# changelog

author: Richard W.M. Jones <rjones@redhat.com> - 2:2.6.0-6
changelog:
  - Rebuild to attempt to fix '2:qemu-system-xtensa-2.6.0-5.fc25.x86_64 requires libxenctrl.so.4.6()(64bit)'


author: Peter Gordon <peter@thecodergeek.com> - 3.4.2-1
changelog:
  - Update to new upstream release (3.4.2)
    - Fixes a memory leak, string-splitting, and Micro QR encoding bugs.
  - Run autoconf in %build to add ARM 64 (aarch64) to the configure scripts.
  - Resolves:  #926414 (qrencode: Does not support aarch64 in f19 and rawhide)
  - Update source/homepage URLs.


author: Rex Dieter <rdieter@fedoraproject.org> - 1:4.8.7-17
changelog:
  - %build: drop --buildkey g++-4 (#1327360)
  - %build: add QT_BUILD_KEY verification (to avoid future regressions)


author: Rex Dieter <rdieter@fedoraproject.org> - 24-4
changelog:
  - drop -kdm (superceded by kdm-settings subpkg of kde-workspace)
  - ksmserverrc: disable session management


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-17
changelog:
  - support out-of-tree build
  - better %check
  - pull in final/upstream fixes for QTBUG-51648,QTBUG-51649
  - disable examples/tests in bootstrap mode


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-6
changelog:
  - Correct repquota indentation for file systems with hiden quota files
  - Remove unnecessary quota dependency from quota-devel package
  - Break licenses down to each package


author: Paul Howarth <paul@city-fan.org> 0.997-1
changelog:
  - update to 0.997
    - main feature of this version is ipv6 support
    - feature: ip6trie - new dataset supports listing of arbitrary length ip6
      CIDRs, along with individual A/TXT values for each prefix
    - feature: ip6tset - new dataset supports listing of ip6 /64 subnets and the
      exclusion of /128 subnets; only supports a single A/TXT value for the
      entire dataset
    - optimization: ip4trie - using new trie implementation (developed for the
      ip6trie dataset) decreases memory consumption by roughly a factor of three
    - feature: acl dataset - ip6 addresses are now supported in ACLs
    - feature: added --enable-asserts configure option to enable compilation of
      debugging assertions; assertion checking is disabled by default
    - featurette: zero-length "wildcard" IP4 CIDR prefixes are now allowed in
      ip4trie and acl datasets


author: Paul Howarth <paul@city-fan.org> 0.997a-1
changelog:
  - update to 0.997a
    - minor fixes/changes in packaging, no code changes
    - in particular, fixes a build failure on *BSD introduced in 0.997


author: Paul Howarth <paul@city-fan.org> 0.997a-4
changelog:
  - fix return value from initscript, by using process substitution instead of
    a while loop at the end of a pipe (#1118013)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.998-1
changelog:
  - Update to 0.998
    - Correctly handle V4MAPPED (v4 in v6) addresses; the original v6 prefix was
      wrong
    - Sometimes IP4-based datasets gave false positives when an IP6 dataset was
      present, and it was also possible to have false positives in IP6 datasets;
      both have been fixed


author: Paul Howarth <paul@city-fan.org> - 6.3-2
changelog:
  - resolves: #1115432
    fix 0003-add-TTY-input-audit-support.patch not to revert readline version
    number to 6.2


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1205753
  - Resolves: rhbz#1142190
  - Resolves: rhbz#1061091
  - Resolves: rhbz#1205752


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: gil cattaneo <puntogil@libero.it> 3.0.17-1
changelog:
  - update to 3.0.17.Final
  - introduce license macro
  - enable resteasy-links, resteasy-oauth, resteasy-wadl modules
  - build resteasy-netty{3,4}


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5-4
changelog:
  - Build with hardening flags (#1051344)
  - Fail nicely if no hardware generator is found (#892178)
  - Drop unneeded dependency


author: Stephen Gallagher <sgallagh@redhat.com> 0.4.0-3.rc1
changelog:
  - Added support for installing roles through kickstart
  - Added support for providing setting values through stdin
  - Enabled deploying Domain Controller and Database Server with no mandatory
    options
  - New API feature: sanitize() which will remove sensitive information from the
    settings output (such as autogenerated passwords once they have been
    recorded)


author: Stephen Gallagher <sgallagh@redhat.com> 0.4.0-5
changelog:
  - Release version 0.4.0
  - Drop upstreamed patches
  - https://github.com/libre-server/rolekit/releases/tag/rolekit-0_4_0


author: Stephen Gallagher <sgallagh@redhat.com> - 0.5.1-1
changelog:
  - Upstream preview release 0.5.1
  - Simplify creating systemd units for roles.
  - Synchronize role state with systemd so rolekit doesn't get confused.


author: Ondrej Vasik <ovasik@redhat.com> 0.1-13
changelog:
  - copy content of /etc/skel directory for root as posstrans,
    don't overwrite  existing files (#999114)


author: Remi Collet <remi@fedoraproject.org> - 1.1.3-1
changelog:
  - update to 1.1.3
  - raise dependencies on Mail_Mime 1.9.0, Net_Sieve 1.3.4,
    Net_SMTP 1.6.3
  - drop dependency on Mail_mimeDecode
  - add explicit license spec file headers (MIT per FPCA)


author: Remi Collet <remi@fedoraproject.org> - 1.1.4-2
changelog:
  - update to 1.1.4
  - raise dependency on Net_SMTP 1.7.1
  - add .log suffix to all log files, and rotate all #1269164
  - more secure permissions on /var/log and /var/lib #1269155


author: Remi Collet <remi@fedoraproject.org> - 1.2.0-1
changelog:
  - update to 1.2.0
  - add dependency on Crypt_GPG   >= 1.4.1
  - raise dependency on Net_LDAP2 >= 2.2.0
  - raise dependency on Mail_Mime >= 1.10.0
  - replace dependency on pear/Net_Sieve by roundcube/net_sieve >= 1.5.0


author: Remi Collet <remi@fedoraproject.org> - 1.2.1-3
changelog:
  - use /var/lib/roundcubemail/temp for temporary files
  - add /var/lib/roundcubemail/enigma for GPG keys storage
  - move plugins configuration samples in /etc/roundcubemail
  - fix permission adjustments required for encryption support #1347332


author: Steve Dickson <steved@redhat.com> - 0.2.3-11.rc1
changelog:
  - Removing the braces from the ${RPCBIND_ARGS} in rpcbind.service (bz 1362201)
  - Stop enable rpcbind.socket with every update (bz 1324666)


author: Tomas Heinrich <theinric@redhat.com> 8.8.0-1
changelog:
  - rebase to 8.8.0
    resolves: rhbz#1069690
    - drop patches merged upstream
    - version the dependency on liblognorm-devel
    - enable mmcount, mmexternal modules,
      remove imdiag, omruleset and pmrfc3164sd modules
      resolves: rhbz#1156359
  - add dos2unix to build requirements
  - make the build process more verbose
  - in accordance with an upstream change, the rsyslog service is now
    restarted automatically upon failure
  - adjust the default configuration file for the removal of
    /etc/rsyslog.d/listen.conf by the systemd package
    resolves: rhbz#1116864
  - disable the imklog module by default; kernel messages are read from journald
    resolves: rhbz#1083564
  - if there is no saved position in the journal, log only messages that are
    received after rsyslog is started; this is a safety measure to prevent
    excessive resource utilization
  - use documentation from the standalone rsyslog-docs project
  - move documentation from all subpackages into a single directory
  - mark the recover_qi.pl script as documentation


author: Tomas Heinrich <theinric@redhat.com> 8.10.0-1
changelog:
  - rebase to 8.10.0
  - drop patches merged upstream
  - use the right macro to specify the default pidfile
    resolves: rhbz#1224972
  - make logrotate tolerate missing log files
    resolves: rhbz#1205889
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - use systemctl for sending SIGHUP to the service
    related: rhbz#1224972
  - add a patch to prevent a crash on empty messages
    resolves: rhbz#1224538
  - add a patch to fix several default parameters for message queues
    resolves: rhbz#1205696
  - add a patch to fix the storage size for a configuration option


author: Radovan Sroka <rsroka@redhat.com> 8.12.0-1
changelog:
  - rebase to 8.12.0
    - drop patches merged upstream
  - resolve detection of the new GnuTLS package
    - add autoconf to BuildRequires
  - add --enable-generate-man-pages to configure parameters;
    the rscryutil man page isn't generated without it
    https://github.com/rsyslog/rsyslog/pull/469


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.0-1
changelog:
  - Rebuilt for Ruby 1.9.3.
  - Updated to 1.3.0 version.
  - Introduced %check section for running tests.


author: Martin Milata <mmilata@redhat.com> - 0.18-1
changelog:
  - New upstream version
    - Remove function fingerprinting
    - New kernel taint flags
    - Normalization tweaks
    - More secure core stacktraces from core hook


author: Martin Milata <mmilata@redhat.com> 0.19-1
changelog:
  - New upstream version
    - Enhancements to GDB parser: Thread ID, C++ template arguments
    - Tests and bugfixes


author: Matej Habrnal <mhabrnal@redhat.com> 0.20-1
changelog:
  - New upstream version
    - Don't parse SO files as source_files
    - Add support for OS Variant
    - Fix the missing frame build_id and file_name
    - Bugfixes


author: Matej Habrnal <mhabrnal@redhat.com> - 0.20-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: <andrew@beekhof.net> - 1.2.1-1
changelog:
  - Correctly enable /proc/pid validation for sbd_lock_running()
  - Improved integration with the el7 environment


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-6
changelog:
  - Resolves: #1061367 (Dropping -b option breaks cross-platform compat.)
  - Related: #948598 (Man page scan results for sed)
  - introduce -c argument, add help for -b --binary arguments,
    cleanup arguments & help)


author: Petr Stodulka <pstodulk@redhat.com> - 4.2.2-14
changelog:
  - remove meaningless redefinition of _bindir - it's standard macro now;
    sed will be store in /usr/bin/sed
    Resovles: #1305835


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-205
changelog:
  - Dontaudit mock_build_t can list all ptys.
  - Allow ftpd_t to mamange userhome data without any boolean.
  - Add logrotate permissions for creating netlink selinux sockets.
  - Add new MLS attribute to allow relabeling objects higher than system low. This exception is needed for package managers when processing sensitive data.
  - Label all VBox libraries stored in /var/lib/VBoxGuestAdditions/lib/ as textrel_shlib_t BZ(1356654)
  - Allow systemd gpt generator to run fstools BZ(1353585)
  - Label /usr/lib/systemd/libsystemd-shared-231.so as lib_t. BZ(1360716)
  - Allow gnome-keyring also manage user_tmp_t sockets.
  - Allow systemd to mounton /etc filesystem. BZ(1341753)


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-206
changelog:
  - collectd: update policy for 5.5
  - Allow puppet_t transtition to shorewall_t
  - Grant certmonger "chown" capability
  - Boinc updates from Russell Coker.
  - Allow sshd setcap capability. This is needed due to latest changes in sshd.
  - Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
  - Revert "Fix typo in ssh policy"
  - Get attributes of generic ptys, from Russell Coker.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-208
changelog:
  - Allow cups_config_t domain also mange sock_files. BZ(1361299)
  - Add wake_alarm capability to fprintd domain BZ(1362430)
  - Allow firewalld_t to relabel net_conf_t files. BZ(1365178)
  - Allow nut_upsmon_t domain to chat with logind vie dbus about scheduleing a shutdown when UPS battery is low. BZ(1361802)
  - Allow virtual machines to use dri devices. This allows use openCL GPU calculations. BZ(1337333)
  - Allow crond and cronjob domains to creating mail_home_rw_t objects in admin_home_t BZ(1366173)
  - Dontaudit mock to write to generic certs.
  - Add labeling for corosync-qdevice and corosync-qnetd daemons, to run as cluster_t
  - Revert "Label corosync-qnetd and corosync-qdevice as corosync_t domain"
  - Merge pull request #144 from rhatdan/modemmanager
  - Allow modemmanager to write to systemd inhibit pipes
  - Label corosync-qnetd and corosync-qdevice as corosync_t domain
  - Allow ipa_helper to read network state
  - Label oddjob_reqiest as oddjob_exec_t
  - Add interface oddjob_run()
  - Allow modemmanager chat with systemd_logind via dbus
  - Allow NetworkManager chat with puppetagent via dbus
  - Allow NetworkManager chat with kdumpctl via dbus
  - Allow sbd send msgs to syslog Allow sbd create dgram sockets. Allow sbd to communicate with kernel via dgram socket Allow sbd r/w kernel sysctls.
  - Allow ipmievd_t domain to re-create ipmi devices Label /usr/libexec/openipmi-helper as ipmievd_exec_t
  - Allow rasdaemon to use tracefs filesystem
  - Fix typo bug in dirsrv policy
  - Some logrotate scripts run su and then su runs unix_chkpwd. Allow logrotate_t domain to check passwd.
  - Add ipc_lock capability to sssd domain. Allow sssd connect to http_cache_t
  - Allow dirsrv to read dirsrv_share_t content
  - Allow virtlogd_t to append svirt_image_t files.
  - Allow hypervkvp domain to read hugetlbfs dir/files.
  - Allow mdadm daemon to read nvme_device_t blk files
  - Allow systemd_resolved to connect on system bus. BZ(1366334)
  - Allow systemd to create netlink_route_socket and communicate with systemd_networkd BZ(1306344)
  - Allow systemd-modules-load to load kernel modules in early boot. BZ(1322625)
  - label tcp/udp port 853 as dns_port_t. BZ(1365609)
  - Merge pull request #145 from rhatdan/init
  - systemd is doing a gettattr on blk and chr devices in /run
  - Allow selinuxusers and unconfineduser to run oddjob_request
  - Allow sshd server to acces to Crypto Express 4 (CEX4) devices.
  - Fix typo in device interfaces
  - Add interfaces for managing ipmi devices
  - Add interfaces to allow mounting/umounting tracefs filesystem
  - Add interfaces to allow rw tracefs filesystem
  - Merge branch 'rawhide-base' of github.com:fedora-selinux/selinux-policy into rawhide-base
  - Merge pull request #138 from rhatdan/userns
  - Allow iptables to creating netlink generic sockets.
  - Fix filecontext for systemd shared lib.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-209
changelog:
  - Fix lsm SELinux module
  - Dontaudit firewalld to create dirs in /root/ BZ(1340611)
  - Label /run/corosync-qdevice and /run/corosync-qnetd as corosync_var_run_t
  - Allow fprintd and cluster domains to cummunicate via dbus BZ(1355774)
  - Allow cupsd_config_t domain to read cupsd_var_run_t sock_file. BZ(1361299)
  - Add sys_admin capability to sbd domain
  - Allow vdagent to comunnicate with systemd-logind via dbus
  - Allow lsmd_plugin_t domain to create fixed_disk device.
  - Allow opendnssec domain to create and manage own tmp dirs/files
  - Allow opendnssec domain to read system state
  - Allow systemd_logind stop system init_t
  - Add interface init_stop()
  - Add interface userdom_dontaudit_create_admin_dir()
  - Label /var/run/storaged as lvm_var_run_t.
  - Allow unconfineduser to run ipa_helper_t.


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-210
changelog:
  - Label /var/run/corosync-qnetd and /var/run/corosync-qdevice as cluster_var_run_t. Note: corosync policy is now par of rhcs module
  - Allow krb5kdc_t to read krb4kdc_conf_t dirs.
  - Update networkmanager_filetrans_named_content() interface to allow source domain to create also temad dir in /var/run.
  - Make confined users working again
  - Fix hypervkvp module
  - Allow ipmievd domain to create lock files in /var/lock/subsys/
  - Update policy for ipmievd daemon. Contain:    Allowing reading sysfs, passwd,kernel modules   Execuring bin_t,insmod_t
  - Allow systemd to stop systemd-machined daemon. This allows stop virtual machines.
  - Label /usr/libexec/iptables/iptables.init as iptables_exec_t Allow iptables creating lock file in /var/lock/subsys/


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211
changelog:
  - Add new domain ipa_ods_exporter_t BZ(1366640)
  - Create new interface opendnssec_stream_connect()
  - Allow systemd-machined to communicate to lxc container using dbus
  - Dontaudit accountsd domain creating dirs in /root
  - Add new policy for Disk Manager called udisks2
  - Dontaudit firewalld wants write to /root
  - Label /etc/pki/pki-tomcat/ca/ as pki_tomcat_cert_t
  - Allow certmonger to manage all systemd unit files
  - Allow ipa_helper_t stream connect to dirsrv_t domain
  - Update oracleasm SELinux module
  - label /var/lib/kubelet as svirt_sandbox_file_t
  - Allow systemd to create blk and chr files with correct label in /var/run/systemd/inaccessible BZ(1367280)
  - Label /usr/libexec/gsd-backlight-helper as xserver_exec_t. This allows also confined users to manage screen brightness
  - Add new userdom_dontaudit_manage_admin_dir() interface
  - Label /dev/oracleasmfs as oracleasmfs_t. Add few interfaces related to oracleasmfs_t type


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-212
changelog:
  - udisk2 module is part of devicekit module now
  - Fix file context for /etc/pki/pki-tomcat/ca/
  - new interface oddjob_mkhomedir_entrypoint()
  - Allow mdadm to get attributes from all devices.
  - Label /etc/puppetlabs as puppet_etc_t.
  - quota: allow init to run quota tools
  - Add new domain ipa_ods_exporter_t BZ(1366640)
  - Create new interface opendnssec_stream_connect()
  - Allow VirtualBox to manage udev rules.
  - Allow systemd_resolved to send dbus msgs to userdomains
  - Make entrypoint oddjob_mkhomedir_exec_t for unconfined_t
  - Label all files in /dev/oracleasmfs/ as oracleasmfs_t


author: Lukas Vrabec <lvrabec@redhat.com> 3.13.1-214
changelog:
  - Allow attach usb device to virtual machine BZ(1276873)
  - Dontaudit mozilla_plugin to sys_ptrace
  - Allow nut_upsdrvctl_t domain to read udev db BZ(1375636)
  - Fix typo
  - Allow geoclue to send msgs to syslog. BZ(1371818)
  - Allow abrt to read rpm_tmp_t dirs
  - Add interface rpm_read_tmp_files()
  - Remove labels for somr docker sandbox files for now. This needs to be reverted after fixes in docker-selinux
  - Update oracleasm SELinux module that can manage oracleasmfs_t blk files. Add dac_override cap to oracleasm_t domain.
  - Add few rules to pcp SELinux module to make ti able to start pcp_pmlogger service
  - Revert "label /var/lib/kubelet as svirt_sandbox_file_t"
  - Remove file context for /var/lib/kubelet. This filecontext is part of docker now
  - Add oracleasm_conf_t type and allow oracleasm_t to create /dev/oracleasm
  - Label /usr/share/pcp/lib/pmie as pmie_exec_t and /usr/share/pcp/lib/pmlogger as pmlogger_exec_t
  - Allow mdadm_t to getattr all device nodes
  - Dontaudit gkeyringd_domain to connect to system_dbusd_t
  - Add interface dbus_dontaudit_stream_connect_system_dbusd()
  - Allow guest-set-user-passwd to set users password.
  - Allow domains using kerberos to read also kerberos config dirs
  - Add kdymp_t domain sys_admin capability BZ(1357949)
  - Allow dnssec_trigger to exec ldconfig
  - Label /var/lib/docker-latest/vfs as svirt_sandbox_file_t
  - Fix typo bugs in rsync and inetd SELinux modules
  - Label /var/lib/docker/vfs as svirt_sandbox_file_t in virt SELinux module
  - Merge pull request #147 from rhatdan/virt
  - Merge pull request #149 from rhatdan/daemon_contrib
  - Merge pull request #151 from rhatdan/msg
  - Allow add new interface to new namespace BZ(1375124)
  - Allow systemd to relalbel files stored in /run/systemd/inaccessible/
  -  Add interface fs_getattr_tmpfs_blk_file()
  - Dontaudit domain to create any file in /proc. This is kernel bug.
  - Improve regexp for power_unit_file_t files. To catch just systemd power unit files.
  - Add new interface fs_getattr_oracleasmfs_fs()
  - Add interface fs_manage_oracleasm()
  - Label /dev/kfd as hsa_device_t
  - Update seutil_manage_file_contexts() interface that caller domain can also manage file_context_t dirs
  - Add transition rule that caller domain can create resolv.conf link file with correct label in sysnet_filetrans_named_content() interface
  - Add systemd_machined_t kill capability
  - Allow systemd_machined_t to read nsfs_t files
  - Allow run sulogin_t in range mls_systemlow-mls_systemhigh.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-1
changelog:
  - New version
    Resolves: rhbz#1239185
  - Dropped ipv6-bad-helo patch (upstreamed)
  - Updated/defuzzified patches


author: Petr Lautrbach <plautrba@redhat.com> 3.3.8-10
changelog:
  - libqpol: Skip types when building type attribute map (#1291336)
  - Rebase for SELinuxProject userspace release 2016-01-07


author: Ondrej Vasik <ovasik@redhat.com> - 2.9.5-1
changelog:
  - assign uidgid for systemd-network(192:192) - FPC 481,bz#1102002
  - assign uidgid for systemd-resolve(193:193) - FPC 481,bz#1102002


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.2.1-3
changelog:
  - unlock also passwords locked with passwd -l
  - prevent breaking user entry by entering a password containing colon
  - fix possible DoS when locking the database files for update
  - properly use login.defs from the chroot in useradd


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.2.1-4
changelog:
  - document that groupmems is not setuid root
  - document that expiration of the password after inactivity period
    locks the user account completely


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.2.1-5
changelog:
  - do not use obscure permissions for binaries
  - remove unused commands from login.defs(5) cross-reference


author: Bastien Nocera <bnocera@redhat.com> - 1.6-3
changelog:
  - Remove file-roller as handler for cbz/cbr files
    See https://bugzilla.gnome.org/show_bug.cgi?id=767244


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - Update to shim 0.8
    rhbz#1148230
    rhbz#1148231
    rhbz#1148232
  - Handle building on aarch64 as well


author: Peter Jones <pjones@redhat.com> - 0.8-6
changelog:
  - Rebuild once more so we can use a different -unsigned version on different
    arches (because we can't tag a newer build into aarch64 without an x86
    update to match.)
    Related: rhbz#1170289


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.2.4-11
changelog:
  - use _pkgdocdir if available (#994097)
  - build static objects in build section
  - make some dependencies arch-specific


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for FreeIPA's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
    Fixes bug #1130131


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Bryn M. Reeves <bmr@redhat.com> = 3.1-1
changelog:
  - Update to new upstream release sos-3.1
  - Add collection of grub configuration for UEFI systems
  - Raise a TypeError if add_copy_specs() is called with a string
  - Add tests for Plugin.add_copy_spec()/add_copy_specs()
  - Update Plugin tests to treat copy_paths as a set
  - Use a set for Plugin.copy_paths
  - Remove references to 'sub' parameter from plugin tests
  - Remove 'sub' parameter from Plugin.add_copy_spec*()
  - Drop RedHatPlugin from procenv
  - Update plugin_tests.py to match new method names
  - Remove obsolete checksum reference from utilities_tests.py
  - Refactor Plugin.collect() pathway
  - Fix x86 arch detection in processor plugin
  - Pythonify Plugin._path_in_pathlist()
  - Clean up package checks in processor plugin
  - Replace self.policy().pkg_by_name() us in Logs plugin
  - Convert infiniband to package list
  - Dead code removal: PluginException
  - Dead code removal: sos.plugins.common_prefix()
  - Add vim tags to all python source files
  - Dead code removal: utilities.checksum()
  - Dead code removal: DirTree
  - Dead code removal: sos_relative_path()
  - Remove --profile support
  - Fix plugin_test exception on six.PY2
  - Call rhsm-debug with the --sos switch
  - Do not collect isos in cobbler plugin
  - Match plugins against policies
  - Update policy_tests.py for validate_plugin change
  - Rename validatePlugin to validate_plugin
  - Fix broken binary detection in satellite plugin
  - Clean up get_cmd_path/make_cmd_path/make_cmd_dirs mess
  - Add tuned plugin
  - Update systemd support
  - Fix remaining use of obsolete 'get_cmd_dir()' in plugins
  - Add PowerNV specific debug data
  - powerpc: Move VPD related tool under common code
  - Remove the rhevm plugin.
  - Replace package check with file check in anacron
  - Scrub ldap_default_authtok password in sssd plugin
  - Eliminate hard-coded /var/log/sa paths in sar plugin
  - Remove useless check_enabled() from sar plugin
  - Improve error message when cluster.crm_from is invalid
  - Fix command output substitution exception
  - Add distupgrade plugin
  - Fix gluster volume name extraction
  - Ensure unused fds are closed when calling subprocesses via Popen
  - Pass --no-archive to rhsm-debug script
  - postgresql: allow use TCP socket
  - postgresql: added license and copyright
  - postgresql: add logs about errors / warnings
  - postgresql: minor fixes
  - Include geo-replication status in gluster plugin
  - Make get_cmd_output_now() behaviour match 2.2
  - Add rhsm-debug collection to yum plugin
  - Always treat rhevm vdsmlogs option as string
  - Fix verbose file logging
  - Fix get_option() use in cluster plugin
  - Fix cluster postproc regression
  - Ensure superclass postproc method is called in ldap plugin
  - Remove obsolete diagnostics code from ldap plugin
  - Fix cluster module crm_report support


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-0.1.a
changelog:
  - Make source URL handling compliant with packaging guidelines
  - Update to new upstream pre-release sos-3.2-alpha1


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-2
changelog:
  - [sosreport] ensure private temporary directory is removed
  - [global] sync rawhide package with upstream
  - [ceph] collect /var/lib/ceph and /var/run/ceph
  - [sosreport] prepare report in a private subdirectory (CVE-2015-7529)
  - [docker] collect journald logs for docker unit
  - [sosreport] fix command-line report defaults
  - [openstack_neutron] obfuscate server_auth in restproxy.ini
  - [memory] collect swapon --show output in bytes
  - [sosreport] fix command-line report defaults (proper patch ordering)
  - [sapnw] call self methods properly
  - [openvswitch] capture the logs, db and OVS bridges details
  - [logs] fix reference to missing 'rsyslog_conf' variable
  - [sapnw] Add check if saphostctrl is not present, dont use Set
  - [Plugin] fix handling of symlinks in non-sysroot environments
  - [openstack] Ensure openstack passwords and secrets are obfuscated
  - [plugin] pass stderr through _collect_cmd_output
  - [kubernetes,plugin] Support running sos inside a container
  - [openstack] New Openstack Trove (DBaaS) plugin
  - [services] Add more diagnostics to applications
  - [openstack_neutron] Obscure passwords and secrets
  - [ceph] add calamari and ragos logs and configs
  - [iprconfig] enable plugin for ppc64* architectures
  - [general] verify --profile contains valid plugins only
  - [kernel,mpt,memory] additional kernel-related diagnostics
  - [cluster] enable crm_report password scrubbing
  - [sosreport] fix command-line report defaults
  - [virsh] add new plugin, add listing of qemu
  - [sap*,vhostmd] new plugins for SAP
  - [cluster] crm_report fails to run because dir already exists
  - [foreman] Skip collection of generic resources
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
  - [pcp] collect /etc/pcp.conf
  - [puppet] adding new plugin for puppet
  - [block] Don't use parted human readable output
  - [general] Better handling --name and --ticket-number in
  - [networking] additional ip, firewall and traffic shaping
  - [infiniband] add opensm and infiniband-diags support
  - [plugins/rabbitmq] Added cluster_status command output
  - [networking] re-add 'ip addr' with a root symlink
  - [kimchi] add new plugin
  - [iprconfig] add plugin for IBM Power RAID adapters
  - [ovirt] Collect engine tunables and domain information.
  - [activemq] Honour all_logs and get config on RHEL
  - [cluster] Add luci to packages for standalone luci servers
  - [hpasm] hpasmcli commands hang under timeout
  - [mysql] Collect log file
  - [chrony] add chrony plugin
  - [openstack_sahara] redact secrets from sahara configuration
  - [openstack_sahara] add new openstack_sahara plugin
  - [openstack_neutron] neutron configuration and logs files not captured
  - [ovirt] remove ovirt-engine setup answer file password leak
  - [networking] network plugin fails if NetworkManager is disabled
  - [cluster] crm_report fails to run because dir already exists
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD
  - [mysql] test for boolean values in dbuser and dbpass
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace
  - [mysql] fix handling of mysql.dbpass option
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives
  - [sosreport] fix archive permissions regression
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release
  - [foreman] add new plugin


author: Paul Howarth <paul@city-fan.org> - 0.4.0-1
changelog:
  - Update to 0.4.0
    - New options:
      -C option to change the default reject code
      -S option to specify a path to sendmail (for the -x option)
      -R option to specify the rejection message
      -a option to skip messages that were authenticated
    - IPv6 address support
    - Syntax clean-ups
  - Drop upstreamed syntax, rejection text and IPv6 patches
  - Update authuser patch: note that upstream has introduced a -a option that
    does pretty much the same as the -I option added by this patch, so this
    patch is deprecated and will not be included in builds for Fedora 22 onwards
  - Clean up other patches to apply cleanly


author: Kevin Fenzi <kevin@scrye.com> - 3.4.1-9
changelog:
  - Add perl-Razor-Agent and perl-Net-Patricia To Requires, they might help processing. Fixes bug #1337924
  - Add patch for netdns 1.0.1+ dns lookups.


author: Matthias Saou <http://freshrpms.net/> 1.6.3-1
changelog:
  - Update to 1.6.3.
  - Include init script and sysconfig file to make it easy to manage a single
    instance.


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Jan Stanek <jstanek@redhat.com> - 3.10.2-1
changelog:
  - Updated to version 3.10.2 (http://sqlite.org/releaselog/3_10_2.html)
  - Enabled JSON1 Extension (rhbz#1277387)
  - Made test failure nonfatal on MIPS (rhbz#1294888)


author: Nils Philippsen <nils@redhat.com> - 3.11.0-2
changelog:
  - add obsoletes/conflicts to make updates on multi-lib systems work (#1310441)
  - make -devel package depend on arch-specific -libs (not main) package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Radovan Sroka <rsroka@redhat.com> 1.8.14p3-2
changelog:
  - add patch that resolves initialization problem before sudo_strsplit call
  - add patch that resolves deadcode in visudo.c 
  - add patch that removes extra while in visudo.c and sudoers.c


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - Release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 230-1
changelog:
  - New version
  - Drop compat-libs
  - Require libxkbcommon explictly, since the automatic dependency will
    not be generated anymore


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 230-3
changelog:
  - Update to latest git snapshot (fixes for systemctl set-default,
    polkit lingering policy, reversal of the framebuffer rules,
    unaligned access fixes, fix for StartupBlockIOWeight-over-dbus).
    Those changes are interspersed with other changes and new features
    (mostly in lldp, networkd, and nspawn). Some of those new features
    might not work, but I think that existing functionality should not
    be broken, so it seems worthwile to update to the snapshot.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-4
changelog:
  - Fix preset-all (#1363858)
  - Fix issue with daemon-reload messing up graphics (#1367766)
  - A few other bugfixes


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-1
changelog:
  - rebase to new upstream tarball, per release notes:
    https://savannah.gnu.org/forum/forum.php?forum_id=8037


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-6
changelog:
  - fix --files-from and -T cooperation (rhbz#1230762)
  - avoid two testsuite false alarms related to --files-from option


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.0-1
changelog:
  - rebase to recent upstream relase (#1094731), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.0/
  - spec cleanup per fedora-review


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.1-1
changelog:
  - rebase to recent upstream release (#1144394), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.1/


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Coty Sutherland <csutherl@redhat.com> 1:8.0.26-4
changelog:
  - Resolves: rhbz#1286800 Failed to start component due to wrong allowLinking="true" in context.xml
  - Program /bin/nologin does not exist (#1302718)


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-1
changelog:
  - Updated to 8.0.32
  - Remove log4j support. It has never been working actually. See rhbz#1236297
  - Move shipped config to /etc/sysconfig/tomcat. /etc/tomcat/tomcat.conf can now be used to override it with shell expansion, resolves rhbz#1293636
  - Recommend tomcat-native, resolves: rhbz#1243132


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-3
changelog:
  - Load sysconfig from tomcat.conf, resolves: rhbz#1311771, rhbz#1311905
  - Set default javax.sql.DataSource factory to apache commons one, resolves rhbz#1214381


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-4
changelog:
  - Revert sysconfig migration changes, resolves: rhbz#1311771, rhbz#1311905
  - Add /etc/tomcat/conf.d/ with shell expansion support, resolves rhbz#1293636


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.36-1
changelog:
  - Resolves: rhbz#1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service (updates to 8.0.36)
  - Resolves: rhbz#1364056 The command tomcat-digest doesn't work
  - Resolves: rhbz#1363884 The tomcat-tool-wrapper script is broken
  - Resolves: rhbz#1347864 The systemd service unit does not allow tomcat to shut down gracefully
  - Resolves: rhbz#1347835 The security manager doesn't work correctly (JSPs cannot be compiled)
  - Resolves: rhbz#1341853 rpm -V tomcat fails on /var/log/tomcat/catalina.out
  - Resolves: rhbz#1341850 tomcat-jsvc.service has TOMCAT_USER value hard-coded
  - Resolves: rhbz#1359737 Missing maven depmap for the following artifacts: org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket-api
  - Resolves: asfbz#59960  Building javadocs with java8 fails


author: Christina Fu <cfu@redhat.com> 7.1.1-1
changelog:
  - Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
    for attribute "clientauth" (cfu)
  - Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 (cfu)
  - Bumped revision to 7.1.1


author: David Brown <david.brown@pnnl.gov> - 4.2.10-3
changelog:
  - Bugfix - #1215207 create/install service files for these
  - Bugfix - #1117263 qmgr aborts in some instances
  - Bugfix - #1144396 Hey! Version Bump!
  - Bugfix - #1215992 more service scripts
  - Bugfix - #1216037 fixed permissions on directories
  - Bugfix - #1149045 hopefully these are all fixed now
  - Bugfix - #965513 calling this one fixed...


author: David Brown <david.brown@pnnl.gov> - 4.2.10-4
changelog:
  - Bugfix - #1227003 test system in cluster environment
  - Bugfix - #1216049 add --enable-cpuset and hwloc
  - Bugfix - #1176080 this maybe a duplicate of #1216037


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Tom Callaway <spot@fedoraproject.org> - 0.8.0-9
changelog:
  - add missing changes from R to be able to use tre in R as system lib (and resolve arm fails)
    Credit to Orion Poplawski.


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-10
changelog:
  - fix build on aarch64 (bug #926655)
  - drop obsolete specfile parts
  - fix deprecated python macro usage


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-13.20140228gitc2f5d13
changelog:
  - update to latest snapshot from github
  - drop patches merged upstream
  - fix broken LDFLAGS in tre.pc (#1224203)


author: Steve Grubb <sgrubb@redhat.com> 0.3.11.2-3
changelog:
  - Fix crash when linking libgnutls and libmysqlclient (#1069079)
  - Don't order tcsd after syslog.target (#1055198)


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Parag Nemade <pnemade AT redhat DOT com> - 3.0.9-41
changelog:
  - Resolves:rh#1080516 - ttmkfdir ftbfs in rawhide due to freetype header move
  - Thanks baude for your patch


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15.
      The abbreviation remains "KST".
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last Saturday at 01:00, not March's
      last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile changes from permanent DST to seasonal DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switchefrom +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Paul Wouters <pwouters@redhat.com> - 1.5.7-1
changelog:
  - Update to 1.5.7
  - Enable query minimalization for enhanced DNS query privacy
  - Enable nxdomain hardening to assist with query minimalization and SBLs
  - Updated default unbound.conf for new features from upstream.


author: Paul Wouters <pwouters@redhat.com> - 1.5.8-1
changelog:
  - Update to 1.5.8 (rhbz#1313831) which incorporates rhbz#1294339 patch
  - Updated unbound.conf with new upstream options
  - Enabled ip-transparent: yes (see rhbz#1291449)


author: Jan Stanek <jstanek@redhat.com> - 2.3.3-1
changelog:
  - Update to version 2.3.3
  - Removed patches and sources included upstream
  - Recreated so-version-bump.patch


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-29
changelog:
  - added build parameter "-DNO_LCHMOD" because lchmod isn't provided on Linux
    system
    Resolves: #1350627


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-30
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
    so linking is now configurable from the spec file
  - define __global_ldflags on EL <= 7
  - set LFLAGS2 with __global_ldflags for hardened build
    Resolves: #1330519


author: John W. Linville <linville@redhat.com> - 4.4-16
changelog:
  - Replace strcpy/strcat with strncpy/strncat to avoid some buffer overflows
  - Check for backward-pointing directory entries to avoid endless looping
  - Fix _most_ of the compiler warnings


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.1.20130726svn14389
changelog:
  - Update to upstream Subversion snapshot to get bug fixes
  - Apply autoconf patch to handle aarch64
  - Update spec to latest startup script handling, also conditionalize
    RHEL SysV init handle for EPEL to make it easier to handle both


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Remi Collet <rcollet@redhat.com> - 1.6.2-26
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to PHP extension configuration file


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Karsten Hopp <karsten@redhat.com> - 7.4.1830-3
changelog:
  - mv vim.sh and vim.csh to source files
  - sh profile.d improvements: don't leak $ID, don't fail on nounset
    (rhbz#1339106 Ville Skyttä)


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-3
changelog:
  - Fix errors with missing nodedevs (bz #1225771)
  - Fix CDROM media change if device is bootable (bz #1229819)
  - Fix adding iscsi pools (bz #1231558)
  - spec: Add LXC to default connection list (bz #1235972)
  - Fix backtrace when reporting OS error (bz #1241902)
  - Raise upper limits for lxc ID namespaces (bz #1244490)
  - Fix 'copy host CPU definition'
  - Fix displaying VM machine type when connecting to old libvirt
  - Fix qemu:///session handling in 'Add Connection' dialog
  - Fix default storage path for qemu:///session, it should be .local/share/...


author: Cole Robinson <crobinso@redhat.com> - 1.3.0-1
changelog:
  - Rebased to version 1.3.0
  - Error when trying to modify existing 9p share (bz #1257565)
  - virt-manager tries to create vmport device on non-x86 backends (bz #1259998)
  - Details/Virtual networks: Allow manually specifying a bridge for
    qemu:///session (bz #1212443)
  - [RFE] Improve Solaris 10 x86-64 support in virt-manager (bz #1262093)
  - No system tray icon in Cinnamon session (bz #1257949)
  - virt-install does not remove orphaned images on failure (bz #1212617)
  - virt-manager does not warn if it cannot find the network (bz #1212616)
  - Storage volume manager looses focus when a volume is deleted (bz #1279861)
  - Storage volume manager does not update free space (bz #1279940)
  - Reboot/Shutdown buttons does not work on aarch64 (bz #1212826)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-3
changelog:
  - Fix screenshot on F24 rawhide (bz #1297988)
  - Fix URL installs when content-length header missing (bz #1297900)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-4.20160520git2204de62d9
changelog:
  - Rebase to latest git
  - Update translations (bz #1323015)
  - Fix rawhide URL installs (bz #1322011)
  - Update viewer to work with spice GL


author: Jiri Skala <jskala@redhat.com> - 3.0.2-8
changelog:
  - adds reverse lookup option to vsftpd.conf
  - changes types of uid and gid to uint
  - removes spare patch pasv-addr
  - implements DH cipher
  - gets rid init scirpt subpackage


author: Jiri Skala <jskala@redhat.com> - 3.0.2-10
changelog:
  - improves DH cipher
  - implements ECDH cipher
  - adds isolate* options to man vsftpd.conf
  - corrects max_clients, max_per_ip default values in man vsftd.conf
  - adds return code 450 when a file is temporarily unavailable


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-2
changelog:
  - Applied patches:
  - Readd seccomp disabled by default
  - vsftpd local_max_rate option doesn't work as expected
  - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d 
  - configuration
  - The vsftpd doesn't remove failed upload when the delete_failed_uploads is 
  - enabled and the network cable is unplagged
  - man pages bug
  - vsftpd segfaults in vsf_sysutil_strndup
  - Fix logging when syslog is used


author: Tomas Popela <tpopela@redhat.com> - 2.4.11-3
changelog:
  - Workaround crashes with gcc 6.1
  - rhbz#1349856 - Programs using webkitgtk3 compiled with gcc 6.1 crash on start. F.e: midori, xombrero, etc.


author: Tomas Hozza <thozza@redhat.com> - 1.17-1
changelog:
  - Updated to 1.17 + added some additional upstream fixes
  - Fixed hardening of wget executable (#1281829)


author: Till Maas <opensource@till.name> - 2.20-10
changelog:
  - Use alias instead of exported function for which to avoid bashism,
  http://unix.stackexchange.com/questions/59360/#59431


author: Remi Collet <remi@fedoraproject.org> - 4.5.2-2
changelog:
  - never bundle ca-bundle.crt (EL-5)
  - provide nginx configuration (fedora)
  - drop mandatory dependency on httpd (suggested) #1336091
  - protect php files in uploads directory


author: Dan Horák <dan[at]danny.cz> - 2.8.12-23
changelog:
  - fix FTBFS (#1308243)
  - skip tests as they depend on cppunit-config which was removed from cppunit-devel


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 3.0.2-12
changelog:
  - Remove python artifacts in bakefile dir, causes multilib devel conflict RH#1294712
  - Fix package devel not owning created wx3 backfile preset dir
  - Add support for MIPS to wx-config RH#1294895
  - Wayland Patch


author: Scott Talbert <swt@techie.net> - 3.0.2-15
changelog:
  - Add GCC6 patches for STC and strings tests
  - Adapt cppunit to use pkg-config (cppunit-config has been removed in F24)
  - Fixes FTBFS in F24 Rawhide, RH#1308244


author: Scott Talbert <swt@techie.net> - 3.0.2-17
changelog:
  - Add patch to resolve issue with wxStaticText growing, fixes RH#1282142
  - Add patches to resolve issues under Wayland with window sizing, RH#1294229


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-4
changelog:
  - save mimetype defaults to ~/.config/mimeapps.list
    (instead of ~/.local/share/applications/mimeapps.list)


author: Jerry James <loganjerry@gmail.com> - 21.5.34-9.20140605hgacf1c26e3019
changelog:
  - Add -c11 patch to fix build failure with gcc 5.0
  - Set compiling username to get reproducible builds
  - Use license macro


author: Paul Wouters <pwouters@redhat.com> - 1.3.6-1
changelog:
  - Updated to 1.3.6 - using github-only monstrosity packaging
  - Resolves: rhbz#1051785 (new upstream version available)
  - Resolves: rhbz#868391 xl2tpd sends response packets from wrong IP address
  - Revert: rhbz#929447 Incorrect "ipparam" manipulation
  - Resolves: rhbz#1055196 Don't order service after syslog.target
  - Resolves: rhbz#984332 xl2tpd tmpfiles configuration file in wrong directory
  - Removed patches merged in upstream.
  - FIPS patch updated with advertising clause for openssl in xl2tpd -V
    (although the GPL code was already basically taken from openssl)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.2-15
changelog:
  - Use %jpackage_script to generate scripts.
  - Add OSGi metadata to manifest instead of discarding everything else in it.
  - Drop dependency on xml-commons-api, add one on java(-headless).
  - Crosslink javadocs with Java's.
  - Include NOTICE* in docs.
  - Update URLs.
  - Specfile cleanups.


author: Simone Caronni <negativo17@gmail.com> - 7.7-12
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Simplify build requirements.
  - Xprint has been removed everywhere.
  - xclipboard 1.1.3
  - xclock 1.0.7
  - xconsole 1.0.6
  - xfd 1.1.2
  - xfontsel 1.0.5
  - xload 1.1.2
  - xwd 1.0.6
  - xwud 1.0.4


author: Simone Caronni <negativo17@gmail.com> - 1:7.5-25
changelog:
  - Restore font-utils provider, required by some packages for building.
   examine all platform=3 encodings (fixes #578460)


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Hans de Goede <hdegoede@redhat.com> - 1.18.3-6
changelog:
  - Add switchable-graphics / prime fixes from f24 branch
  - Add some more switchable-graphics / prime fixes from upstream


author: Hans de Goede <hdegoede@redhat.com> - 1.18.4-3
changelog:
  - Various switchable-graphics / prime fixes from upstream, mostly
    related to using the modesetting driver in prime setups
  - Fix Xorg -configure not working (rhbz#1368502)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-6
changelog:
  - Set XORG_RUN_AS_USER_OK when starting X on the current tty, to run X
    to run without root rights when possible


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.0-1
changelog:
  - rebase per upstream release notes (#1023718)
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00216.html
  - fedora-review fixes, documentation/license fixes in spec


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.1-1
changelog:
  - bugfix rebase to 5.2.1, per release notes
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00226.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.2-1
changelog:
  - rebase to stable 5.2.2 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00244.html


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: James Antill <james at fedoraproject.org> - 3.4.3-155
changelog:
  - update to latest HEAD
  - Workaround history searching for [abc] character lists failures. BZ 1096147.
  - yumRepos.py - preserve queryparams in urls
  - Don't traceback in exRepoError() when repo info is not available. BZ 1114183.
  - Make check-update respect --quiet option. BZ 1133979.


author: James Antill <james at fedoraproject.org> - 3.4.3-156
changelog:
  - update to latest HEAD
  - Have "yum check" ignore self conflicts.
  - Add simple testcase for installing older intermediate kernel. BZ 1063181.
  - Don't look for upgrades for install only packages. BZ 1063181.
  - check if repos list is empty after excluding disabled repos. BZ 1109473.
  - Allow caching local repos. BZ 1125387.
  - Expect KB as well as MB in disk requirements message from rpm. BZ 1051931.
  - Multiple lvm fixes. BZ 1047793, BZ 1145485.
  - Change the sqlite synchronous mode for the history file, to NORMAL.
  - Add CAShe config. and objects, use it for MD and packages.
  - Add query_install_excludes conf./docs and use it for list/info/search/prov


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-505
changelog:
  - update to latest HEAD
  - Make sure epoch is a string while checking for running kernel. BZ#1200159
  - Fix rounding issue in required disk space message.
  - Rename yum executable to yum-deprecated.


author: Nick Bebout <nb@fedoraproject.org> - 1.6.0-4
changelog:
  - Add ZNC path to znc.service - bz#1179832
  - Fix command to enable cyrus sasl - bz#1112022
  - Add libicu dep to enable charset module - bz#1202033


