k: Fix LNA gpio for AR9485 (John Green) [1082017]
  - [infiniband] core: Don't resolve passive side RoCE L2 address in cma req handler (Amir Vadai) [1075852]
  - [fs] xfs: fix buffer use after free on IO error (Eric Sandeen) [924301]
  - [scsi] be2iscsi: Bump the driver version (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix DMA Out of SW-IOMMU space error (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix scsi_cmnd leakage in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix the session cleanup when reboot/shutdown happens (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix doorbell format for EQ/CQ/RQ s per SLI spec (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix port speed typo in driver (Rob Evers) [1052416]
  - [scsi] be2iscsi: Fix handling timed out MBX completion from FW (Rob Evers) [1052416]
  - [fs] nfs: Fix a use-after-free problem in open() (Steve Dickson) [1062809]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-119.el7]
changelog:
  - [net] bonding: remove bond_resend_igmp_join_requests read_unlock leftover (Veaceslav Falico) [1080924]
  - [ethernet] mlx4: Support shutdown() interface (Amir Vadai) [1046216]
  - [zram] fix invalid memory access (Jerome Marchand) [1081936]
  - [zram] protect zram_reset_device() call (Jerome Marchand) [1081936]
  - [zram] remove zram_sysfs file (Jerome Marchand) [1081936]
  - [zram] use atomic64_xxx() to replace zram_stat64_xxx() (Jerome Marchand) [1081936]
  - [zram] optimize memory operations with clear_page()/copy_page() (Jerome Marchand) [1081936]
  - [zram] kill unused zram_get_num_devices() (Jerome Marchand) [1081936]
  - [zram] simplify and optimize dev_to_zram() (Jerome Marchand) [1081936]
  - [kernel] futex: revert back to the explicit waiter counting code (Larry Woodman) [1081100]
  - [kernel] audit: Allow login in non-init namespaces (Richard Guy Briggs) [1082597]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-120.el7]
changelog:
  - [net] netfilter: fix panic when oom during rule replacement (Florian Westphal) [985657]
  - [net] netfilter: x_tables: fix ordering of jumpstack allocation and table update (Florian Westphal) [985657]
  - [virt] kvm/ioapic: try to recover if pending_eoi goes out of range (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: fix assignment of ioapic->rtc_status.pending_eoi (Paolo Bonzini) [1036478 1081590] {CVE-2014-0155}
  - [virt] kvm/ioapic: reinject pending interrupts on KVM_SET_IRQCHIP (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: extract body of kvm_ioapic_set_irq (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: clear IRR for edge-triggered interrupts at delivery (Paolo Bonzini) [1036478]
  - [virt] kvm/ioapic: merge ioapic_deliver into ioapic_service (Paolo Bonzini) [1036478]
  - [virt] kvm: ignore ioapic polarity (Paolo Bonzini) [1036478]
  - [core] device: Create 'device_driver_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [core] device: Create 'device_rh' KABI shadowing structure (Myron Stowe) [1083692]
  - [scsi] Reserve space in structures for future XCOPY support (Ewan Milne) [1080430]
  - [fs] xfs: fix bad hash ordering (Brian Foster) [1083206]
  - [fs] xfs: always do log forces via the workqueue (Brian Foster) [1052004]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-121.el7]
changelog:
  - [virt] vhost/net: fix total length when packets are too short ("Michael S. Tsirkin") [1064446] {CVE-2014-0077}
  - [virt] vhost/net: validate vhost_get_vq_desc return value ("Michael S. Tsirkin") [1070940] {CVE-2014-0055}


author: Jarod Wilson <jarod@redhat.com> [3.10.0-122.el7]
changelog:
  - [security] device_cgroup: check if exception removal is allowed (Aristeu Rozanski) [1086057]
  - [security] device_cgroup: rework device access check and rule checking (Aristeu Rozanski) [1086057]
  - [fs] autofs: fix lockref lookup (Ian Kent) [1083815]
  - [mei] me: do not load the driver if the FW doesn't support MEI interface (Prarit Bhargava) [1082789]


author: Jarod Wilson <jarod@redhat.com> [3.10.0-123.el7]
changelog:
  - [mm] rmap: try_to_unmap_cluster() should lock_page() before mlocking (Larry Woodman) [1078349] {CVE-2014-3122}
  - [mm] huge_memory: Fix cpuset cgroups so all pages for a task remain on correct node (Larry Woodman) [1076613]
  - [mm] mprotect: fix oops in change_pmd_range called from task_numa_work (Rik van Riel) [1085050]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.1.2.el7]
changelog:
  - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.5.1.el7]
changelog:
  - [net] ipv4/tunnels: fix an oops when using ipip/sit with IPsec (Jiri Pirko) [1114957 1108857]
  - [scsi] Add timeout to avoid infinite command retry (Ewan Milne) [1114468 1061871]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Jiri Benc) [1114404 1079524]
  - [net] filter: introduce SO_BPF_EXTENSIONS (Jiri Benc) [1114404 1079524]
  - [net] sctp: Fix sk_ack_backlog wrap-around problem (Daniel Borkmann) [1113971 1112726] {CVE-2014-4667}
  - [tty] Set correct tty name in 'active' sysfs attribute (Denys Vlasenko) [1113467 1066403]
  - [powerpc] tm: Disable IRQ in tm_recheckpoint (Larry Woodman) [1113150 1088224]
  - [scsi] qla2xxx: Update version number to 8.06.00.08.07.0-k3 (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1112389 1090378]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1112389 1090378]
  - [fs] nfs: Apply NFS_MOUNT_CMP_FLAGMASK to nfs_compare_remount_data() (Scott Mayhew) [1109407 1103805]
  - [ethernet] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1107721 1101808]
  - [net] gro: restore frag0 optimization (and fix crash) (Michal Schmidt) [1099950 1069741]
  - [watchdog] hpwdt: display informative string (Nigel Croxon) [1096961 1074038]
  - [net] Use netlink_ns_capable to verify the permisions of netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Add variants of capable for use on netlink messages (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Move the permission check in sock_diag_put_filterinfo to packet_diag_dump (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] diag: Fix ns_capable check in sock_diag_put_filterinfo (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094271 1094272] {CVE-2014-0181}
  - [kernel] cputime: Fix jiffies based cputime assumption on steal accounting (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Bring cputime -> nsecs conversion (Frederic Weisbecker) [1090974 1047732]
  - [kernel] cputime: Default implementation of nsecs -> cputime conversion (Frederic Weisbecker) [1090974 1047732]
  - [net] mac80211: fix crash due to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083533 1083534] {CVE-2014-2706}
  - [wireless] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083251 1083252] {CVE-2014-2672}
  - [powerpc] tm: Fix crash when forking inside a transaction (Radomir Vrbovsky) [1083214 1083215] {CVE-2014-2673}
  - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206}
  - [fs] aio: plug memory disclosure and fix reqs_active accounting (Mateusz Guzik) [1094604 1094605] {CVE-2014-0206}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.6.1.el7]
changelog:
  - [x86] ptrace: force IRET path after a ptrace_stop() (Oleg Nesterov) [1115934 1115935] {CVE-2014-4699}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.7.1.el7]
changelog:
  - [scsi] set DID_TIME_OUT correctly (Ewan Milne) [1122575 1103881]
  - [scsi] fix invalid setting of host byte (Ewan Milne) [1122575 1103881]
  - [scsi] More USB deadlock fixes (Ewan Milne) [1122575 1103881]
  - [scsi] Fix USB deadlock caused by SCSI error handling (Ewan Milne) [1122575 1103881]
  - [scsi] Fix command result state propagation (Ewan Milne) [1122575 1103881]
  - [scsi] Fix spurious request sense in error handling (Ewan Milne) [1122575 1103881]
  - [input] synaptics: fix resolution for manually provided min/max (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: change min/max quirk table to pnp-id matching (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add a matches_pnp_id helper function (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: T540p - unify with other LEN0034 models (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for the ThinkPad W540 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad Edge E431 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add min/max quirk for ThinkPad T431s, L440, L540, S1 Yoga and X1 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: report INPUT_PROP_TOPBUTTONPAD property (Benjamin Tissoires) [1122559 1093449]
  - [input] Add INPUT_PROP_TOPBUTTONPAD device property (Benjamin Tissoires) [1122559 1093449]
  - [input] i8042: add firmware_id support (Benjamin Tissoires) [1122559 1093449]
  - [input] serio: add firmware_id sysfs attribute (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk for ThinkPad X240 (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: add manual min/max quirk (Benjamin Tissoires) [1122559 1093449]
  - [input] synaptics: fix incorrect placement of __initconst (Benjamin Tissoires) [1122559 1093449]
  - [ethernet] be2net: Fix invocation of be_close() after be_clear() (Ivan Vecera) [1122558 1066644]
  - [ethernet] be2net: enable interrupts in EEH resume (Ivan Vecera) [1121712 1076682]
  - [ethernet] sfc: PIO:Restrict to 64bit arch and use 64-bit writes (Nikolay Aleksandrov) [1119725 1089024]
  - [kernel] ftrace: Hardcode ftrace_module_init() call into load_module() (Takahiro MUNEDA) [1119721 1061553]
  - [kernel] trace: Make register/unregister_ftrace_command __init (Takahiro MUNEDA) [1119721 1061553]
  - [block] nvme: Initialize device reference count earlier (David Milburn) [1119720 1081734]
  - [ata] ahci: accommodate tag ordered controller (David Milburn) [1117154 1083746]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1115585 1109703]
  - [s390] af_iucv: correct cleanup if listen backlog is full (Hendrik Brueckner) [1115584 1109033]
  - [mm] Revert: vmscan: do not swap anon pages just because free+file is low (Johannes Weiner) [1114938 1102991]
  - [drm] nouveau/bios: fix a bit shift error introduced by recent commit (Ulrich Obergfell) [1114869 1089936]
  - [ethernet] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1107722 1067154]
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102708 1102710] {CVE-2014-3917}
  - [block] mtip32xx: mtip_async_complete() bug fixes (Jeff Moyer) [1125776 1102281]
  - [block] mtip32xx: Unmap the DMA segments before completing the IO request (Jeff Moyer) [1125776 1102281]
  - [net] l2tp: don't fall back on UDP [get|set]sockopt (Petr  Matousek) [1119465 1119466] {CVE-2014-4943}
  - [s390] ptrace: correct insufficient sanitization when setting psw mask (Hendrik Brueckner) [1114090 1113673] {CVE-2014-3534}


