# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-2
changelog:
  - Bump version to 1.4.3.32-2
  - Resolves: Bug 2149956 - ipa-server-install displays mdd failure Server is unwilling to perform


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-3
changelog:
  - Bump version to 1.4.3.32-3
  - Resolves: Bug 2149956 - change default password storage scheme to be backwards compatible with RHEL 7


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Wim Taymans <wtaymans@redhat.com> - 2.0.10-2
changelog:
  - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit
    functions in video/SDL_blit*.c
  - Resolves: rhbz#1756279


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Mahailiang <mahailiang@openanolis.org> - 2.10.9-24.0.1
changelog:
  - Rebrand to Anolis
  - Modify some strings
  - Add anolis type
  - use extern in header files when declaring global variables for compatible gcc10 build (zhouwt@linux.alibaba.com)
  - remove the libreport package in requires (songnannan@linux.alibaba.com)


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.1
changelog:
  - Fix anolis bootloader
  - Add support for loongarch
  - Add anolis install files
  - Remove subscription and CDN
  - Rebrand to Anolis


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.4
changelog:
  - Fix installer exception with no swap part
    Bugzilla: 1304
  - Fix boot.iso exception with no baseos repo
    Bugzilla: 1325
  - Set the default language to Chinese and default timezone to Shanghai


author: wangkaiyuan <wangkaiyuan@inspur.com> - 33.16.6.7-1.0.7
changelog:
  - Add post-script snippets (Chang Gao <gc-taifu@linux.alibaba.com>)
  - Hide CompatibleKernel in anaconda on Phytium Sever CPU
  - Update kernel selection description (Bo Ren <rb01097748@alibaba-inc.com>)


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-53
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-55
changelog:
  - Resolves: rhbz#2121827 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 1.66.0-13.0.1
changelog:
  - backport patches to fit with C++20 until upstream chase up:
    * Replace-std::allocate-with-std::allocator_traits.patch
    * Replace-std::allocate-deprecated-in-C++17.patch
    * Implement-empty_value.patch
    * Make-empty_value-trivial-if-T-is-trivial.patch
    * Add-documentation-for-empty_value.patch
    * Name-the-empty_value-template-parameters.patch
    * Improve-C++11-allocator-support.patch
    * Use-boost::allocator_rebind-instead-of-A::template-rebind.patch
    * Implement-allocator-access-utilities.patch


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/e99286b)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/60e6bc0)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Chen Li <chenli@loongson.cn> - 15.0.7-1.0.3
changelog:
  - Support LoongArch
  - Workaround: add buildrequires of clang on loongarch64 as
    the missing of gcc-toolset-12 currently


author: Richard Hughes <richard@hughsie.com> 1.4.4-1
changelog:
  - New upstream version
  - Actually install the installed tests
  - Port manpages to xsltproc and DocBook 5


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> - 4.8.5-36.1.0.1
changelog:
  - Modify the release information and add the bugzilla address of openanolis
  - Resolve doc build error


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Jonathan Lebon <jlebon@redhat.com> - 0.9.1-4
changelog:
  - Add xz-devel BR to ensure we're not bundling
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974453


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to 2.4 upstream tarball
  - Drop patches: cppcheck-1.83-tinyxml.patch, cppcheck-1.81-translations.patch, cppcheck-1.78-cfgdir.patch.
  - Bump BuildRequires for tinyxml2-devel to 2.6.0 at least.
  - Add BuildRequires pandoc.
  - There is no more bundled tinyxml in this new version of cppcheck.
  - Use the man/build-html.sh script to build the html version of the manual
  - Adjust $datadir/CppCheck to $datadir/Cppcheck.
  - Add $bindir/cppcheck*.qm files to the package.
  - Resolves: rhbz#1959478


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Weitao Zhou <zhouwt@linux.alibaba.com> 1.20.0-29.0.1.2
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(Weisson)


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 6.0.125-1.0.1
changelog:
  - Fix sdk suffix for Anolis OS
  - Update netstandard-targeting-pack-2.1 acquisition method (Zhao Hang)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-8.1
changelog:
  - Fix etags local command injection vulnerability (#2184369)
  - Fix htmlfontify.el command injection vulnerability (#2184368)
  - Fix ruby-mode.el local command injection vulnerability (#2184367)
  - Fix ob-latex.el command injection vulnerability (#2184377)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-14
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.7.0-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Fix build failure due to missing include and `reallocarray' prototype
  - Add gettext-devel, automake and libtool to build dependencies, and
    execute `autoreconf -i' to regenerate files after patching configure.ac


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-1
changelog:
  - Resolves: #2018451 - Rebase of frr to version 7.5.1
  - Resolves: #1975361 - the dynamic routing setup does not work any more


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-2
changelog:
  - Resolves: #1941765 - AVCs while running frr tests on RHEL 8.4.0 Beta-1.2
  - Resolves: #1714984 - SELinux policy (daemons) changes required for package


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-6
changelog:
  - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-7
changelog:
  - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Jakub Jelinek <jakub@redhat.com> 10.1.1-2
changelog:
  - update from releases/gcc-10 branch
    - PRs c++/90212, c++/90479, c++/90915, c++/91529, c++/92103, c++/92633,
  	c++/92652, c++/92838, c++/93310, c++/93467, c++/93698, c++/93822,
  	c++/94128, c++/94817, c++/94829, c++/94885, c++/94937, c++/94955,
  	c++/95003, c++/95020, c++/95050, c++/95066, c++/95087, c++/95137,
  	c++/95158, c++/95181, c++/95197, c++/95222, c++/95241, c++/95319,
  	c++/95328, c++/95344, c++/95345, c++/95346, c++/95350, c++/95371,
  	c++/95386, c++/95440, c++/95508, c++/95560, c++/95562, c/95040,
  	c/95580, d/94970, d/95166, d/95167, d/95168, debug/95080,
  	fortran/39695, fortran/50392, fortran/59107, fortran/92993,
  	fortran/93366, fortran/93497, fortran/94109, fortran/94361,
  	fortran/94397, fortran/94672, fortran/95088, fortran/95090,
  	fortran/95091, fortran/95106, fortran/95373, fortran/95500,
  	fortran/95503, fortran/95530, fortran/95537, fortran/95544,
  	fortran/95611, gcov-profile/95332, ipa/94947, ipa/95113,
  	libfortran/95104, libfortran/95119, libfortran/95191,
  	libfortran/95390, libgomp/92854, libstdc++/77691, libstdc++/92894,
  	libstdc++/93983, libstdc++/94906, libstdc++/94933, libstdc++/95289,
  	libstdc++/95322, libstdc++/95578, lto/94848, lto/95190,
  	middle-end/94940, middle-end/95108, middle-end/95551,
  	middle-end/95622, sanitizer/94910, sanitizer/95634, target/91695,
  	target/94591, target/94735, target/94959, target/95169, target/95212,
  	target/95220, target/95255, target/95258, target/95355, target/95420,
  	target/95525, target/95528, testsuite/95361, testsuite/95575,
  	web/95380
  - correct instructions for creation of newlib tarball, filter out sun-rpc
    licensed code that is never used during the package build


author: Jakub Jelinek <jakub@redhat.com> 10.2.1-1
changelog:
  - update from releases/gcc-10 branch
    - GCC 10.2 release
    - PRs bootstrap/94998, c++/90916, c++/95477, c++/95505, c++/95518,
  	c++/95519, c++/95711, c++/95719, c++/95736, c++/95789, c++/95813,
  	c++/95976, c++/96052, c++/96063, c++/96077, c++/96104, c++/96105,
  	c++/96179, c/95141, d/95173, d/95250, debug/95343, fortran/71706,
  	fortran/88379, fortran/93337, fortran/95340, fortran/95366,
  	fortran/95587, fortran/95687, fortran/95688, fortran/95689,
  	fortran/95707, fortran/95708, fortran/95709, fortran/95743,
  	fortran/95812, fortran/95826, fortran/95827, fortran/95828,
  	fortran/95829, fortran/95880, fortran/95881, fortran/95978,
  	ipa/12345, ipa/93223, ipa/96040, ipa/96130, libstdc++/91153,
  	libstdc++/91807, libstdc++/94087, libstdc++/94627, libstdc++/94936,
  	libstdc++/95282, libstdc++/95851, libstdc++/95915, lto/91576,
  	lto/95604, middle-end/94600, middle-end/94964, middle-end/95114,
  	middle-end/95118, middle-end/95270, middle-end/95493,
  	middle-end/95690, middle-end/95810, middle-end/95903,
  	middle-end/96194, target/12345, target/93224, target/93492,
  	target/94791, target/94891, target/95018, target/95105, target/95347,
  	target/95581, target/95683, target/95713, target/95726, target/95874,
  	target/96001, target/96125, target/96174, testsuite/96180,
  	tree-optimization/90838, tree-optimization/94969,
  	tree-optimization/95049, tree-optimization/95110,
  	tree-optimization/95133, tree-optimization/95308,
  	tree-optimization/95487, tree-optimization/95638,
  	tree-optimization/95717, tree-optimization/95804,
  	tree-optimization/95857, tree-optimization/96075,
  	tree-optimization/96133, tree-optimization/96146
    - disable s390x multilibs also for ELN
    - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
      later


author: Jakub Jelinek <jakub@redhat.com> 10.2.1-2
changelog:
  - update from releases/gcc-10 branch
    - PRs c++/95591, c++/95599, c++/95823, c++/95824, c++/95895, c/96377,
  	d/96140, fortran/89574, fortran/93567, fortran/93592, fortran/95585,
  	fortran/95612, fortran/95980, fortran/96018, fortran/96086,
  	fortran/96220, fortran/96319, lto/45375, middle-end/96335,
  	target/95435, target/96190, target/96236, target/96260, target/96402,
  	tree-optimization/96058
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Jakub Jelinek <jakub@redhat.com> 10.2.1-3
changelog:
  - update from releases/gcc-10 branch
    - PRs c++/95428, c++/96082, c++/96106, c++/96164, c++/96199, c++/96497,
  	c/96545, c/96549, c/96571, d/96250, d/96254, d/96301, debug/96354,
  	fortran/93553, fortran/96312, fortran/96486, ipa/95320, ipa/96291,
  	ipa/96482, libstdc++/89760, libstdc++/95749, libstdc++/96303,
  	libstdc++/96484, libstdc++/96718, lto/95362, lto/95548,
  	middle-end/96426, middle-end/96459, target/93897, target/95450,
  	target/96191, target/96243, target/96446, target/96493, target/96506,
  	target/96525, target/96530, target/96536, target/96562, target/96682,
  	tree-optimization/96483, tree-optimization/96535,
  	tree-optimization/96722, tree-optimization/96730,
  	tree-optimization/96758
  - mangle some further symbols needed for debug info during early dwarf
    (#1862029, PR debug/96690)
  - during %check perform tests whether annobin is usable with the newly built
    compiler or whether it might need to be rebuilt
  - disable graphite for ELN


author: Chunmei Xu <xuchunmei@linux.alibaba.com> 10.2.1-3.1
changelog:
  - Rebuild for Alibaba Cloud Linux
  - set gcc date to 20200828
  - append libc_version info to GCC version string
  - remove nvptx build
  - disable multilib
  - remove BuildRequires: libzstd-devel


author: Weitao Zhou <yunqi.zwt@alibaba-inc.com> 10.2.1-3.4
changelog:
  - Handle more SVE vector constants on aarch64
  - Append alicloud_base_release to gcc version
  - Add support for Neoverse N2 CPU aarch64


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1996085)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110582)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Haochen Jiang <haochen.jiang@intel.com> 12.2.1-7.4.0.1
changelog:
  - Add attribute hot judgement for INLINE_HINT_known_hot hint
  - Enable small loop unrolling for O2
  - i386: Only enable small loop unrolling in backend [PR 107692]


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Backport patches fixing abort when working directory is deleted.
    (RHBZ 1869484, Sergio Durigan Junior)


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-7
changelog:
  - add missing dependency for automake and libtool
  - explicitly use python2 as default python interpreter


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Weisson <wenshu.hx@alibaba-inc.com> - 3.2.0-2.0.1
changelog:
  - Add doc sub package
  - Disable pie mode for loongarch64 (geliwei@openanolis.org)
  - Support loongarch build (geliwei@openanolis.org)


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Neal Gompa <ngompa13@gmail.com> - 1.8.0-3
changelog:
  - Add patch to fix gmock segfaults (rhbz#1513522)
  - Add patch to properly version the libraries
  - Move the documentation to the right place
  - Drop unneeded ldconfig scriptlets:
      https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
  - Some clean up


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 40.0.1-13.0.1
changelog:
  - Add doc sub package
  - Modify systemd buildrequirement to version 239 and rebuild with systemd-239 (<gc-taifu@linux.alibaba.com>)


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Kalev Lember <klember@redhat.com> - 3.36.1-3
changelog:
  - Upload correct 3.36.1 tarball
  - Fix hardcoded desktop and appdata names to match what's in RHEL 8.3
  - Add back shell extensions support
  - Resolves: #1839774


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
changelog:
  - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
  - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
  - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
  - run integration tests in check phase
  - update FIPS patch with latest changes in Go packaging


author: Sam Feifer <sfeifer@redhat.com> 7.5.15-5
changelog:
  - resolve RHEL-13284
  - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work
  - testing is turned off due to test failures caused by testing date mismatch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 2.5-1
changelog:
  - Update to 2.5.
  - Updated license tag (the license that applies to the binaries) to GPLv3+.
  - Bring spec file up to date by relying on recommended macros in build phase.
  - Arched requires for base package in gsl-devel.


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-50
changelog:
  - Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer
    overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write
    beyond bounds


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-51
changelog:
  - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via
    ap_rwrite()
  - Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in
    ap_strcmp_match()
  - Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism
  - Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible
    request smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56
changelog:
  - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56.4
changelog:
  - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.4.37-56.0.1.6
changelog:
  - Rebrand for Anolis OS(Binchen Zhang)
  - Requires system-logos-httpd(Binchen Zhang)
  - Support loongarch64 platform(Liwei Ge)
  - add patch for CVE-2023-27522(guo.chuang@zte.com.cn)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.32.20180415git.el8
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2056566]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2056566]
  - Resolves: bz#2056566
    ([RHEL8.6][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update since the ifdown/ifup was not supported on RHEL8)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-13
changelog:
  - Resolves: #1897548 - Rebuild IBus emoji with unicode-emoji-13.0-4 and cldr-emoji-annotation-39-2
  - Rebuild ibusemojigen.h and ibusunicodegen.h
  - Add ibus-1897548-emoji-unicode.patch to lookup Unicode names
  - Add U+32FF to IBusUnicodeData
  - Add ibus-po-1.5.19-20210706.tar.gz


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-0.1
changelog:
  - Rebase to PKI 10.12.0
  - Bug 1904112 - pki fails to start if empty dir /var/lib/pki/pki-tomcat/kra exists
  - Bug 1984455 - [RFE] Date Format on the TPS Agent Page
  - Bug 1980378 - 'keyctl_search: Required key not available' message when running 'ipa-healthcheck'
  - Bug 2004084 - Reinstall of the same ipa-replica fails with 'RuntimeError: CA configuration failed.'
  - Bug 2006070 - Upgrades incorrectly add secret attribute to connectors


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.12.0-4
changelog:
  - Bug 2107334 - CVE-2022-2414 access to external entities when parsing XML can lead to XXE
  - Rename packages to idm-pki


author: Red Hat PKI Team <rhcs-maint@redhat.com> 10.14.3-1
changelog:
  - Rebase to PKI 10.14.3
  - Bug 1959057 - An error has ocorred (IPA Error 4301:CertificateOperationError)
  - Bug 2016164 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug 2022561 - ipa-healthcheck CADogtagCertsConfigCheck fail to process the scenario of renewed IPA CA certificates ( ipa get_cert_from_db() )


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-6
changelog:
  - webui: Allow grace login limit
    Resolves: RHBZ#2109243
  - check_repl_update: in progress is a boolean
    Resolves: RHBZ#2117303
  - Disabling gracelimit does not prevent LDAP binds
    Resolves: RHBZ#2109236
  - Set passwordgracelimit to match global policy on group pw policies
    Resolves: RHBZ#2115475


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-8
changelog:
  - ipa man page format the EXAMPLES section
    Resolves: RHBZ#2129895
  - Fix canonicalization issue in Web UI
    Resolves: RHBZ#2127035
  - Remove idnssoaserial argument from dns zone API. 
    Resolves: RHBZ#2108630
  - Warn for permissions with read/write/search/compare and no attrs
    Resolves: RHBZ#2098187
  - Add PKINIT support to ipa-client-install
    Resolves: RHBZ#2075452
  - Generate CNAMEs for TXT+URI location krb records
    Resolves: RHBZ#2104185
  - Vault: fix interoperability issues with older RHEL systems
    Resolves: RHBZ#2144737
  - Fix typo on ipaupgrade.log chmod during RPM %post snipppet
    Resolves: RHBZ#2140994


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.11-1
changelog:
  - Rebase ipa to 4.9.11
    Resolves: RHBZ#2141316
  - updates: fix memberManager ACI to allow managers from a specified group
    Resolves: RHBZ#2056009
  - Defer creating the final krb5.conf on clients
    Resolves: RHBZ#2148259
  - Exclude installed policy module file from RPM verification
    Resolves: RHBZ#2149567
  - Spec file: ipa-client depends on krb5-pkinit-openssl
    Resolves: RHBZ#2149889


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.11-4
changelog:
  - trust-add: handle missinf msSFU30MaxGidNumber
    Resolves: RHBZ#2162355
  - Backport latest test fixes for python3-ipatests
    Resolves: RHBZ#2166929
  - server install: remove error log about missing bkup file
    Resolves: RHBZ#2160389
  - automember-rebuild: add a notice about high CPU usage
    Resolves: RHBZ#2018198
  - ipa-kdb: PAC consistency checker needs to handle child domains as well
    Resolves: RHBZ#2166324


author: Julien Rische <jrische@redhat.com> - 4.9.11-7
changelog:
  - Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost
    Resolves: rhbz#2230073


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.2.1-4
changelog:
  - Python 2 binary package renamed to python2-isomd5sum
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.2-1
changelog:
  - Don't put DESTDIR in the isomd5sum.pc file
  - New Version 1.2.2 (bcl)
  - Fix aligned alloc parameters and overflow on 32bit size_t (#1497458) (squimrel)
  - Fix memory leak (squimrel)
  - Add pkgconfig file (squimrel)
  - Remove line-breaks from error messages (squimrel)
  - Make library C++ compatible (squimrel)
  - Constify function signatures (squimrel)
  - Revert checkCallback function signature (squimrel)


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.3-1
changelog:
  - New Version 1.2.3 (bcl)
  - Fix 32bit bug on large files (squimrel)
  - Don't put DESTDIR in the isomd5sum.pc file (bcl)


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Add version of bundled zlib (bumped from 1.2.11 to 1.2.13 with this update)
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Sync the copy of the portable specfile with the latest update
  - Related: rhbz#2217710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Use tapsets from the misc tarball
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - The 'prelease' variable should refer to 'portablerelease', not 'rpmrelease'
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-13641


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12309
  - Resolves: RHEL-13600
  - Resolves: RHEL-13628
  - Resolves: RHEL-13635
  - Resolves: RHEL-13641
  - Resolves: RHEL-13612
  - Resolves: RHEL-13621


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217713
  - Resolves: rhbz#2196318
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224411


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236589


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12222
  - Resolves: RHEL-13546
  - Resolves: RHEL-13553
  - Resolves: RHEL-13559
  - Resolves: RHEL-13566
  - Resolves: RHEL-13572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.8+1 (EA)
  - Update release notes to 17.0.8+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1
  - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Related: rhbz#2217714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236591


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12204
  - Resolves: RHEL-13670
  - Resolves: RHEL-13680
  - Resolves: RHEL-13689
  - Resolves: RHEL-13708
  - Resolves: RHEL-13658


author: - Jiri Vanek <jvanek@redhat.com> - 0.32.92-1
changelog:
  - first update ever
  - to newest wrapper 32.92 with faith to fix some issues
  - added build requirments of gtk3-devel, at-spi2-atk-devel and at-spi2-core-devel
  - introduced libver macro to avoid duplicated entry


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - Remove maven-surefire-provider-junit5 dependency as it doesn't exist in RHEL 8.
  - Correct some typos.
  - Unable to build until criu-devel is available in RHEL 8.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972024


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
changelog:
  - Rebase to upstream JSS v4.8.1
  - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
  - Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.3-1
changelog:
  - Rebase to JSS 4.9.3
  - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8]


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.9.4-1
changelog:
  - Rebase to JSS 4.9.4
  - Bug 2013674 - JSS cannot be properly initialized after using another NSS-backed security provider


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Liwei Ge <geliwei@openanolis.org> - 7.6.2-3.0.2
changelog:
  - Spec: sync loongson patch and modify in spec (XueZhixin)
    Patch :0001-libatomic_ops-7.6.2-add-loongarch.patch


author: Simone Caronni <negativo17@gmail.com> - 0.9.3-2
changelog:
  - Use autotools to get rid of RPATH.
  - Fix Java build requirements for RHEL/CentOS 7.
  - Clean up SPEC file, rpmlint fixes.
  - Add license macro.


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Richard W.M. Jones <rjones@redhat.com> - 1.14-1
changelog:
  - Rebase to 1.14.
  - Use newer upstream fork at https://github.com/ofalk/libdnet
  - Drop multilib fix now uptream (RHBZ#342001 RHBZ#1915838).
  - Drop unapplied shrext patch, no longer needed.


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.44.0-4
changelog:
  - Autodetect backing format for qemu-img create -b
  - Move appliance to separate subpackage
  - Read rpm database through librpm
    resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094


author: Liwei Ge <geliwei@openanolis.org> - 1:1.44.0-9.0.1
changelog:
  - Add REDHAT as compatible distro and anolis info
  - Do not download packages from net
  - Fix build with distro
  - Add buildrequires


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.1-0.1
changelog:
  + libimobiledevice-1.2.1-0.1
  - Add support for newer devices
  - This is a snapshot of the in-development 1.2.1 version


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Christine Caulfield <ccaulfie@redhat.com> - 1.25-1
changelog:
  Rebase to 1.25 for PMTUd fixes
    Resolves: rhbz#2161172

    * Wed Jul 27 2022 Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
    Don't run nozzle_up_down tests, as they don't work in RH CI
    Resolves: rhbz#2024095


author: Gergely Gombos <gombosg@gmail.com> - 2.0.2.3-3
changelog:
  - Move unversioned symlinks to the base package. Linked packages dynamically load (dlopen) this module with the name libldacBT_enc.so.


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8-0.1.alpha
changelog:
  - 0.8alpha
  - use %make_build %make_install %ldconfig_scriptlets %license
  - devel: use %{?_isa} to tighten dep on main pkg
  - drop deprecated Group: tag
  - %files: tighten to include library soname


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.1-0.1.alpha
changelog:
  - 0.9.1alpha
  - libmspack-0.8-0.1.alpha corrupts extracted cab files (#1647033)
  - examples no longer installed (by default)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-2
changelog:
  - Removed ldconfig scriptlets as per
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-4
changelog:
  - Added gcc-c++ to BuildRequires as per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Bastien Nocera <bnocera@redhat.com> - 2.2.0-1
changelog:
  + libplist-2.2.0-1
  - Update to 2.2.0, breaking the ABI
  - Stop linking python module against libpython


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> 1:7.1.8.1-8.0.1
changelog:
  - Add configuration file and vemdor for Anolis OS
  - Fit build on Anolis OS 8
  - Remove loongarch64 arch


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173964
    Resolves: rhbz#2173970


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-13
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2153688)
  - tools: Fix install_mode for some scripts (rhbz#2153688)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-15
changelog:
  - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011)
  - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011)
  - util: make reuse of ccw device address format constant (rhbz#2165011)
  - util: refactor ccw address constants into virccw (rhbz#2165011)
  - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011)
  - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011)
  - util: add ccw device address parsing into virccw (rhbz#2165011)
  - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011)
  - nodedev: refactor css format from ccw format method (rhbz#2165011)
  - nodedev: refactor ccw device address parsing from XML (rhbz#2165011)
  - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011)
  - schemas: refactor out nodedev ccw address schema (rhbz#2165011)
  - nodedev: add optional device address of channel device to css device (rhbz#2165011)
  - nodedev: add tests for optional device address to css device (rhbz#2165011)
  - nodedev: prevent internal error on dev_busid parse (rhbz#2165011)
  - rpc: Fix memory leak of fds (rhbz#2165428)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-19
changelog:
  - qemu: domain: Fix logic when tainting domain (rhbz#2174447)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447)


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 8.0.0-20
changelog:
  - Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap (CVE-2023-2700)
  - Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)


author: xianglai li <lixianglai@loongson.cn> - 8.0.0-21
changelog:
  - Synchronize upstream patches "Use correct tpm device for all non-x86"
  - Synchronize upstream patches "validate: Drop tpm-tis arch validation"


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-3
changelog:
  - add support for active-backup team interface (#1685467)
  - add support for more accurate synchronization to phc2sys (#1677217)
  - add hwts_filter option to ptp4l (#1708554)
  - limit unicast message rate per address and grant duration (#1707395)
  - fix comparing of unicast addresses (#1707395)
  - fix building with new kernel headers (#1707395)
  - update testsuite (#1707395)
  - don't leak memory when allocation fails (#1707395)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.8.1-11.0.1
changelog:
  - fix build failed for better compatibility for glibc2.30 and glibc2.28
  - Fix gcc10 -fno-common compile issue for compatible with gcc10&gcc8 build


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Sebastian Kisela <skisela@redhat.com> - 4.6.2-1
changelog:
  - New release 4.6.2.
  - Convert deprecated specfile python macros to use python2 macros.
  - Explicitly depend on gcc, as it was removed from buildroot default packages.


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in
        oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference
        when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-5
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Bo Ren <rb01097748@alibaba-inc.com> - 3.4.2-1.0.1
changelog:
  - Do not require valgrind for loongarch64 (geliwei@openanolis.org)
  - Add -fallow-argument-mismatch for compatible with gcc10 build (zhouwt@linux.alibaba.com)


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: zhangbinchen <zhangbinchen@openanolis.org> - 8.0.32-1.0.1
changelog:
  - remove check_testsuite
  - redefine ignore_testsuite_result
  - Support loongarch64 platform (liwei.glw@openanolis.org)
  - skip have_32bits_time test on loongarch64 (liwei.glw@openanolis.org)
  - fix main.derived_condition_pushdown test (rb01097748@alibaba-inc.com)
  - fix loaddata_special test for loongarch64 (rb01097748@alibaba-inc.com)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Renbo <rb01097748@alibaba-inc.com> - 1:1.20.1-1.0.1
changelog:
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - Update html pages (geliwei@openanolis.org)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: Liwei Ge <geliwei@openanolis.org> - 1:1.22.1-1.0.1
changelog:
  - Update html pages
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - add LSE compiling optimization and O3 (fuyuan.wh@alibaba-inc.com)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1934566, RHBZ#1934598
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-2
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Fix typo, BR systemtap-sdt-level always, remove y18n patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1945512, RHBZ#1945286
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - Resolves CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988596, RHBZ#1993814, RHBZ#1993808, RHBZ#1993094
  - Resolves: RHBZ#1986742, RHBZ#1993946, RHBZ#1993939, RHBZ#1989426


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.12-1
changelog:
  - Resolves: RHBZ#2084651
  - Resolves: #2086773, #2086777, #2086781, #2086786, #2086790
  - Resolves: #2086795, #2086799, #2086804, #2086809, #2086813
  - Rebase to last v12.x release
  - Remove patch for CVE-2021-23343


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2026325
  - Resolves: RHBZ#2014130, RHBZ#2014124, RHBZ#2013826, RHBZ#2024921
  - Rebase to new version to fix CVEs


author: Jan Staněk <jstanek@redhat.com> - 1:14.18.2-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest release
  - Resolves: #2106281, #2108056, #2108061, #2108066, #2108071, #2108139
  - Remove libs patch
  - Build without corepack


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.1-2
changelog:
  - Apply upstream fix for CVE-2022-24999
    Resolves: CVE-2022-24999
  - Record CVEs fixed by current or previous upstream releases
    Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153712
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.18.1-2
changelog:
  - Record CVE references already addressed in this or previous upstream versions
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
    Resolves: rhbz#2153713
    Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
    Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188289
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222288


author: Dominik Rehák <drehak@redhat.com> - 1:16.20.2-1
changelog:
  - Rebase to 16.20.2
    Resolves: rhbz#2231866
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1:16.20.1-2.0.2
changelog:
  - Remove loongarch64 arch
  - Update requires and recommands
  - Fixes CVE-2022-25883 (liubo03@inspur.com)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178086
  - Resolves: CVE-2022-25881, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.14.2-3
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2022-4904
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188290 rhbz#2166926
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222287


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228939
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.18.2-1
changelog:
  - Rebase to 18.18.2 (Security release)
  - Switch icu from zip to tgz
  - Fixes #2228925, CVE-2023-45143, CVE-2023-44487, CVE-2023-38552, CVE-2023-39333


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-10
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.14-12
changelog:
  - Get rid of all conditions that are always true for both EPEL-7 and Fedora
    as it's quite unlikely we'd use this specfile on EPEL-6
  - Remove the sysvinit script and all the scriptlets around it
  - Unconditionally use systemd scriptlet macros and systemd_requires
  - Unconditionally build the PAM module as the PADL module is long dead
  - Remove the auto-migration of settings from nss_ldap as it's been
    long gone from Fedora
  - Don't check /etc/sysconfig/authconfig as authconfig is on its way
    out from Fedora
  - Use only spaces, not tabs, to stop my editor from looking like a
    Christmas tree
  - Remove the obsolete Group stanza
  - Make nscd Recommended, not Required


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-1
changelog:
  - Upgrade to the latest upstream
    - Disable the python utilities
    - Don't bother with failing pylint test as we don't ship the python
      utilities
  - Drop unused validname and exitcode patches, port strtoid overflow
    patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-2
changelog:
  - Apply a patch by Lukas Slebodnik to allow root to write to the
    /var/run/nslcd directory
  - Resolves: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                             with SELinux enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-3
changelog:
  - Also change the pemissions on tmpfiles
  - Related: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                            with SELinux enabled


author: Tomas Halman <thalman@redhat.com> - 0.9.9-4
changelog:
  - moving temp files from /var/run to /run
  - Resolves: rhbz#1969826 - tmpfiles snippet needs updated path for
                             nss-pam-ldapd


author: Andreas Schneider <asn@redhat.com> - 1.1.12-1
changelog:
  - resolves: rhbz#2139665 - Rebase to version 1.1.12
  - resolves: rhbz#2124635 - Reduce dependencies of the package


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.7-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2123641


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Paul Wouters <pwouters@redhat.com> - 1.4.14-1
changelog:
  - Update to 1.4.14 as first steop to migrating to 2.x
  - Resolves: rhbz#1413254 Move tmpfiles.d config to %{_tmpfilesdir}, install LICENSE as %license


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Jan Černý <jcerny@redhat.com> - 1.3.5-8
changelog:
  - Allow local DS components (rhbz#1970529)
  - Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
  - Add an alternative source of hostname (rhbz#1977668)
  - Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)


author: Jan Černý <jcerny@redhat.com> - 1.3.5-9
changelog:
  - Lower memory limits and improve their checking (rhbz#2021851)
  - Remove timestamp from the user manual (rhbz#2022364)


author: Jan Černý <jcerny@redhat.com> - 1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041781)
  - Select and exclude groups of rules on the command line
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
  - Remove oscap-remediate service (rhbz#2111360)


author: Jan Černý <jcerny@redhat.com> - 1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159290)
  - Fix error when processing OVAL filters (rhbz#2126882)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2222864)
  - Fix systemd* probes unit enumeration (rhbz#2223547)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Tomáš Hozza <thozza@redhat.com> - 76-2
changelog:
  - distro/rhel: add payload repos to os package set (rhbz#2177699)
  - Manifest: always set kernel options in grub2 stage (rhbz#2162299)


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-2
changelog:
  - Resolves: rhbz#1681879 - osinfo-db-tools changes blocked until gating
                             tests are added


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1712426 - New defects found in
                             osinfo-db-tools-1.5.0-2.el8


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-4
changelog:
  - Related: rhbz#1712426 - New defects found in
                            osinfo-db-tools-1.5.0-2.el8


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2027788


author: Luca BRUNO <lucab@redhat.com> - 2022.2-5
changelog:
  - Backport enablement patches for Secure Execution on s390x
    https://github.com/ostreedev/ostree/pull/2694
    Resolves: rhbz#2120522
  - Backport security fix to verify signatures are minimum length (advisory GHSA-gqf4-p3gv-g8vw)
    https://github.com/ostreedev/ostree/pull/2696
    Resolves: rhbz#2119444


author: Colin Walters <walters@verbum.org> - 2022.2-6
changelog:
  - Backport https://github.com/ostreedev/ostree/commit/0085494e350c72599fc5c0e00422885d80b3c660
  - Resolves: rhbz#2134629


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.2-8
changelog:
  - Backport for https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
  - Resolves: rhbz#2229895


author: Chris Lumens <clumens@redhat.com> - 2.1.5-8
changelog:
  - Rebuild with new release due to build system problems
  - Related: rhbz2168249
  - Related: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.6-1
changelog:
  - Rebase pacemaker on upstream 2.1.6 final release
  - Resolves: rhbz1578820
  - Resolves: rhbz1632951
  - Resolves: rhbz1876173
  - Resolves: rhbz2010084
  - Resolves: rhbz2030869
  - Resolves: rhbz2078611
  - Resolves: rhbz2106642
  - Resolves: rhbz2160206
  - Resolves: rhbz2168633


author: Chris Lumens <clumens@redhat.com> - 2.1.6-3
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218232
  - Resolves: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz1931023
  - Resolves: rhbz1688149
  - Related: rhbz2106642
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224046
  - Related: rhbz2189300


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991763)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-1
changelog:
  - Fix several issues in the pcp-ss(1) utility (BZ 1981886)
  - Document pmproxy archive discovery further (BZ 2026726)
  - Improve SQL Server PMDA secure settings (BZ 2057615)
  - Rebase to latest stable version of PCP (BZ 2059461)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign warning message from pmie systemd unit file.


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-9
changelog:
  - Additional selinux policy rules for pmdabcc (BZ 2050094)
  - Describe working sudoers requiretty configuration (BZ 2093751)
  - Separate pmlogger_farm configuration mechanism (BZ 2101574)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-15
changelog:
  - Backport independent selinux policy rework (BZ 2111742)
  - Fix invalid memory access in pmfind utility (BZ 2135314)
  - Allow pcp-dstat(1) missed ticks suppression (BZ 2083897)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-463
changelog:
  - Run-require complete perl by perl-CPAN
  - Fix ownership of /usr/share/perl5/{ExtUtils,File,Module,Text,Time} directories
  - Fix a buffer overflow when compiling a regular expression with a bracketed
    character class with a white space
  - Fix a mismatch with the recursive subpatterns (GH#18096)
  - Update perl-IO-Zlib metadata
  - Fix sv_collxfrm macro to respect locale
  - Fix an iterator signedness in handling an mro exception (GH#18155)
  - Fix a code flow in Perl_sv_inc_nomg()


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-464
changelog:
  - Fix an undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.1-466
changelog:
  - 5.32.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.32.1/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-467
changelog:
  - Fix a crash in optimizing split() (GH#18232)
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-468
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-469
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix compilation warning from inflate.c (CPAN RT#107642)
    - Fix wrong FLAG_APPEND logic, analog to Bzip2 (CPAN RT#119007)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.071-1
changelog:
  - Update to 2.071
    - One (last?) compilation warning in bundled inflate.c (CPAN RT#119580,
      https://github.com/madler/zlib/issues/111)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 2:1.46-1
changelog:
  - Update to 1.46
    - Fixed the formatting for the CLDR "S" symbol, which in some cases would
      round up to 1 instead of truncating a value, e.g. the "SSS" symbol would
      format 999,999,999 nanoseconds as "1.000" (GH#71)


author: Paul Howarth <paul@city-fan.org> - 2:1.47-1
changelog:
  - Update to 1.47
    - DateTime::Duration->multiply now only allows integer multipliers (GH#73)
    - Added is_last_day_of_quarter() and is_last_day_of_year() methods (GH#72)
    - When an exception was thrown while adding a duration, the object could be
      left in a broken state with the duration partially applied; subsequent
      addition or subtraction would produce the wrong results (GH#74)
  - Add patch to support use without Sub::Util (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.48-1
changelog:
  - Update to 1.48
    - The last release would die if Sub::Util was not available, but this should
      just be an optional requirement (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.3-396
changelog:
  - Fix handling attribute specification on our variables (RT#131597)
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed filehandle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)
  - Link XS modules to pthread library to fix linking with -z defs
  - Correct shell bangs in tests
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.4-397
changelog:
  - 5.24.4 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.4-401
changelog:
  - Resolves: #1656293
    - Fix CVE-2018-18311 Integer overflow leading to buffer overflow
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-451
changelog:
  - Fix CVE-2020-10543 (an integer overflow from nested regex quantifiers)
    (bug #1837975)
  - Fix CVE-2020-10878 (a corruption of a state of a compiled regular expression
    due to an integer overflow) (bug #1837988)
  - Fix CVE-2020-12723 (a corruption of a state of a compiled regular expression
    due to recursive calls) (bug #1838000)


author: Paul Howarth <paul@city-fan.org> - 0.21-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find command using -empty and -delete
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:3.08-461
changelog:
  - Fix memory leak in function encode_method()
  - "Fix a memory leak on FB_CROAK" was reverted in Encode 3.15


author: Tom Stellard <tstellar@redhat.com> - 2:1.59-442
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.421-1
changelog:
  - Update to 0.421
    - Fix a lot of potential memory leaks when callbacks throw exceptions
    - Add some new functions: qsort, binsert, bremove, listcmp, arrayify
      (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401),
      lower_bound, upper_bound, equal_range, frequencies, occurances, mode
      (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
      Note that List::MoreUtils::XS doesn't guarantee API stability: this
      feature is only provided through List::MoreUtils as frontend
    - Improve configure toolchain to use Config::AutoConf 0.315
    - Speed up some inner loops by hinting the expected result
    - Fix mind screwed up issue in upper_bound and reduce elements visited in
      equal_range
    - Correct license in META (CPAN RT#122702)
    - Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl


author: Paul Howarth <paul@city-fan.org> - 0.422-1
changelog:
  - Update to 0.422
    - Rename 'occurances' into 'occurrences' (CPAN RT#91991, CPAN RT#122806)
    - Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS
    - Improve Makefile.PL regarding some build artifacts


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Fix dealing with lists with one element on bremove/binsert (GH#2)
    - Add support for compilers before C99
    - Fix some 32-bit compiler warnings
    - Add support for compilers without statement expression feature


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken format in part (GH#4)
    - Fix gcc 4.7 sequence point warning (GH#5)
    - Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)
    - Fix compiling issue on CentOS 4 and CentOS 5


author: Paul Howarth <paul@city-fan.org> - 0.428-1
changelog:
  - Update to 0.428
    - Fix build fails on perl ≥ 5.27.4 with -DDEBUGGING (CPAN RT#123613)
    - Update ppport.h to 3.37 for improved blead support
    - Fix context arg to croak() (CPAN RT#123869)
    - Fix one() returning true on empty list (CPAN RT#123870)
    - Pamper $a/$b/$_ refcounting bugs (CPAN RT#123868)


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Preparations for transferring maintenace to a new maintainer
    - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
      OpenSSL
    - Fixed free() error that causes "Free to wrong pool ..." message on Windows


author: Petr Pisar <ppisar@redhat.com> - 1.85-3
changelog:
  - Adapt to OpenSSL 1.1.1 (bug #1610376)
  - Adapt tests to system-wide crypto policy (bug #1610376)
  - Adapt tests to security level 2 system-wide crypt policy (bug #1610376)


author: Petr Pisar <ppisar@redhat.com> - 1.85-5
changelog:
  - Revert retry in Net::SSLeay::{read,write}() (bug #1610376)
  - Revert retry in Net::SSLeay::write_partial() (bug #1610376)


author: Paul Howarth <paul@city-fan.org> - 4.079-1
changelog:
  - Update to 4.079
    - Correct non-suppression of leading zeros in certain instances of new_no use
    - Put in missing code to propagate NetAddr::IP::Lite :nofqdn to IP.pm
  - Explicitly BR: perl-devel, needed for EXTERN.h
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %license where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - gailookup.pl.in: Add -P option to ease specification of port number
    - gailookup.pl.in: Add awareness of AI_ALL and AI_V4MAPPED
    - gailookup.pl.in: Add -r option to do reverse lookup
    - System inet_ntop broken in darwin (CPAN RT#113005)
    - Makefile.PL: Make Socket6 buildable on Android (CPAN RT#98181)
  - Simplify find commands using -delete
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - aclocal.m4 (IPv6_CHECK_INET_NTOP): inet_ntop(3) may return an
      IPv4-compatible IPv6 address (CPAN RT#113950)
  - BR: perl-generators


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - New maintainer: LEEJO
    - Add Changes file
    - Add link to github repo
    - Add strict and warnings
    - Add LICENSE to POD + LICENSE file
    - Add META.* files through make dist
    - Add .travis.yml for CI
  - This release by LEEJO → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Support binary and unicode symbol names (PR#8)
    - Fixed parsing error where the name contains a single colon but the last
      separator is ::


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Fix occasional segmentation fault on OpenBSD when malloc randomization
      causes nameptr to be at the beginning of the page (CPAN RT#117072)


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-4
changelog:
  - Fix typed parameter memory handling (rhbz #1602346)
  - Fix missing NWFilterBinding module (rhbz #1615841)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 1.1-23
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1:2.0129-5
changelog:
  - Fix CVE-2017-10672 (use-after-free by controlling the arguments to
    a replaceChild call) (bug #1470205)


author: Petr Pisar <ppisar@redhat.com> - 2.44-11
changelog:
  - Fix a buffer overwrite in parse_stream() with wide characters on the standard
    input (bug #1658512)


author: Paul Howarth <paul@city-fan.org> - 1:0.65-1
changelog:
  - Update to 0.65
    - Prevent warning about unused variables (GH#59)
    - Clarify documentation about exported functions


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.67-1
changelog:
  - Update to 0.67
    - Support standard tags !!str, !!map and !!seq instead of dying (GH#67)
    - Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean (GH#66)


author: Paul Howarth <paul@city-fan.org> - 1:0.68-1
changelog:
  - Update to 0.68
    - Fix regex roundtrip (GH#69, GH#70)
    - Fix loading of many regexes (GH#64, GH#71)


author: Paul Howarth <paul@city-fan.org> - 1:0.69-1
changelog:
  - Update to 0.69
    - Security fix: Add $LoadBlessed option to turn on/off loading objects
      (GH#73, GH#74)


author: Paul Howarth <paul@city-fan.org> - 1:0.70-1
changelog:
  - Update to 0.70
    - Fix format specifier/argument mismatch (GH#79)
    - Travis CI: Test on Perl 5.26 (GH#80)
    - Fix a C90-compatibility issue (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Fix handling carriage return after c-indicator (CPAN RT#41141)
    - Fix CHECK_UTF8 SEGV with empty len=0 strings (CPAN RT#61562)
    - Add missing function declarations
    - Tighten the TODO tests; no passing TODOs now, but still JSON
    - SingleQuote and \/ and \u roundtrips do fail
  - Drop EL-5 support
    - Drop Group: and BuildRoot: tags
    - Drop buildroot cleaning in %install
    - Drop explicit %clean section


author: Petr Pisar <ppisar@redhat.com> - 6:0.99.18-7
changelog:
  - Remove useless build-time dependency on ExtUtils::CBuilder
  - Fix documentation about numify() and stringify() trailing zeros
    (CPAN RT#64635, CPAN RT#122858)


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php
  - drop -mstackrealign option, workaround to #1593144


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Remi Collet <rcollet@redhat.com> - 7.4.19-2
changelog:
  - fix SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - fix Local privilege escalation via PHP-FPM
    CVE-2021-21703


author: Remi Collet <rcollet@redhat.com> - 7.4.33-1
changelog:
  - rebase to 7.4.33
  - fix: due to an integer overflow PDO::quote() may return unquoted string
    CVE-2022-31631


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Ray Strode <rstrode@redhat.com> - 0.9.4-11.git1688935
changelog:
  - Fix typo in --with-runtimedir argument to actually stop using
    /var/run and instead use /run instead
    Resolves: #2056473


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c5d8129)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/801b7e8)
  - Resolves: #2074144


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/47b310e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4cd74c2)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/1c4d1a7)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/37cd5bf)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/ab15cf1)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/b084df1)
  - Related: #2165695


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/94d8498)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/0a1d0e8)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/1602793)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/11afff3)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-17
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/1cc1f6c)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-18
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/ccfe4dd)
  - Resolves: #2121541


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/0b00627)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-20
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/d54ecc8)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bf400bd)
  - Resolves: #2180125


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/67f7e1e)
  - Resolves: #2182491


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/05037d3)
  - Resolves: #2183601


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/fd0ea3b)
  - Resolves: #2176833


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/aa5db47)
  - Resolves: #2189593


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bcea446)
  - Resolves: #2210111


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/ff30585)
  - Resolves: #2213843


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/dd490ff)
  - Resolves: #2229748


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/b9594a7)
  - Resolves: Jira:RHEL-5037


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-1.git82e8011
changelog:
  - rebase to v1, yay!
  - rebase conmon to 9b1f0a08285a7f74b21cc9b6bfd98a48905a7ba2
  - Resolves:#1623282
  - python interface removed, moved to https://github.com/containers/python-podman/


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-4.git921f98f
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818122


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-8.git921f98f
changelog:
  - fix "podman can not create user inside of container" regression introduced by
    patch for CVE-2021-20188
  - Related: #1918285


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-24
changelog:
  - fix CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/2c7b579)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - fix regression introduced by fix of CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Resolves: #1934649


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-27
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/c19e460)
  - Resolves: #2062401


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/9407ffd)
  - fixes CVE-2022-27651
  - Resolves: #2067545


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Dominik Rehák <drehak@redhat.com> - 10.23-2
changelog:
  - Backport fixes for CVE-2023-2454 and CVE-2023-2455
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207931


author: Filip Januš <fjanus@redhat.com> - 12.11-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 12.11
  - Release notes: https://www.postgresql.org/docs/release/12.11/


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.11-2
changelog:
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207933


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417
  - Resolves: RHEL-16085 RHEL-16123


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0500-1
changelog:
  - update to new upstream release, per:
    https://www.postgresql.org/message-id/20170905143318.95448B4C411@winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.00.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171013143455.9D0E5B4C412%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.01.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171227144219.0ABC4B4C417%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.02.0000-1
changelog:
  - build against libpq-devel and postgresql-test-rpm-macros
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180330143925.88CEDB40E51%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update: new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-7
changelog:
  - Added support for Intel GLK platforms (by intel-glk-support patch)
  - Added support for Intel CNL-U/Y platforms (by intel-cnluy-support patch)
  - Fixed problem with some C-states overwriting others
    (by cstates-rewrite-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-8
changelog:
  - Use intel_cpu only if APERF MSR is supported, it fixes powertop on KVM
    (by intel-cpu-check-aperf patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11-1
changelog:
  - New version
    Resolves: rhbz#1716721
  - Changed source to github and bootstraps sources
  - Dropped cstates-rewrite-fix, intel-glk-support, intel-cnluy-support,
    intel-cpu-check-aperf patches (all upstreamed)
  - Added bash completion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Stefan Becker <chemobejk@gmail.com> - 1.22.1-1
changelog:
  - update to 1.22.1:
      - fix multiple client detection
      - speed up Lync Autodiscover
      - avoid rare SSL read deadlock
      - various bug fixes


author: Stefan Becker <chemobejk@gmail.com> - 1.23.0-1
changelog:
  - update to 1.23.0:
      - add support for IPv6 addresses in SIP & SDP messages
      - extend libpurple D-Bus interface
      - don't load buddy photos from unknown sites by default
  - add BR dbus-1, gstreamer-rtp-1.0 & krb5


author: Stefan Becker <chemobejk@gmail.com> - 1.23.1-1
changelog:
  - update to 1.23.1:
      - add support for user redirect in Lync autodiscover
      - enable audio/video calls for Office365 cloud-based accounts
  - drop obsolete patch for GCC 8.0 compilation error


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Mark _test_external_close as expected failure
  - Sync https://git.centos.org/rpms/python-psycopg2/tree/c8-stream-2.7


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves: rhbz#2144072


author: Jacob Wang <jacob.wang@openanolis.org> - 2.7.18-13
changelog:
  - Pick up fix from Upstream
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Fix test_external_close_async check error
  - Sync from https://github.com/psycopg/psycopg2 (version 2.8)


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.10-16
changelog:
  - Subpackage python2-pyodbc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-8.1
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7008


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Rebase to 3.8.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.17-1
changelog:
  - Update to 3.8.17
  - Security fix for CVE-2023-24329
  - Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
  Resolves: rhbz#2173917, rhbz#263261


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: DengXiewei <dengxiewei@linux.alibaba.com> - 1.3.1-5.0.1
changelog:
  - Adding -fallow-argument-mismatch workaround for build failure with gfortran 10
  - Change -fallow-argument-mismatch flag condition for build failure


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-25
changelog:
  - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609]
  - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609]
  - Resolves: bz#2132609
    (qemu-kvm: backport some aarch64 fixes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-26
changelog:
  - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225]
  - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896]
  - Resolves: bz#2128225
    ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu)
  - Resolves: bz#2141896
    (VMs hung on vnc_clipboard_send)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-27
changelog:
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545]
  - Resolves: bz#2148545
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-28
changelog:
  - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448]
  - Resolves: bz#2155448
    (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-29
changelog:
  - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119]
  - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119]
  - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188]
  - kvm-migration-Read-state-once.patch [bz#2074205]
  - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713]
  - Resolves: bz#2125119
    (Mirror job with "copy-mode":"write-blocking" that used for storage migration can't converge under heavy I/O)
  - Resolves: bz#2161188
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)
  - Resolves: bz#2074205
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set)
  - Resolves: bz#2163713
    ([s390x] VM fails to start with ISM passed through)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-30
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617]
  - Resolves: bz#2147617
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-31
changelog:
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187]
  - Resolves: bz#2137740
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168187
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-32.el8_8
changelog:
  - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472]
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990]
  - Resolves: bz#2168472
    (Guest hangs when starting or rebooting)
  - Resolves: bz#2090990
    (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion `req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion `r->req.aiocb != NULL' failed [8.7.0])


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-32.0.1
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)


author: lixianglai <lixianglai@loongson.cn> - 6.2.0-33.0.2
changelog:
  - loongarch: Fixed the issue where qemu specifies the boot order
  - Fix CVE-2023-3354 (Liwei Ge <liwei.glw@alibaba-inc.com>)


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Colin Walters <walters@verbum.org> - 2022.10.86.gd8f0c67a-3
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/d8f0c67a0eba32281c9f2782a286e06486a4b909
    Resolves: rhbz#2105414


author: Colin Walters <walters@verbum.org> - 2022.10.90.g4abaf4b4-4
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/4abaf4b4
    Resolves: rhbz#2118774


author: Colin Walters <walters@verbum.org> - 2022.10.94.g89f58028-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/89f58028f0bea5b6fa59bdb3506078e09957ec00
  - Resolves: rhbz#2122289
  - Resolves: rhbz#2122299


author: Colin Walters <walters@verbum.org> - 2022.10.97.gade6df33-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/ac182cb920f84946bb155e9cf061db7f5f26e917
  - Resolves: rhbz#2122289


author: Colin Walters <walters@verbum.org> - 2022.10.112.g3d0ac35b-3
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4311/commits/a0f1275dfbd835b704355d095e610ac1f1254f25
    Resolves: rhbz#2170579


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.10.117.g52714b51-2
changelog:
  - Backport fb97c48f3 & eae7e1d8
    https://github.com/coreos/rpm-ostree/commit/fb97c48f3cd070c1ad559f3f43f86ad6548f6b02
    https://github.com/coreos/rpm-ostree/commit/eae7e1d8d692b5ce6d3d6eef29abbd7512ae4682
    Resolves: rhbz#2229804


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.5.9-110.0.1
changelog:
  - Fix FTBFS due to glibc 2.31.9000 implementing lchmod(2), compatible with glibc2.28 also
    * Patch: ruby-2.8.0-Brace-the-fact-that-lchmod-can-EOPNOTSUPP.patch
    * Patch: ruby-2.8.0-Moved-not-implemented-method-tests.patch
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
    * Patch: ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2109431
    Resolves: rhbz#2110981
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-2.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/540efb3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4336972)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4414e52)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/f952195)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/c20c32d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/2b16a1c)
  - Related: #2129766


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1984010
    Fix ID views integration
  - Fix base scope lookups
  - Resolves: rhbz#1784172
    Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2070575
    Allow to rebuild the compat tree


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-7.1
changelog:
  - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
    Authentication
  - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: psimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-26.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2115089


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.19.5-11.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(taifu.gc@alibaba-inc.com)


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


