# changelog

author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-32
changelog:
  - Obsolete the libcrypt-nss subpackage (#1525396)
  - armhfp: Disable -fstack-clash-protection due to GCC bug (#1522678)
  - ppc64: Disable power6 multilib due to GCC bug (#1522675)
  - Auto-sync with upstream branch master,
    commit 243b63337c2c02f30ec3a988ecc44bc0f6ffa0ad:
  - libio: Free backup area when it not required (swbz#22415)
  - math: Fix nextafter and nexttoward declaration (swbz#22593)
  - math: New generic cosf
  - powerpc: POWER8 memcpy optimization for cached memory
  - x86-64: Add sinf with FMA
  - x86-64: Remove sysdeps/x86_64/fpu/s_sinf.S
  - math: Fix ctanh (0 + i NaN), ctanh (0 + i Inf) (swbz#22568)
  - lt_LT locale: Base collation on copy "iso14651_t1" (swbz#22524)
  - math: Add _Float32 function aliases
  - math: Make cacosh (0 + iNaN) return NaN + i pi/2 (swbz#22561)
  - hsb_DE locale: Base collation on copy "iso14651_t1" (swbz#22515)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-34
changelog:
  - Auto-sync with upstream branch master,
    commit bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f:
  - copy_file_range: New function to copy file data
  - nptl: Consolidate pthread_{timed,try}join{_np}
  - nptl: Implement pthread_self in libc.so (swbz#22635)
  - math: Provide a C++ version of iseqsig (swbz#22377)
  - elf: remove redundant __libc_enable_secure check from fillin_rpath
  - math: Avoid signed shift overflow in pow (swbz#21309)
  - x86: Add feature_1 to tcbhead_t (swbz#22563)
  - x86: Update cancel_jmp_buf to match __jmp_buf_tag (swbz#22563)
  - ld.so: Examine GLRO to detect inactive loader (swbz#20204)
  - nscd: Fix nscd readlink argument aliasing (swbz#22446)
  - elf: do not substitute dst in $LD_LIBRARY_PATH twice (swbz#22627)
  - ldconfig: set LC_COLLATE to C (swbz#22505)
  - math: New generic sincosf
  - powerpc: st{r,p}cpy optimization for aligned strings
  - CVE-2017-1000409: Count in expanded path in _dl_init_path (#1524867)
  - CVE-2017-1000408: Compute correct array size in _dl_init_paths (#1524867)
  - x86-64: Remove sysdeps/x86_64/fpu/s_cosf.S
  - aarch64: Improve strcmp unaligned performance


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-35
changelog:
  - Remove sln (#1531546)
  - Remove Sun RPC interfaces (#1531540)
  - Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
  - Auto-sync with upstream branch master,
    commit f1a844ac6389ea4e111afc019323ca982b5b027d:
  - CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
  - i386: In makecontext, align the stack before calling exit (swbz#22667)
  - x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
  - elf: check for rpath emptiness before making a copy of it
  - elf: remove redundant is_path argument
  - elf: remove redundant code from is_dst
  - elf: remove redundant code from _dl_dst_substitute
  - scandir: fix wrong assumption about errno (swbz#17804)
  - Deprecate external use of libio.h and _G_config.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 579396ee082565ab5f42ff166a264891223b7b82:
  - nptl: Add test for callee-saved register restore in pthread_exit
  - getrlimit64: fix for 32-bit configurations with default version >= 2.2
  - elf: Add linux-4.15 VDSO hash for RISC-V
  - elf: Add RISC-V dynamic relocations to elf.h
  - powerpc: Fix error message during relocation overflow
  - prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-38
changelog:
  - nptl: Fix stack guard size accounting (#1527887)
  - Remove invalid Obsoletes: on glibc-header provides
  - Require python3 instead of python during builds
  - Auto-sync with upstream branch master,
    commit 09085ede12fb9650f286bdcd805609ae69f80618:
  - math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
  - x86-64: Add sincosf with vector FMA


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Arjun Shankar <arjun@redhat.com> - 2.28-79
changelog:
  - Remove unwanted whitespace from size lines and account for top chunk in
    malloc_info output (#1735747)


author: Arjun Shankar <arjun@redhat.com> - 2.28-80
changelog:
  - Fix race condition in tst-clone3 and add a new ldconfig test,
    tst-ldconfig-bad-aux-cache (#1764226)


author: Patsy Griffin <patsy@redhat.com> - 2.28-114
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1811796)


author: Patsy Griffin <patsy@redhat.com> - 2.28-130
changelog:
  - Fix avx2 strncmp offset compare condition check (#1871394)
  - Add strncmp and strcmp testcases for page boundary


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Arjun Shankar <arjun@redhat.com> - 2.28-174
changelog:
  - Introduce new glibc-doc.noarch subpackage (#2021671)
  - Move the reference manual info pages from glibc-devel to glibc-doc
  - Move debugger interface documentation from glibc to glibc-doc
  - Remove unnecessary README, INSTALL, NEWS files from glibc
  - Remove unnecessary README.timezone and gai.conf files from glibc-common


author: Florian Weimer <fweimer@redhat.com> - 2.28-175
changelog:
  - Fix dl-tls.c assert failure with pthread_create & dlopen (#1991001)
  - Fix x86_64 TLS lazy binding with auditors (#1950056)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Arjun Shankar <arjun@redhat.com> - 2.28-190
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054790)
  - Fix localedef so it can handle symbolic links when generating locale-archive.


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Arjun Shankar <arjun@redhat.com> - 2.28-216
changelog:
  - Retain .gnu_debuglink section for libc.so.6 (#2115830)
  - Remove .annobin* symbols from ld.so
  - Remove redundant ld.so debuginfo file


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.24
changelog:
  - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo
    and AF_UNSPEC.
  - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error
    responses. (RHEL-18039)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077418


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Brian C. Lane <bcl@redhat.com> 27.0-1
changelog:
  - Bump version to 27.0 (bcl@redhat.com)
  - Try all packages when installpkg --optional is used. (bcl@redhat.com)
  - Add support for aarch64 live images (bcl@redhat.com)
  - pylint: Ignore different argument lengths for dnf callback. (bcl@redhat.com)
  - Adds additional callbacks keyword for start() (jmracek@redhat.com)
  - Add ppc64-diag for Power64 platforms (pbrobinson@gmail.com)
  - livemedia-creator: Add release license files to / of the iso (bcl@redhat.com)
  - lorax: Add release license files to / of the iso (bcl@redhat.com)
  - INSTALL_ROOT and LIVE_ROOT are not available during %post (bcl@redhat.com)
  - Add --noverifyssl to lorax (#1430483) (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 27.2-1
changelog:
  - Remove filegraft from arm.tmpl (#1457906) (bcl@redhat.com)
  - Use anaconda-core to detect buildarch (sgallagh@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 27.5-1
changelog:
  - runtime-cleanup: preserve a couple more gstreamer libs (awilliam@redhat.com)
  - perl is needed on all arches now (dennis@ausil.us)


author: Brian C. Lane <bcl@redhat.com> 27.6-1
changelog:
  - Add creation of a bootable s390 iso (#1478448) (bcl@redhat.com)
  - Add mk-s360-cdboot utility (#1478448) (bcl@redhat.com)
  - Fix systemctl command (#1478247) (bcl@redhat.com)
  - Add version output (#1335456) (bcl@redhat.com)
  - Include the dracut fips module in the initrd (#1341280) (bcl@redhat.com)
  - Make sure loop device is setup (#1462150) (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 27.7-1
changelog:
  - Make 64-bit kernel on 32-bit firmware work for x86 efi machines (pjones@redhat.com)
  - Don't install rdma bits on 32-bit ARM (#1483278) (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 27.9-1
changelog:
  - x86.tmpl: initially define compressargs as empty string (awilliam@redhat.com)
  - x86.tmpl: ensure efiarch64 is defined (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 27.11-1
changelog:
  - s390 doesn't need to graft product.img and updates.img into /images (#1496461) (bcl@redhat.com)
  - distribute the mk-s390-cdboot utility (dan@danny.cz)
  - update graft variable in s390 template (dan@danny.cz)


author: Brian C. Lane <bcl@redhat.com> 28.0-1
changelog:
  - Add make test target and update .gitignore (atodorov@redhat.com)
  - Add first unit test so we can start collecting coverage (atodorov@redhat.com)
  - Convert mk-s390-cdboot to python3 (#1497141) (bcl@redhat.com)
  - Update false positives (atodorov@redhat.com)
  - Rename parameters to match names that dnf uses (atodorov@redhat.com)
  - Don't override 'line' from outer scope (atodorov@redhat.com)
  - Add swaplabel command (vponcova@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.2-1
changelog:
  - Add documentation about mock changes (#1473880) (bcl@redhat.com)
  - Log a more descriptive error when setfiles fails (#1499771) (bcl@redhat.com)
  - Add /usr/share/lorax/templates.d ownership to lorax-templates-generic
    (bcl@redhat.com)
  - Add dependencies for SE/HMC (vponcova@redhat.com)
  - Allow installpkgs to do version pinning through globbing (claudioz@fb.com)
  - Storaged re-merged with udisks2 upstream (sgallagh@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.3-1
changelog:
  - Add --old-chroot to the mock example cmdlines (bcl@redhat.com)
  - Don't try and install kernel-PAE on i686 any more (awilliam@redhat.com)
  - New lorax documentation - 28.2 (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.4-1
changelog:
  - Write the --variant string to .buildstamp as 'Variant=' (bcl@redhat.com)
  - Run the pylorax tests with 'make test' (bcl@redhat.com)
  - Fix installpkg exclude operation (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.5-1
changelog:
  - Don't try to build efi images for basearch=i386. (pjones@redhat.com)
  - LMC: Make the QEMU RNG device optional (yturgema@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.6-1
changelog:
  - add system-logos dependency for syslinux (pbrobinson@gmail.com)
  - Really don't try to build EFI images on i386 (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.7-1
changelog:
  - Fix _install_branding (bcl@redhat.com)
  - livemedia-creator --no-virt requires a system-logos package (bcl@redhat.com)
  - Revert "add system-logos dependency for syslinux" (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.9-1
changelog:
  - Update default releasever to Fedora 28 (bcl@redhat.com)
  - Update Copyright year to 2018 in Sphinx docs (bcl@redhat.com)
  - make docs now also builds html (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.10-1
changelog:
  - Fix anaconda metapackage name (mkolman@redhat.com)
  - Include the anaconda-install-env-deps metapackage (mkolman@redhat.com)
  - Update the URL in lorax.spec to point to new Lorax location (bcl@redhat.com)
  - New lorax documentation - 28.9 (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.11-1
changelog:
  - Update the generated html docs (bcl@redhat.com)
  - Update the README with relevant URLs (bcl@redhat.com)
  - Fix documentation for enabling lorax-composer.socket (bcl@redhat.com)
  - Add support for systemd socket activation (bcl@redhat.com)
  - Add documentation for lorax-composer and composer-cli (bcl@redhat.com)
  - Move lorax-composer and composer-cli argument parsing into modules (bcl@redhat.com)
  - Update composer templates for use with Fedora (bcl@redhat.com)
  - Add new cmdline args to compose_args settings (bcl@redhat.com)
  - lorax-composer also requires tar (bcl@redhat.com)
  - Remove temporary files after run_compose (bcl@redhat.com)
  - Add --proxy to lorax-composer cmdline (bcl@redhat.com)
  - Pass the --tmp value into run_creator and cleanup after a crash (bcl@redhat.com)
  - Add --tmp to lorax-composer and set default tempdir (bcl@redhat.com)
  - Set lorax_templates to the correct directory (bcl@redhat.com)
  - Adjust the disk size estimates to match Anaconda (bcl@redhat.com)
  - Skip creating groups with the same name as a user (bcl@redhat.com)
  - Add user and group creation to blueprint (bcl@redhat.com)
  - Add blueprint customization support for hostname and ssh key (bcl@redhat.com)
  - Update setup.py for lorax-composer and composer-cli (bcl@redhat.com)
  - Add composer-cli and tests (bcl@redhat.com)
  - Fix the compose arguments for the Fedora version of Anaconda (bcl@redhat.com)
  - Add selinux check to lorax-composer (bcl@redhat.com)
  - Update test_server for blueprint and Yum to DNF changes. (bcl@redhat.com)
  - Convert Yum usage to DNF (bcl@redhat.com)
  - workspace read and write needs UTF-8 conversion (bcl@redhat.com)
  - Return an empty list if depsolve results are empty (bcl@redhat.com)
  - The git blob needs to be bytes (bcl@redhat.com)
  - Remove bin and sbin from nose (bcl@redhat.com)
  - Update the test blueprints (bcl@redhat.com)
  - Ignore more pylint errors (bcl@redhat.com)
  - Use default commit sort order instead of TIME (bcl@redhat.com)
  - Add lorax-composer and the composer kickstart templates (bcl@redhat.com)
  - Update pylorax.api.projects for DNF usage (bcl@redhat.com)
  - Update dnfbase (formerly yumbase) for DNF support (bcl@redhat.com)
  - Move core of livemedia-creator into pylorax.creator (bcl@redhat.com)
  - Update dnfbase tests (bcl@redhat.com)
  - Convert lorax-composer yum base object to DNF (bcl@redhat.com)
  - Use 2to3 to convert the python2 lorax-composer code to python3 (bcl@redhat.com)
  - Add the tests from lorax-composer branch (bcl@redhat.com)
  - Update .dockerignore (bcl@redhat.com)
  - Update lorax.spec for lorax-composer (bcl@redhat.com)
  - livemedia-creator: Move core functions into pylorax modules (bcl@redhat.com)
  - Check selinux state before creating output directory (bcl@redhat.com)
  - really kill kernel-bootwrapper on ppc (dan@danny.cz)
  - Use Fedora 28 for Dockerfile.test (bcl@redhat.com)
  - Enable testing in Travis and collecting of coverage history (atodorov@redhat.com)
  - Remove -boot-info-table from s390 boot.iso creation (#1478448) (bcl@redhat.com)
  - change installed packages on ppc (dan@danny.cz)
  - drop support for 32-bit ppc (dan@danny.cz)
  - remove redundant mkdir (dan@danny.cz)


author: Brian C. Lane <bcl@redhat.com> 28.12-1
changelog:
  - templates: Stop using gconfset (walters@verbum.org)
  - Add support for version globs to blueprints (bcl@redhat.com)
  - Update atlas blueprint (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.13-1
changelog:
  - New lorax documentation - 28.13 (bcl@redhat.com)
  - Override Sphinx documentation version with LORAX_VERSION (bcl@redhat.com)
  - Add support for sources to composer-cli (bcl@redhat.com)
  - Fix DNF related issues with source selection (bcl@redhat.com)
  - Fix handling bad source repos and add a test (bcl@redhat.com)
  - Speed up test_dnfbase.py (bcl@redhat.com)
  - Make sure new sources show up in the source/list output (bcl@redhat.com)
  - Fix make_dnf_dirs (bcl@redhat.com)
  - Update test_server for rawhide (bcl@redhat.com)
  - Add support for user defined package sources API (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14-1
changelog:
  - New lorax documentation - 28.14 (bcl@redhat.com)
  - Add --dracut-arg support to lorax (bcl@redhat.com)
  - gevent has deprecated .wsgi, should use .pywsgi instead (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.1-1
changelog:
  - Add requires on lorax-templates-rhel (bcl@redhat.com)
  - Check the compose templates at startup (bcl@redhat.com)
  - Install 'hostname' in runtime-install (for iSCSI) (awilliam@redhat.com)
  - Fix a couple typos in lorax-composer docs. (bcl@redhat.com)
  - Require python3-dnf v3.0.0 or later (bcl@redhat.com)
  - DNF 3: progress callback constants moved to dnf.transaction (awilliam@redhat.com)
  - Include example blueprints in the rpm (bcl@redhat.com)
  - Make sure /run/weldr has correct ownership and permissions (bcl@redhat.com)
  - Allow more than 1 bash build in tests (bcl@redhat.com)
  - Add redhat.exec to s390 .treeinfo (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.2-1
changelog:
  - New lorax documentation - 28.14.2 (bcl@redhat.com)
  - Add dnf.transaction to list of modules for sphinx to ignore (bcl@redhat.com)
  - Document that you shouldn't run lorax-composer twice. (clumens@redhat.com)
  - Add PIDFile to the .service file. (clumens@redhat.com)
  - Don't activate default auto connections after switchroot (rvykydal@redhat.com)
  - Use system-logos in live-iso.ks (bcl@redhat.com)
  - Update rsync version in http-server.toml (bcl@redhat.com)
  - Log and exit on metadata update errors at startup (bcl@redhat.com)
  - Check /projects responses for null values. (bcl@redhat.com)
  - Clarify error message from /source/new (bcl@redhat.com)
  - Support loading groups from the kickstart template files.  (clumens@redhat.com)
  - Include groups in depsolving. (clumens@redhat.com)
  - Add help output to each subcommand. (clumens@redhat.com)
  - Split the help output into its own module. (clumens@redhat.com)
  - If the help subcommand is given, print the help output. (clumens@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.3-1
changelog:
  - Update to use only qemu-kvm (bcl@redhat.com)
  - Fix help output on the compose subcommand. (clumens@redhat.com)
  - Add timestamps to "compose-cli compose status" output. (clumens@redhat.com)
  - And then add real output to the status command. (clumens@redhat.com)
  - Add the beginnings of a new status subcommand. (clumens@redhat.com)
  - composer-cli: Fix non-zero epoch in projets info (bcl@redhat.com)
  - Adjust test_server and test blueprints so they depsolve (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.4-1
changelog:
  - Fix bash_completion.d typo (bcl@redhat.com)
  - Move disklabel and UEFI support to compose.py (bcl@redhat.com)
  - Fix more tests. (clumens@redhat.com)
  - Change INVALID_NAME to INVALID_CHARS. (clumens@redhat.com)
  - Update composer-cli for the new error return types. (clumens@redhat.com)
  - Add default error IDs everywhere else. (clumens@redhat.com)
  - Add error IDs to things that can go wrong when running a compose.  (clumens@redhat.com)
  - Add error IDs for common source-related errors. (clumens@redhat.com)
  - Add error IDs for unknown modules and unknown projects. (clumens@redhat.com)
  - Add error IDs for when an unknown commit is requested. (clumens@redhat.com)
  - Add error IDs for when an unknown blueprint is requested.  (clumens@redhat.com)
  - Add error IDs for when an unknown build UUID is requested.  (clumens@redhat.com)
  - Add error IDs for bad state conditions. (clumens@redhat.com)
  - Change the error return type for bad limit= and offset=. (clumens@redhat.com)
  - Don't sort error messages. (clumens@redhat.com)
  - Run as root/weldr by default. (clumens@redhat.com)
  - Fix bash completion of compose info (bcl@redhat.com)
  - Add + to the allowed API string character set (bcl@redhat.com)
  - Add job_* timestamp support to compose status (bcl@redhat.com)
  - Add etc/bash_completion.d/composer-cli (wwoods@redhat.com)
  - composer-cli: clean up "list" commands (wwoods@redhat.com)
  - Drop .decode from UTF8_TEST_STRING (bcl@redhat.com)
  - Add input string checks to the branch and format arguments (bcl@redhat.com)
  - Add a test for invalid characters in the API route (bcl@redhat.com)
  - Fix logging argument (bcl@redhat.com)
  - Update get_system_repo for dnf (bcl@redhat.com)
  - Update ConfigParser usage for Py3 (bcl@redhat.com)
  - Update StringIO use for Py3 (bcl@redhat.com)
  - Add a test for the pylorax.api.timestamp functions (bcl@redhat.com)
  - Fix write_timestamp for py3 (bcl@redhat.com)
  - Return a JSON error instead of a 404 on certain malformed URLs.  (clumens@redhat.com)
  - Return an error if /modules/info doesn't return anything.  (clumens@redhat.com)
  - Update documentation (#409). (clumens@redhat.com)
  - Use constants instead of strings (#409). (clumens@redhat.com)
  - Write timestamps when important events happen during the compose (#409).  (clumens@redhat.com)
  - Return multiple timestamps in API results (#409). (clumens@redhat.com)
  - Add a new timestamp.py file to the API directory (#409). (clumens@redhat.com)
  - Use the first enabled system repo for the test (bcl@redhat.com)
  - Show more details when the system repo delete test fails (bcl@redhat.com)
  - Add composer-cli function tests (bcl@redhat.com)
  - Add a test library (bcl@redhat.com)
  - composer-cli: Add support for Group to blueprints diff (bcl@redhat.com)
  - Update status.py to use new handle_api_result (bcl@redhat.com)
  - Update sources.py to use new handle_api_result (bcl@redhat.com)
  - Update projects.py to use new handle_api_result (bcl@redhat.com)
  - Update modules.py to use new handle_api_result (bcl@redhat.com)
  - Update compose.py to use new handle_api_result (bcl@redhat.com)
  - Update blueprints.py to use new handle_api_result (bcl@redhat.com)
  - Modify handle_api_result so it can be used in more places (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.5-1
changelog:
  - Fix composer-cli blueprints changes to get correct total (bcl@redhat.com)
  - Fix blueprints/list and blueprints/changes to return the correct total (bcl@redhat.com)
  - Add tests for limit=0 routes (bcl@redhat.com)
  - Add a function to get_url_json_unlimited to retrieve the total (bcl@redhat.com)
  - Fix tests related to blueprint name changes (bcl@redhat.com)
  - Add 'example' to the example blueprint names (bcl@redhat.com)
  - Use urllib.parse instead of urlparse (bcl@redhat.com)
  - In composer-cli, request all results (dshea@redhat.com)
  - Add tests for /compose/status filter arguments (dshea@redhat.com)
  - Allow '*' as a uuid in /compose/status/<uuid> (dshea@redhat.com)
  - Add filter arguments to /compose/status (dshea@redhat.com)
  - Only include specific blueprints in the rpm (bcl@redhat.com)
  - composer-cli should not log to a file by default (bcl@redhat.com)
  - Add documentation for using a DVD as the package source (bcl@redhat.com)
  - Set TCP listen backlog for API socket to SOMAXCONN (lars@karlitski.net)
  - Bring back import-state.service (rvykydal@redhat.com)
  - Fix a little bug in running "modules list". (clumens@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.6-1
changelog:
  - Drop mod_auth_openidc from httpd example blueprint (bcl@redhat.com)
  - Bump required dnf version to 3.2.0 for module_platform_id support (bcl@redhat.com)
  - Add support for DNF 3.2 module_platform_id config value (bcl@redhat.com)
  - Fix /compose/cancel API documentation (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 28.14.7-1
changelog:
  - Ignore a pylint warning about UnquotingConfigParser get args (bcl@redhat.com)
    Related: rhbz#1613058
  - Ditch all use of pyanaconda's simpleconfig (awilliam@redhat.com)
    Related: rhbz#1613058
  - Require python3-librepo (jwboyer@redhat.com)
    Resolves: rhbz#1624423


author: Brian C. Lane <bcl@redhat.com> 28.14.10-1
changelog:
  - Add tito support for Related/Resolves to the branch (bcl)
    Related: rhbz#1613058
  - Always update repo metadata when building an image (bcl)
    Resolves: rhbz#1631561
  - Add a test for repo metadata expiration (bcl)
    Related: rhbz#1631561
  - Add tests for setting root password and ssh key with blueprints (bcl)
    Related: rhbz#1626120
  - Use rootpw for setting the root password instead of user (bcl)
    Related: rhbz#1626122
  - Lock the root account, except on live-iso (bcl)
    Resolves: rhbz#1626122


author: Brian C. Lane <bcl@redhat.com> 28.14.11-1
changelog:
  - Add beakerlib to Dockerfile.test (bcl)
    Related: rhbz#1613058
  - New cli test covering basic compose commands (atodorov) (atodorov)
  - Execute bash tests for composer-cli (atodorov) (atodorov)
  - Add virt guest agents to the qcow2 compose (dshea)
    Resolves: rhbz#1628645
  - Add a vmdk compose type. (dshea)
    Resolves: rhbz#1628646
  - Add a vhd compose type for Azure images (dshea)
    Resolves: rhbz#1628648
  - Add an ami compose type for AWS images (dshea)
    Resolves: rhbz#1628647
  - Remove --fstype from the generated part line (dshea)
    Related: rhbz#1628647
    Related: rhbz#1628648


author: Brian C. Lane <bcl@redhat.com> 28.14.13-1
changelog:
  - New lorax documentation - 28.14.12 (bcl)
    Related: rhbz#1635763
  - Adjust the composer-cli tests for the rename to composer (bcl)
    Related: rhbz#1635763
  - Rename composer-cli to composer (lars)
    Resolves: rhbz#1635763
  - Add and enable cloud-init for ami images (lars)
    Related: rhbz#1628647
  - Make no-virt generated images sparser (dshea)
    Related: rhbz#1628645
    Related: rhbz#1628646
    Related: rhbz#1628648
    Related: rhbz#1628647


author: Brian C. Lane <bcl@redhat.com> 28.14.14-1
changelog:
  - Update cli tests to use composer-cli name (bcl)
    Related: rhbz#1635763
  - Revert "Rename composer-cli to composer" (bcl)
    Related: rhbz#1635763


author: Brian C. Lane <bcl@redhat.com> 28.14.15-1
changelog:
  - Add an openstack image type (bcl)
    Resolves: rhbz#1628645
  - Add cloud-init to vhd images. (dshea)
    Related: rhbz#1628648
  - Replace /etc/machine-id with an empty file (dshea)
    Related: rhbz#1628648
    Related: rhbz#1628645
    Related: rhbz#1628647
    Related: rhbz#1628646


author: Brian C. Lane <bcl@redhat.com> 28.14.16-1
changelog:
  - Fix vhd images (vponcova)
    Related: rhbz#1628648
  - Update depsolving with suggestions from dnf (bcl)
    Resolves: rhbz#1638683


author: Brian C. Lane <bcl@redhat.com> 28.14.17-1
changelog:
  - Update documentation for - 28.14.17 (bcl)
    Related: rhbz#1645189
  - lorax-composer: Install selinux-policy-targeted in images (bcl)
    Resolves: rhbz#1645189
  - Remove setfiles from mkrootfsimage (bcl)
    Related: rhbz#1645189
  - Remove SELinux Permissive checks (bcl)
    Resolves: rhbz#1645189
  - New lorax documentation - 28.14.17 (bcl)
    Related: rhbz#1639132
  - Build manpages for composer-cli and lorax-composer (bcl)
    Resolves: rhbz#1639132
  - Add --no-system-repos to lorax-composer (bcl)
    Resolves: rhbz#1650363


author: Brian C. Lane <bcl@redhat.com> 28.14.18-1
changelog:
  - New lorax documentation - 28.14.18 (bcl)
    Related: rhbz#1656642
  - Add openstack to the image type list in the docs (dshea)
    Related: rhbz#1628645
  - lorax-composer: Handle packages with multiple builds (bcl)
    Resolves: rhbz#1656642
  - Adjust test_drtfr_gpgkey to pass on Fedora 28 and RHEL 8 (bcl)
    Related: rhbz#1655876
  - Update the projects tests to use DNF Repo object (bcl)
    Related: rhbz#1655876
  - dnf changed the type of gpgkey to a tuple (bcl)
    Resolves: rhbz#1655876
  - lorax-composer: Add CDN repo checks to startup and compose start. (bcl)
    Resolves: rhbz#1655623
  - lorax-composer: Check for CDN only repos (bcl)
    Related: rhbz#1655623
  - There is no support for edk2-ovmf on arm/arm64 (bcl)
    Resolves: rhbz#1655512
  - lorax-composer: Check the queue and results at startup (bcl)
    Resolves: rhbz#1647985


author: Brian C. Lane <bcl@redhat.com> 28.14.19-1
changelog:
  - lorax: Save information about rootfs filesystem size and usage (bcl)
    Resolves: rhbz#1659625
  - lorax-composer: Cancel running Anaconda process (bcl)
    Resolves: rhbz#1656691
  - Add cancel_func to virt and novirt_install functions (bcl)
    Resolves: rhbz#1656691
  - lorax-composer: Check for STATUS before deleting (bcl)
    Related: rhbz#1656691
  - Check for existing CANCEL request, and exit on FINISHED (bcl)
    Related: rhbz#1656691


author: Brian C. Lane <bcl@redhat.com> 28.14.20-1
changelog:
  - Revert "lorax-composer: Cancel running Anaconda process" (bcl)
    Related: rhbz#1656691
  - Make sure cancel_func is not None (bcl)
    Related: rhbz#1656691
  - Increase boot.iso rootfs to 3GiB (bcl)
    Resolves: rhbz#1661169


author: Brian C. Lane <bcl@redhat.com> 28.14.21-1
changelog:
  - Remove unneeded else from for/else loop. It confuses pylint (bcl)
    Related: rhbz#1664485
  - Allow customizations to be specified as a toml list (dshea)
    Resolves: rhbz#1664485
  - New lorax documentation - 28.14.21 (bcl)
    Related: rhbz#1650295
  - Update the example livemedia-creator kickstarts for RHEL8 (bcl)
    Resolves: rhbz#1650295
  - Change default releasever to 8 (bcl)
    Related: rhbz#1650295


author: Brian C. Lane <bcl@redhat.com> 28.14.22-1
changelog:
  - Report an error if the blueprint doesn't exist (bcl)
    Related: rhbz#1653934
  - tmux is version 2.8 on Fedora 28 (atodorov)
    Related: rhbz#1653934
  - Disable pylint no-member errors for 2 dnf constants (atodorov)
    Related: rhbz#1653934
  - Backport cloud image tests to RHEL 8 (atodorov)
    Related: rhbz#1653934


author: Brian C. Lane <bcl@redhat.com> 28.14.23-1
changelog:
  - lorax: Move default tmp dir to /var/tmp/lorax (bcl)
    Resolves: rhbz#1668408
  - Expand parameters as separate words (jstodola)
    Related: rhbz#1653934
  - Add /usr/local/bin to PATH for tests (atodorov) (atodorov)
  - Do not generate journal.xml from beakerlib (atodorov)
    Related: rhbz#1653934
  - Use any tmux version (atodorov)
    Related: rhbz#1653934
  - Make test scripts executable with chmod +x (atodorov)
    Related: rhbz#1653934


author: Brian C. Lane <bcl@redhat.com> 28.14.24-1
changelog:
  - Add a ppc64le template for live iso creation (bcl)
    Related: rhbz#1673744
  - Move the package requirements for live-iso setup out of the template (bcl)
    Resolves: rhbz#1673744
  - Remove exclusions from lorax-composer templates (bcl)
    Related: rhbz#1673744
  - Add LiveTemplateRunner to parse per-arch live-iso package requirements (bcl)
    Related: rhbz#1673744
  - Move the run part of LoraxTemplateRunner into new TemplateRunner class (bcl)
    Related: rhbz#1673744
  - lorax-composer: Use reqpart --add-boot for partitioned disk templates (bcl)
    Related: rhbz#1673744
  - livemedia-creator: Add support for reqpart kickstart command (bcl)
    Related: rhbz#1673744
  - Fix make_appliance and the libvirt.tmpl (bcl)
    Related: rhbz#1673744
  - Add get_file_magic to tests/lib.py (bcl)
    Related: rhbz#1673744
  - Clarify the ks repo only error message (bcl)
    Related: rhbz#1673744
  - Add tests to test_creator.py (bcl)
    Related: rhbz#1673744
  - Add some tests for creator.py (bcl)
    Related: rhbz#1673744
  - Make the lorax-composer ks templates more generic (bcl)
    Related: rhbz#1673744
  - Add some extra cancel_func protection to QEMUInstall (bcl)
    Related: rhbz#1684316
  - installer: make sure cancel_func has a value (yuvalt)
    Resolves: rhbz#1684316
  - Update VMware datastore location to unblock tests (chrobert)
    Related: rhbz#1678937
  - Allow overriding $CLI outside test scripts (atodorov)
    Related: rhbz#1678937
  - Use make ci inside test-in-copy target (atodorov)
    Related: rhbz#1678937
  - New test: Build live-iso and boot with KVM (atodorov)
  - New test: Build qcow2 compose and test it with QEMU-KVM (atodorov)
  - Removed remnants of fedora branding. (47631017+jakub-vavra)
    Resolves: rhbz#1672583
  - Drop auth from the kickstart examples (bcl)
    Resolves: rhbz#1672583
  - New test: Verify tar images with Docker and systemd-nspawn (atodorov)
  - Update OpenStack flavor and network settings in tests (atodorov)
  - Use existing storage account (jstodola)
  - Record date/time of VM creation (jstodola)
  - Make sure compose build tests run with SELinux in enforcing mode (jikortus)


author: Brian C. Lane <bcl@redhat.com> 28.14.25-1
changelog:
  - New lorax documentation - 28.14.25 (bcl)
    Related: rhbz#1687743
  - lorax-composer: pass customization.kernel append to extra_boot_args (bcl)
    Resolves: rhbz#1687743
  - Improve logging for template syntax errors (bcl)
    Related: rhbz#1687743
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Related: rhbz#1687743
  - lorax-composer: Add the ability to append to the kernel command-line (bcl)
    Related: rhbz#1687743
  - lorax-composer: Return UnknownBlueprint errors when using deleted blueprints (bcl)
    Resolves: rhbz#1683441
  - lorax-composer: Delete workspace copy when deleting blueprint (bcl)
    Related: rhbz#1683441
  - Remove 3G minimum from lorax-composer (bcl)
    Resolves: rhbz#1677741


author: Brian C. Lane <bcl@redhat.com> 28.14.26-1
changelog:
  - Only use repos with valid urls for test_server.py (bcl)
    Related: rhbz#1678937
  - Use strict=False when reading repo files (bcl)
    Related: rhbz#1678937
  - tests: Skip docs if not installed (bcl)
    Related: rhbz#1678937
  - tests: Make sure example-development is present for delete test (bcl)
    Related: rhbz#1678937
  - tests: Make it easier to update version globs (bcl)
    Related: rhbz#1678937
  - tests: Select the group to use based on the release (bcl)
    Related: rhbz#1678937
  - Add requirements-test.txt (bcl)
    Related: rhbz#1678937
  - Fix the google cloud boot console settings (dshea)
    Related: rhbz#1689140
  - Add a compose type for alibaba. (dshea)
    Resolves: rhbz#1689140
  - Add a compose check for google cloud images. (dshea)
    Related: rhbz#1689140
  - Add a compose type for Google Compute Engine (dshea) (dshea)
  - Add a new output type, tar-disk. (dshea)
    Related: rhbz#1689140
  - Support compressing single files. (dshea)
    Related: rhbz#1689140
  - Add an option to align the image size to a multiplier. (dshea)
    Related: rhbz#1689140
  - Pass ssl certificate options to anaconda (lars)
    Resolves: rhbz#1663950
  - Add checks for disabled root account (jikortus)
  - Fixup lorax.spec bugs (bcl)
    Related: rhbz#1678937


author: Brian C. Lane <bcl@redhat.com> 28.14.27-1
changelog:
  - Add kernel to ext4-filesystem template (bcl)
    Resolves: rhbz#1709792
  - Switch the --virt-uefi method to use SecureBoot (bcl)
    Resolves: rhbz#1691661
  - qemu wasn't restoring the terminal if it was terminated early (bcl)
    Resolves: rhbz#1691632
  - Revert "lorax-composer: Add CDN repo checks to startup and compose start." (bcl)
    Related: rhbz#1691969
  - Revert "lorax-composer: Check for CDN only repos" (bcl)
    Related: rhbz#1691969
  - Add test for passing custom option on kernel command line (jikortus)
    Related: rhbz#1687743
  - Use verify_image function as a helper for generic tests (jikortus)
    Related: rhbz#1704172
  - Change [[modules]] to [[packages]] in tests (atodorov)
    Related: rhbz#1698368
  - Add new test to verify compose paths exist (atodorov)
    Related: rhbz#1698368
  - Add new sanity tests for blueprints (atodorov)
    Related: rhbz#1698368
  - Update VMware info for VMware testing (chrobert)
    Related: rhbz#1678937
  - Add test for starting compose with deleted blueprint (jikortus)
    Related: rhbz#1699303
  - Fixes for locked root account test (jikortus)
    Related: rhbz#1698473
  - Fix lorax.spec bz reference (bcl)
    Related: rhbz#1678937


author: Brian C. Lane <bcl@redhat.com> 28.14.28-1
changelog:
  - Create a lorax-docs package with the html docs (bcl)
    Resolves: rhbz#1695274
  - Fix path to generic.prm (jstodola)
    Resolves: rhbz#1714107


author: Brian C. Lane <bcl@redhat.com> 28.14.29-1
changelog:
  - tests: Update openssh-server to version * (bcl)
    Related: rhbz#1678937
  - Remove repos.git related tests (bcl)
    Related: rhbz#1709595
  - composer-cli: Update diff support for customizations and repos.git (bcl)
    Related: rhbz#1709595
  - Add support for customizations and repos.git to /blueprints/diff/ (bcl)
    Related: rhbz#1709595
  - tests: Update custom-base with customizations (bcl)
    Related: rhbz#1709595
  - Change customizations.firewall to append items instead of replace (bcl)
    Resolves: rhbz#1709595
  - Update customizations.services documentation (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add services support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add firewall support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add locale support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Fix customizations when creating a recipe (bcl)
    Related: rhbz#1709595
  - Update docs for new timezone section (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add timezone support to blueprint (bcl)
    Related: rhbz#1709595
  - Proposal for adding to the blueprint customizations (bcl)
    Related: rhbz#1709595


author: Brian C. Lane <bcl@redhat.com> 28.14.30-1
changelog:
  - New lorax documentation - 28.14.30 (bcl)
    Related: rhbz#1709594
  - Assert that RuntimeErrors have correct messages (egoode)
    Related: rhbz#1709594
  - More descriptive error for a bad ref in repos.git (egoode)
    Related: rhbz#1709594
  - Add more tests for gitrpm.py (bcl)
    Related: rhbz#1709594
  - lorax-composer: Fix installing files from [[repos.git]] to / (bcl)
    Related: rhbz#1709594
  - Add tests using repos.git in blueprints (bcl)
    Related: rhbz#1709594
  - Move git repo creation into tests/lib.py (bcl)
    Related: rhbz#1709594
  - rpmgit: catch potential errors while running git (bcl)
    Related: rhbz#1709594
  - tests: Add test for Recipe.freeze() function (bcl)
    Related: rhbz#1709594
  - Add repos.git support to lorax-composer builds (bcl)
    Related: rhbz#1709594
  - Add pylorax.api.gitrpm module and tests (bcl)
    Related: rhbz#1709594
  - Add support for [[repos.git]] section to blueprints (bcl)
    Resolves: rhbz#1709594
  - [tests] Handle blueprints in setup_tests/teardown_tests correctly (atodorov)
    Related: rhbz#1714298
  - tests: Set BLUEPRINTS_DIR in all cases (lars)
    Related: rhbz#1714298


author: Brian C. Lane <bcl@redhat.com> 28.14.31-1
changelog:
  - tests: Document Azure setup (atodorov) (atodorov)
  - tests: unskip Azure scenario (atodorov) (atodorov)
  - Support CI testing against a bots project PR (martin) (martin)
  - Makefile: Update bots target for moved GitHub project (sanne.raymaekers)
  - Skip azure, live-iso & qcow2 tests due to infra issues (atodorov)
    Related: rhbz#1724073
  - tests: Add check to make sure the compose actually finished (bcl)
    Related: rhbz#1724073
  - Backport Cockpit CI changes for RHEL 8 (atodorov)
    Related: rhbz#1724073
  - tests: Drop sort from compose types test (bcl)
  - New test: assert toml files in git workspace (atodorov)
  - Use passwd --status for locked root account check (jikortus)
    Related: rhbz#1728571


author: Brian C. Lane <bcl@redhat.com> 28.14.32-1
changelog:
  - tests: Add tests for recipe checking functions (bcl)
    Related: rhbz#1716596
  - lorax-composer: Add basic case check to check_recipe_dict (bcl)
    Related: rhbz#1716596
  - lorax-composer: Add basic recipe checker function (bcl)
    Resolves: rhbz#1716596
  - Add live iso support to s390 (bcl)
    Related: rhbz#1746424
  - Disable some compose types on other architectures (bcl)
    Resolves: rhbz#1751998
  - aarch64: Fix live-iso creation on aarch64 (bcl)
    Resolves: rhbz#1752002


author: Brian C. Lane <bcl@redhat.com> 28.14.33-1
changelog:
  - New lorax documentation - 28.14.33 (bcl)
    Related: rhbz#1761653
  - docs: Increase root filesystem to 2000 in rhel-minimal.ks (bcl)
    Resolves: rhbz#1730937
  - Update ppc64le isolabel to match x86_64 logic (bcl)
    Related: rhbz#1757338
  - set inst.stage2 for ppc64le image (dan)
    Related: rhbz#1757338
  - docs: Override macboot/nomacboot documentation (bcl)
    Resolves: rhbz#1761653
  - tests: Keep beakerlib repo on the VM for tests which need it (atodorov)
    Related: rhbz#1769525
  - tests: unskip Qcow2 and Live-ISO scenarios (atodorov)
    Related: rhbz#1769525
  - tests: Ensure failure if beakerlib results file not found (atodorov)
    Related: rhbz#1769525
  - tests: Documentation updates (atodorov)
    Related: rhbz#1769525
  - tests: Use host repositories for make vm (atodorov)
    Related: rhbz#1769525
  - Remove unused make targets (atodorov)
    Related: rhbz#1769525
  - DRY when setting up, running & parsing results for beakerlib tests (atodorov)
    Related: rhbz#1769525
  - tests: Use journalctl -g to check for failed login (bcl)
    Related: rhbz#1769525
  - tests: Fix check_root_account when used with tar liveimg test (bcl)
    Related: rhbz#1769525
  - tests: Use the same asserts as before (atodorov)
    Related: rhbz#1769525
  - tests: switch to using podman instead of docker (atodorov)
    Related: rhbz#1769525
  - tests: Remove nested vm from tar liveimg kickstart test (bcl)
    Related: rhbz#1769525
  - tests: Use --http0.9 for curl ssh test (bcl)
    Related: rhbz#1769525
  - test: Boot the live-iso faster, and login using ssh key (bcl)
    Related: rhbz#1769525
  - tests: Split testing the image into a separate script (bcl)
    Related: rhbz#1769525
  - test: Split up the test class to allow booting other images (bcl)
    Related: rhbz#1769525
  - [tests] Collect compose logs after each build (atodorov)
    Related: rhbz#1769525
  - [tests] Use a function to wait for compose to finish (jikortus)
    Related: rhbz#1769525
  - [tests] Use functions for starting and stopping lorax-composer (atodorov)
    Related: rhbz#1769525
  - tests: Add kickstart tar installation test (jikortus)
    Related: rhbz#1733975
  - tests: add option to disable kernel command line parameters check (jikortus)
    Related: rhbz#1733975
  - tests: Use a loop to wait for VM and sshd to start (bcl)
    Related: rhbz#1733975
  - tests: Drop an old bug reference (bcl) (bcl)


author: Brian C. Lane <bcl@redhat.com> 28.14.34-1
changelog:
  - lorax-composer: Add cloud-init support to the vhd image (bcl)
    Resolves: rhbz#1754711
  - Add dmidecode on supported architectures (bcl)
    Related: rhbz#1714793


author: Brian C. Lane <bcl@redhat.com> 28.14.35-1
changelog:
  - tests: If TEST_OS isn't specified then match the host OS (atodorov)
    Related: rhbz#1769525
  - tests: enable compose_ext4 test to use CDN repos (jrusz)
    Related: rhbz#1777265
  - Add more lines to .gitignore (jrusz)
    Related: rhbz#1777265
  - Remove all repo files & install composer-cli from host repos (atodorov)
    Related: rhbz#1769525
  - Always remove lorax-composer & composer-cli RPMs before installing them (atodorov)
    Related: rhbz#1769525
  - Always remove existing VM image before building new one (atodorov)
    Related: rhbz#1769525


author: Brian C. Lane <bcl@redhat.com> 28.14.36-1
changelog:
  - composer-cli: Only display the available compose types (bcl)
    Related: rhbz#1751998
  - composer-cli: Return int from handle_api_result not bool (bcl)
    Related: rhbz#1779301
  - Add support for API v1 commands upload, and providers (bcl)
    Resolves: rhbz#1779301


author: Brian C. Lane <bcl@redhat.com> 28.14.37-1
changelog:
  - composer-cli: Add python3-pytoml to composer-cli requirements (bcl)
    Related: rhbz#1779301
  - composer-cli: Remove unneeded % from API WARNING message (bcl)
    Related: rhbz#1779301
  - Use mkisofs for the s390 live-iso template (bcl)
    Related: rhbz#1746424


author: Brian C. Lane <bcl@redhat.com> 28.14.38-1
changelog:
  - composer-cli: Increase DELETE timeout to 120s (bcl)
    Resolves: rhbz#1788461
  - Add test for running composer with --no-system-repos option (jikortus)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.39-1
changelog:
  - tests: Enable Elastic Network Adapter support for AWS (atodorov)
    Related: rhbz#1789308
  - AWS test: take into account different instance type for non x86 (atodorov)
    Related: rhbz#1789308
  - lorax-composer: Enable ami on aarch64 (bcl)
    Resolves: rhbz#1789308
  - Add test for canceling a running compose (jrusz)
    Related: rhbz#1788461


author: Brian C. Lane <bcl@redhat.com> 28.14.40-1
changelog:
  - tests: run ssh commands in batch mode (jrusz)
    Related: rhbz#1785154
  - tests: remove --test=2 from compose_sanity (jrusz)
    Related: rhbz#1788461
  - Add tests for metapackages and package name globs (bcl)
    Related: rhbz#1791612
  - tests: Check for cloud-init presence in azure image (jrusz)
    Related: rhbz#1754711


author: Brian C. Lane <bcl@redhat.com> 28.14.41-1
changelog:
  - tests: Add new test to run 'test' and 'check' in cockpit ci (jrusz)
    Related: rhbz#1785154
  - tests: rpm now returns str, drop decode() call (bcl)
    Related: rhbz#1785154
  - tests: Switch to using CentOS8 for the Docker tests (bcl)
    Related: rhbz#1785154
  - tests: Finish switch to using example-development in composer tests (bcl)
    Related: rhbz#1785154
  - tests: this_is_rhel function return true for CentOS or RHEL (bcl)
    Related: rhbz#1785154
  - tests: Disable pylint preexec-fn warning (bcl)
    Related: rhbz#1785154
  - pylint: whitelist the rpm module (bcl)
    Related: rhbz#1785154
  - tests: Use unittest.mock (bcl)
    Related: rhbz#1785154
  - Test & cleanup script for Alibaba cloud (atodorov)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.42-1
changelog:
  - lorax: Restore the 98dracut-systemd service files to the install.img (bcl)
    Related: rhbz#1805405
  - lorax: Add eject back into the boot.iso (bcl)
    Related: rhbz#1805405


author: Brian C. Lane <bcl@redhat.com> 28.14.43-1
changelog:
  - New lorax documentation - 28.14.43 (bcl)
    Related: rhbz#1826479
  - tests: Add tests for variant branding detection (bcl)
    Related: rhbz#1826479
  - lorax: Update how the release package is chosen (bcl)
    Resolves: rhbz#1826479
  - tests: Add tests for branding (bcl)
    Related: rhbz#1826479
  - Move get_dnf_base_object into a module (bcl)
    Related: rhbz#1826479
  - lorax: Add --skip-branding cmdline argument (bcl)
    Resolves: rhbz#1826479


author: Brian C. Lane <bcl@redhat.com> 28.14.44-1
changelog:
  - rsyslog: Disable journal ratelimits during install (bcl)
    Resolves: rhbz#1752754
  - Update datastore for VMware testing (chrobert)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.45-1
changelog:
  - lmc-no-virt: Add requirement on anaconda-install-env-deps (bcl)
    Resolves: rhbz#1827911
  - Fix cherry-pick of extra multipath.conf line (bcl)
    Related: rhbz#1676777
  - Use smarter multipath detection logic. (dlehman)
    Resolves: rhbz#1676777


author: Brian C. Lane <bcl@redhat.com> 28.14.47-1
changelog:
  - lorax-composer: Add deprecation notice to documentation (bcl)
    Related: rhbz#1844649
  - composer-cli: Add documentation for uploads and osbuild-composer (bcl)
    Related: rhbz#1844649
  - composer-cli: Remove the upload and providers commands (bcl)
    Related: rhbz#1844649
  - composer-cli: Return a better error with no value (bcl)
    Related: rhbz#1844649
  - tests: rhel8-branch uses nose not pytest (bcl)
    Related: rhbz#1844649
  - tests: Add tests for composer-cli compose start JSON POST (bcl)
    Related: rhbz#1844649
  - composer-cli: Update bash completion for start-ostree (bcl)
    Related: rhbz#1844649
  - composer-cli: Add new start-ostree command (bcl)
    Resolves: rhbz#1844649
  - composer-cli: Add support for --size to compose start (bcl)
    Related: rhbz#1844649
  - composer-cli: pytoml load() needs an open file not a string (bcl)
    Resolves: rhbz#1843704
  - test: Put VM image overlay into /var/tmp (martin) (martin)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.48-1
changelog:
  - composer-cli: Disable retry counter on connection timeout (bcl)
    Related: rhbz#1848727
  - composer-cli: Change timeout to 5 minutes (bcl)
    Resolves: rhbz#1848727


author: Brian C. Lane <bcl@redhat.com> 28.14.49-1
changelog:
  - include generic.ins for s390 boot iso (dan)
    Related: rhbz#1844517
  - Fix the bug referenced in the last build (bcl)
    Resolves: rhbz#1848727


author: Brian C. Lane <bcl@redhat.com> 28.14.50-1
changelog:
  - composer-cli: Make start-ostree parent and ref optional (bcl)
    Resolves: rhbz#1859680
  - composer-cli: Add a get_arg function (bcl)
    Related: rhbz#1859680


author: Brian C. Lane <bcl@redhat.com> 28.14.51-1
changelog:
  - tests: Overwrite rhel-8.json when testing with osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Allow skipping image build in compose sanity test (atodorov)
    Related: rhbz#1825190
  - Set BACKEND=osbuild-composer if running that test scenario (atodorov)
    Related: rhbz#1825190
  - tests: Don't check info after compose cancel with osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Compare blueprints as TOML objects, not strings (atodorov)
    Related: rhbz#1825190
  - tests: Remove lorax-composer specific checks (atodorov)
    Related: rhbz#1825190
  - tests: Remove compose after we're done (atodorov)
    Related: rhbz#1825190
  - tests: don't use beakerlib in blueprint (lars)
    Related: rhbz#1825190
  - tests: don't depend on internal state of composer (lars)
    Related: rhbz#1825190
  - tests: Do not rely on example blueprints (atodorov)
    Related: rhbz#1825190
  - tests: Special case compose types for osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Don't check example blueprints if we don't have to (atodorov)
    Related: rhbz#1825190
  - tests: Use BACKEND env variable instead of hard-coded values (atodorov)
    Related: rhbz#1825190
  - tests: Disable non-cli test scenarios b/c osbuild-composer (atodorov)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.53-1
changelog:
  - tests: Push example blueprints b/c they may not exist (atodorov)
    Related: rhbz#1825190
  - rhel-livemedia.ks: Add anaconda-live package to the example kickstart (bcl)
    Related: rhbz#1691319
  - Switch VMware testing env to improve stability results (chrobert)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.56-1
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Related: rhbz#1892404
  - Add --squashfs-only option to drop inner rootfs.img layer (marmarek)
    Resolves: rhbz#1846282


author: Brian C. Lane <bcl@redhat.com> 28.14.57-1
changelog:
  - fixes #543 qemu -nodefconfig deprecated (afm404)
    Resolves: rhbz#1904168
  - sshd_config: Apply suggested changes (bcl)
    Resolves: rhbz#1872892


author: Brian C. Lane <bcl@redhat.com> 28.14.58-1
changelog:
  - composer-cli: Add support for start-ostree --url URL (bcl)
    Resolves: rhbz#1929381
  - tests: Override rhel-8-beta.json repositories for osbuild-composer (atodorov)
  - tests: Remove systemctl for osbuild-composer (atodorov)
  - tests: Start osbuild-composer.socket (bcl)
  - test: Fix vm.install for non-LVM cloud images (martin)


author: Brian C. Lane <bcl@redhat.com> 28.14.59-1
changelog:
  - Backport mkksiso to RHEL 8.5.0 (bcl)
    Resolves: rhbz#1955355
  - Move manpages into the correct subpackages (bcl)
    Resolves: rhbz#1928962
  - composer-cli: Update documentation URLs (bcl)
    Resolves: rhbz#1915361
  - Use wildcard for grub2 modules in livemedia.ks example (bcl)
    Related: rhbz#1973530
  - runtime-install: Install ipcalc (bcl)
    Related: rhbz#1958314
  - test: Add new osbuild-composer expected types (martin) (martin)
  - test: Fix URL to bots testmap (martin) (martin)


author: Brian C. Lane <bcl@redhat.com> 28.14.60-1
changelog:
  - New lorax documentation - 28.14.59 (bcl)
    Related: rhbz#1955355
  - docs: Add missing mkksiso.1 manpage (bcl)
    Related: rhbz#1955355
  - docs: Fix reference in composer-cli.rst (bcl)
    Related: rhbz#1915361
  - Makefile: Use user-mode podman and fix docs-in-docker target (bcl)
    Related: rhbz#1955355


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Brian C. Lane <bcl@redhat.com> 28.14.69-1
changelog:
  - runtime-cleanup: Use branding package name instead of product.name (bcl)
    Related: rhbz#2052154
  - treebuilder: Add branding package to template variables (bcl)
    Related: rhbz#2052154
  - api: Read substitution variables from the host (bcl)
    Resolves: rhbz#2095053
  - tests: Switch to using centos:stream8 for Dockerfile.test (bcl)
    Related: rhbz#2095053


author: Brian C. Lane <bcl@redhat.com> 28.14.70-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042101
  - templates: Don't include redhat.exec on s390 (bcl)
    Related: rhbz#2042101
  - templates: Drop non-64bit PPC support from live grub.cfg (bcl)
    Related: rhbz#2042101
  - templates: Update config_files for inst.* usage (bcl)
    Related: rhbz#2042101
  - tests: Run the 'test-in-docker' tests for github PRs (bcl)
    Resolves: rhbz#2095578


author: Brian C. Lane <bcl@redhat.com> 28.14.71-1
changelog:
  - Makefile: skip running pylint for 'make ci' (bcl)
    Related: RHEL-24416
  - templates: Remove libreport bugzilla plugins (bcl)
    Resolves: RHEL-24416


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 28.14.71-1.inferit
changelog:
  - templates: Fixed UTF-8 handling in replace command
  - templates: Added iconv command to convert from UTF-8 to another encoding
  - remove libreport-rhel-anaconda-bugzilla depend


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.0-1
changelog:
  - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a
  standalone package)
  - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.3-1
changelog:
  - Fix labeling on /usr/bin/runc.*
  - Add sandbox_net_domain access to container.te
  - Remove containers ability to look at /etc content


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.4-1
changelog:
  - Add typebounds statement for container_t from container_runtime_t
  - We should only label runc not runc*


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.10-1
changelog:
  - Update to the latest container-selinux patch from upstream
  - Label files under /usr/libexec/lxc as container_runtime_exec_t
  - Give container_t access to XFRM sockets
  - Allow spc_t to dbus chat with init system
  - Allow containers to read cgroup configuration mounted into a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.19-1
changelog:
  - Fix mcs transition problem on stdin/stdout/stderr
  - Add labels for CRI-O
  - Allow containers to use tunnel sockets


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.27-1
changelog:
  -  Allow container runtimes to work with the netfilter sockets
  -  Allow container_file_t to be an entrypoint for VM's
  -  Allow spc_t domains to transition to svirt_t


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.31-1
changelog:
  - Allow the container runtime to dbus chat with dnsmasq
  - add dontaudit rules for container trying to write to /proc


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.37-1
changelog:
  - Allow containers to use inherited ttys
  - Allow ostree to handle labels under /var/lib/containers/ostree


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.39-1
changelog:
  - Allow container runtimes to use interited terminals.  This helps
  satisfy the bounds check of container_t versus container_runtime_t.


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.48-1
changelog:
  - Update policy to match master branch
  - Remove typebounds and replace with nnp_transition and nosuid_transition calls


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.49-1
changelog:
  - Add support for MLS running container runtimes
  - Add missing allow rules for running systemd in a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.55-1
changelog:
  Allow iptables to read container state
      Dontaudit attempts from containers to write to /proc/self
      Allow spc_t to change attributes on container_runtime_t fifo files


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.60-1
changelog:
  - Allow containers to list cgroup directories
  - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.


author: Jindrich Novy <jnovy@redhat.com> - 2:2.134.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.134.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.135.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.135.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.137.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.137.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.138.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.138.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.139.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.139.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.142.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.142.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.143.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.143.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.144.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.144.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.159.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.159.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.160.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.1-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.160.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.160.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.163.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.163.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.165.1-2
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.165.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.168.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.168.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.169.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.169.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.170.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.170.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.171.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.171.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <lsm5@redhat.com> - 2:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - remove dependency on policycoreutils-python-utils as it pulls in python
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.193.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.193.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.211.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.211.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.213.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.213.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.215.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176055


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Marek Polacek <polacek@redhat.com> 8.5.0-20
changelog:
  - fix for TLSLD references (#2213753)
  - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - adjust a pattern in s390.md (PR target/87723, #2214847)


author: Marek Polacek <polacek@redhat.com> 8.2.1-1.3
changelog:
  - change the default -march on s390x to z13 with tuning for z14 (#1571124)
  - use --disable-multilib on s390x


author: Jeff Law <law@redhat.com> 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Marek Polacek <polacek@redhat.com> 8.3.1-5
changelog:
  - update from Fedora gcc-8.3.1-5 (#1747157)
  - use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847)


author: Marek Polacek <polacek@redhat.com> 8.3.1-5.1
changelog:
  - consider negative edges in cycle detection (#1817991, PR gcov-profile/91601)
  - fix Fortran debug info for arrays with descriptors (#1655624,
    PR fortran/92775)
  - fix wrong code emitted for movv1qi on s390x (#1784758, PR target/92950)


author: Marek Polacek <polacek@redhat.com> 8.4.1-1
changelog:
  - update from GCC 8.4 release (#1868446)
  - remove symlinks to 32-bit versions of these static libraries: libasan.a,
    libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)


author: Marek Polacek <polacek@redhat.com> 8.5.0-2
changelog:
  - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
  - fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-5
changelog:
  - Update to the latest upstream commit 47216437e79a
  - ("Fix "net" command on kernel configured with CONFIG_IPV6=m")


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-8
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  - Fix invalid structure size error during crash startup on ppc64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.130-6
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove owneship of %{_fontdir} in -common
  - Remove group tag


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.5-4
changelog:
  - Fixed support for /dev/ttyUSB devices (bug #212577, STR #2061).
  - Fixed parallel backend (bug #213021, STR #2056).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-4
changelog:
  - Another LSPP fix (bug #216669).
  - Fixed LSPP SELinux check (bug #216855).
  - Increased PPD timeout in copy_model() (bug #216065).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-6
changelog:
  - Fixed If-Modified-Since: handling in libcups (bug #217556, STR #2133).
  - Fixed extra EOF in pstops output (bug #216154, STR #2111).
  - Use upstream patch for STR #2121.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-8
changelog:
  - Removed logrotate config file and maxlogsize patch (bug #227369).  Now
    CUPS is in charge of rotating its own logs, and defaults to doing so once
    they get to 1Mb in size.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-6
changelog:
  - Fixed 'cancel' man page (bug #234088).
  - Added empty subscriptions.conf file to make sure it gets the right
    SELinux file context.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-7
changelog:
  - Until bug #236736 is fixed, work around the kernel usblp driver's
    quirks so that we can detect paper-out conditions.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Make the initscript use start priority 56 (bug #213828).
  - Better paper-out detection patch (bug #241589).


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.2
changelog:
  - Build requires avahi-compat-libdns_sd-devel.  Applied patch to fix
    build against avahi (bug #245824).
  - Build requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.3
changelog:
  - Change initscript start level to 98, to start after avahi but before
    haldaemon.
  - The devel sub-package requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.1
changelog:
  - Better buildroot tag.
  - Moved LSPP access check in add_job() to before allocation of the job
    structure (bug #231522).
  - 1.3rc2.  No longer need avahi patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.2
changelog:
  - Make cancel man page work properly with alternatives system (bug #249768).
  - Don't call aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.3-3
changelog:
  - Use ppdev instead of libieee1284 for parallel port Device ID
    retrieval (bug #311671).  This avoids SELinux audit messages.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.4-2
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #250161).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #345101).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
    are linked with gnutls.
  - LSPP cupsdSetString/ClearString fixes (bug #378451).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - CVE-2007-4045 patch is not necessarily because cupsd_client_t objects are
    not moved in array operations, only pointers to them.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Apply patch to prevent overlong PPD lines from causing failures except
    in strict mode (bug #405061).  Needed for compatibility with older
    versions of foomatic (e.g. Red Hat Enterprise Linux 3/4).
  - Applied upstream patch to fix cupsctl --remote-any (bug #421411, STR #2650).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-4
changelog:
  - Fix compilation of SO_PEERCRED support.
  - Include fixes from svn up to revision 7287.  No longer need str2650 or
    str2664 patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-6
changelog:
  - Include fixes from svn up to revision 7304.  No longer need str2703 patch.
    Build with --with-dbusdir.
  - Try out logrotate again (bug #432730).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-3
changelog:
  - Set MaxLogSize to 0 to prevent log rotation.  Upstream default is 1Mb, but
    we want logrotate to be in charge.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-4
changelog:
  - LSB header for initscript (bug #246897).
  - Move HTML-related files to main application directory so that the CUPS
    web interface still works even with --excludedocs (bug #375631).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-9
changelog:
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-3
changelog:
  - If cupsdTimeoutJob is called when the originating connection is still
    known, pass that to the function so that copy_banner can get at it if
    necessary (bug #447200).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - CVE-2008-1373 patch is no longer needed (applied upstream).
  - Mark HTML files and templates config(noreplace) for site-local
    modifications (bug #441719).
  - The cups-devel package requires zlib-devel (bug #455192).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed autoconf requirement by applying autoconf-generated changes
    to patches that caused them.  Affected patches: cups-lspp.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.8-5
changelog:
  - The dnssd backend uses avahi-browse so require it (bug #458565).
  - New php sub-package (bug #428235).
  - cups-polld: reinit the resolver if we haven't yet resolved the
    hostname (bug #354071).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.9-1
changelog:
  - 1.3.9, including fixes for CVE-2008-3639 (STR #2918, bug #464710),
    CVE-2008-3640 (STR #2919, bug #464713) and CVE-2008-3641 (STR #2911,
    bug #464716).
  - No longer need str2892 or res_init patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.3
changelog:
  - 1.4b1.
  - No longer need ext, includeifexists, foomatic-recommended,
    getnameddest, str2101, str2536 patches.
  - Require poppler-utils at runtime and for build.  No longer need
    pdftops.conf.
  - Obsolete cupsddk.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.5
changelog:
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Attempt to unbreak the fix for STR #2831 (bug #474742).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.6
changelog:
  - Beginnings of avahi support.  The dnssd backend should now work, but
    the scheduler will not yet advertise DNS-SD services.
  - No longer require avahi-tools as the dnssd backend does not use the
    command line tools any longer.
  - Load MIME type rules correctly (bug #426089, STR #3059).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.7
changelog:
  - Prevent cups-deviced missing devices (STR #3108).
  - Actually drop the perl implementation of the dnssd backend and use
    the avahi-aware one.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.12
changelog:
  - If cups-polld gets EAI_AGAIN when looking up a hostname,
    re-initialise the resolver (bug #490943).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.13
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, snmp.conf,
    subscriptions.conf, lpoptions (bug #486287).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.14
changelog:
  - Applied patch to fix CVE-2009-0163 (bug #490596).
  - Applied patch to fix CVE-2009-0164 (bug #490597).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.15
changelog:
  - Accept "Host: ::1" (bug #497393).
  - Accept Host: fields set to the ServerName value (bug #497301).
  - Specify that we want poppler's pdftops (not ghostscript) for the
    pdftops wrapper when calling configure.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.1
changelog:
  - 1.4rc1.  No longer need str3124, CVE-2009-0163, CVE-2009-0164,
    str3197, missing-devices patches.
  - Disabled avahi patch for the time being.  More work is needed to
    port this to rc1.
  - Removed wbuffer patch as it is not needed (see STR #1968).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.3
changelog:
  - Don't use RPM_SOURCE_DIR macro.
  - Fixed add/modify-printer templates which had extra double-quote
    characters, preventing the Continue button from appearing in certain
    browsers (bug #506461, STR #3229).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.7
changelog:
  - Fixed template problem preventing current printer option defaults
    from being shown in the web interface (bug #506794, STR #3244).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.10
changelog:
  - Applied patch to prevent bad job control files crashing cupsd on
    start-up (STR #3253, bug #509741).
  - Correctly handle CUPS-Get-PPDs requests for models with '+' in their
    names (STR #3254, bug #509586).
  - Accept incorrect device URIs in the (non-libusb) usb backend for
    compatibility with Fedora 11 before bug #507244 was fixed.
  - Applied patch to fix incorrect device URIs (STR #3259, bug #507244).
  - Applied patch to fix job-hold-until for remote queues (STR #3258,
    bug #497376).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.12
changelog:
  - Fixed Avahi support in the dnssd backend (bug #513888).
  - Fixed incorrect arguments to sigaction() in dnssd backend (STR #3272).
  - Cheaply restore compatibility with 1.1.x by having cups_get_sdests()
    perform a CUPS_GET_CLASSES request if it is not sure it is talking
    to CUPS 1.2 or later (bug #512866).
  - Prevent ipp backend looping with bad IPP devices (bug #476424,
    STR #3262).
  - Fixed Device ID reporting in the usb backend (STR #3266).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.13
changelog:
  - Ship udev rules to allow libusb to access printer devices.
  - Fixed duplex test pages (bug #514898, STR #3277).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.14
changelog:
  - Fixed ppds.dat handling of drv files (bug #515027, STR #3279).
  - Fixed udev rules file to avoid DEVTYPE warning messages.
  - Fixed cupsGetNamedDest() so it does not fall back to the default
    printer when a destination has been named (bug #516439, STR #3285).
  - Fixed MIME type rules for image/jpeg and image/x-bitmap
    (bug #516438, STR #3284).
  - Clear out cache files on upgrade.
  - Require acl.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.16
changelog:
  - Fixed JobKillDelay handling for cancelled jobs (bug #518026, STR
    - Use 'exec' to invoke ghostscript in the pstoraster filter.  This
    allows the SIGTERM signal to reach the correct process, as well as
    conserving memory (part of bug #518026).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.19
changelog:
  - Prevent infinite loop in cupsDoIORequest when processing HTTP
    errors (bug #518065, bug #519663, STR #3311).
  - Fixed document-format-supported attribute when
    application/octet-stream is enabled (bug #516507, STR #3308, patch
    from Jiri Popelka).
  - Fixed buggy JobKillDelay handling fix (STR #3292).
  - Prevent infinite loop in ppdc (STR #3293).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.0-2
changelog:
  - Fixed the dnssd backend so that it only reports devices once avahi
    resolution has completed.  This makes it report Device IDs
    (bug #520858).
  - Fix locale code for Norwegian (bug #520379).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-4
changelog:
  - Changed cups.init to be LSB compliant (bug #521641), i.e.
    return code "2" (instead of "3") if invalid arguments
    return code "4" if restarting service under nonprivileged user
    return code "5" if cupsd not exist or is not executable
    return code "6" if cupsd.conf not exist


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-13
changelog:
  - Fix incorrectly applied patch from #STR3285 (bug #531108).
  - Set the PRINTER_IS_SHARED variable for admin.cgi (bug #529634, #STR3390).
  - Pass through serial parameters correctly in web interface (bug #529635, #STR3391).
  - Fixed German translation (bug #531144, #STR3396).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-1
changelog:
  - 1.4.2.  No longer need str3380, str3332, str3356, str3396 patches.
  - Removed postscript.ppd.gz (bug #533371).
  - Renumbered patches and sources.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-5
changelog:
  - Fixed typo in admin web template (bug #537884, STR #3403).
  - Reset SIGPIPE handler for child processes (bug #537886, STR #3399).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-6
changelog:
  - Fixed display of current driver (bug #537182, STR #3418).
  - Fixed out-of-memory handling when loading jobs (bug #538054,
    STR #3407).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-14
changelog:
  - The scheduler did not use the Get-Job-Attributes policy for a
    printer (STR #3431).
  - The scheduler added two job-name attributes to each job object
    (STR #3428).
  - The scheduler did not clean out completed jobs when
    PreserveJobHistory was turned off (STR #3425).
  - The web interface did not show completed jobs (STR #3436).
  - Authenticated printing did not always work when printing directly to
    a remote server (STR #3435).
  - Use upstream patch to stop the network backends incorrectly clearing
    the media-empty-warning state (rev 8896).
  - Use upstream patch to fix interrupt handling in the side-channel
    APIs (rev 8896).
  - Use upstream patch to handle negative SNMP string lengths (rev 8896).
  - Use upstream fix for SNMP detection (bug #542857, STR #3413).
  - Use the text filter for text/css files (bug #545026, STR #3442).
  - Show conflicting option values in web UI (bug #544326, STR #3440).
  - Use upstream fix for adjustment of conflicting options
    (bug #533426, STR #3439).
  - No longer requires paps.  The texttopaps filter MIME conversion file
    is now provided by the paps package (bug #545036).
  - Moved %{_datadir}/cups/ppdc/*.h to the main package (bug #545348).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-20
changelog:
  - Fixed ipp authentication for servers requiring authentication for
    IPP-Get-Printer-Attributes (bug #548873, STR #3458).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-21
changelog:
  - Fixed patch for STR #3425 again by adding in back-ported change from
    svn revision 8929 (bug #549899).  No longer need
    delete-active-printer patch.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-22
changelog:
  - Removed use of prereq and buildprereq.
  - Fixed use of '%' in changelog.
  - Versioned explicit obsoletes/provides.
  - Use tabs throughout.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-23
changelog:
  - Use %{_initddir}, %{_sysconfdir} and SMP make flags.
  - Use mode 0755 for binaries and libraries where appropriate.
  - Fix lpd obsoletes tag.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-32
changelog:
  - Fixed cupsGetNamedDest() so it falls back to the real default
    printer when a default from configuration file does not exist (bug #565569, STR #3503).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-33
changelog:
  - Don't own filesystem locale directories (bug #569403).
  - Don't apply gcrypt threading patch (bug #553834).
  - Don't treat SIGPIPE as an error (bug #569770).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-34
changelog:
  - Applied patch for CVE-2010-0302 (incomplete fix for CVE-2009-3553,
    bug #557775).
  - Added comments for all sources and patches.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-35
changelog:
  - Fixed (for the third time) patch for STR #3425 to correctly
    remove job info files in /var/spool/cups (bug #571830).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-1
changelog:
  - 1.4.3.
  - No longer need CVE-2009-3553, str3381, str3390, str3391,
    str3403, str3407, str3413, str3418, str3422, str3425,
    str3428, str3431, str3435, str3436, str3439, str3440,
    str3442, str3448, str3458, str3460, cups-sidechannel-intrs,
    negative-snmp-string-length, cups-media-empty-warning patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.3-9
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed unapplied gnutls-gcrypt-threads patch.  Fixed typos in
    descriptions for lpd and php sub-packages.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-1
changelog:
  - 1.4.4.  Fixes several security vulnerabilities (bug #605399):
    CVE-2010-0540, CVE-2010-0542, CVE-2010-1748.  No longer need str3503,
    str3399, str3505, str3541, str3425p2 or CVE-2010-0302 patches.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Merged F-12 change:
    - Use numeric addresses for interfaces unless HostNameLookups are
      turned on (bug #583054).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-10
changelog:
  - Perform locking for gnutls and avoid libgcrypt's broken
    locking (bug #607159).
  - Build with --enable-threads again (bug #607159).
  - Force the use of gnutls despite thread-safety concerns (bug #607159).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-12
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, bug #652161).
  - Don't crash when MIME database could not be loaded (bug #610088).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-4
changelog:
  - Changed subsystem lock file name in initscript
    so the service is correctly stopped on reboot or halt (bug #659391).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-5
changelog:
  - Fixed character encoding in CREDITS.txt.
  - Mark D-Bus configuration file as config file.
  - Don't mark MIME types and convs files as config files.  Overrides
    can be placed as new *.types/*.convs files in /etc/cups.
  - Don't mark banners as config files.  Better is to provide new
    banners.
  - Don't mark templates and www files as config files.  A better way to
    provide local overrides is to use a different ServerRoot setting.
    Note that a recent security fix required changed to template files.
  - Provide versioned LPRng symbol for rpmlint.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-6
changelog:
  - The cups-config man page has been moved to the devel sub-package.
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-2
changelog:
  - Use a smaller buffer when writing to USB devices (bug #661814).
  - Handle EAI_NONAME when resolving hostnames (bug #617208).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-4
changelog:
  - Properly separated serverbin-compat and lspp patches.
  - Updated ICC patch (still not yet applied).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-6
changelog:
  - Don't use --enable-pie configure option as it has been removed and
    is now assumed.  See STR #3691.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.1.b1
changelog:
  - 1.5b1
    - removed cups-texttops-rotate-page.patch (#572338 is CANTFIX)
    - removed cups-page-label.patch (#520141 seems to be CANTFIX)


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.10.rc1
changelog:
  - Don't use portreserve any more.  Better approach is to use systemd
    socket activation (not yet done).


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.14.rc1
changelog:
  - Undo last change which had no effect.  We already remove the .SILENT
    target from the Makefile as part of the build.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-6
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well (bug #731421 comment #8).


author: Richard Hughes <rhughes@redhat.com> 1:1.5.0-11
changelog:
  - Updated colord patch with fixes to DeleteDevice.
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=741697


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-12
changelog:
  - More fixes for systemd socket activation:
    - relax permissions check for domain socket in libcups.
    - initialise addrlen before calling getsockname().


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-16
changelog:
  - Use upstream fix for driverd issue (bug #742989).
  - Array handling fixes for DNSSDPrinters.
  - Array handling fixes for Avahi poll implementation.
  - Increase client blocking timeout from 30s to 70s (bug #744715).
  - Set BindIPv6Only=ipv6-only in systemd socket unit file as better fix
    for bug #737230.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-18
changelog:
  - Make sure to guard against retrying the Avahi connection whilst
    already doing so (Ubuntu #877967).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-23
changelog:
  - Detangle cups-serverbin-compat.patch from cups-lspp.patch.
  - Bind to datagram socket as well in systemd cups.socket unit file, to
    prevent that port being stolen by another service (bug #760070).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-26
changelog:
  - Replace newline characters with spaces in reported Device IDs
    (bug #782129, STR #4005).
  - Don't accept Device URIs of '\0' from SNMP devices
    (bug #770646, STR #4004).


author: Remi Collet <remi@fedoraproject.org> 1:1.5.0-28
changelog:
  - build against php 5.4.0, patch for STR #3999
  - add filter to fix private-shared-object-provides
  - add %check for php extension


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-2
changelog:
  - Synthesize notify-printer-uri for job-completed events where the job
    never started processing (bug #784786, STR #4014).
  - Removed banners from LSPP patch on Dan Walsh's advice.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-8
changelog:
  - Avoid systemd PrivateTmp bug by explicitly requiring the fixed
    version of systemd (bug #807672).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-10
changelog:
  - Removed private-shared-object-provides filter lines as they are not
    necessary (see bug #807767 comment #3).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-11
changelog:
  - The IPP backend did not always setup username/password authentication
    for printers (bug #810007, STR #3985)
  - Detect authentication errors for all requests.
    (bug #810007, upstream commit revision10277)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-12
changelog:
  - Install /usr/lib/tmpfiles.d/cups-lp.conf to support /dev/lp* devices (#812641)
  - Move /etc/tmpfiles.d/cups.conf to /usr/lib/tmpfiles.d/ (#812641)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-13
changelog:
  - Add triggers for samba4-client. (#817110)
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - %defattr no longer needed in %files sections.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-1
changelog:
  - 1.6.1
   - simplified systemd.patch due to removed CUPS Browsing protocol (STR #3922)
   - removed:
     textonly filter - moved to cups-filters
     pstopdf filter - cups-filters also has pstopdf (different)
     PHP module - moved to cups-filters (STR #3932)
     serial.patch - moved to cups-filters
     getpass.patch - r10140 removed the getpass() use
     snmp-quirks.patch - fixed upstream (r10493)
     avahi patches - merged upstream (STR #3066)
     icc.patch - merged upstream (STR #3808)
   - TODO:
     - do we need cups-build.patch ?
  - added filesystem sub-package (#624695)
  - use macroized systemd scriptlets


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-11
changelog:
  - Apply upstream fix for CVE-2012-5519 (STR #4223, bug #875898).
    Migrate configuration keywords as needed.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-13
changelog:
  - Applied additional upstream patch for CVE-2012-5519 so that the
    RemoteRoot keyword is recognised in the correct configuration file.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-16
changelog:
  - Additional fix relating to CVE-2012-5519 to avoid misleading error
    message about actions to take to enable file device URIs.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-17
changelog:
  - Migrate cups-lpd from xinetd to systemd socket activatable service (#884641).
  - Clean up old Requires/Conflicts/Obsoletes/Provides.


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.6.1-23
changelog:
  - Removed obsolete browsing directives from cupsd.conf (bug #880826, STR #4157).
  - Updated summary and descriptions (#882982).
  - Fixed bogus dates in changelog.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - cups-dbus-utf.patch: now that the scheduler only accepts valid UTF-8
    strings for job-name, there's no need to validate it as UTF-8 in the
    dbus notifier.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.19.rc1
changelog:
  - Fixed avahi-no-threaded patch (was missing part of cupsd.h). Thanks
    to Joseph Wang for spotting it.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.26.rc1
changelog:
  - Reverted upstream change to FINAL_CONTENT_TYPE in order to fix
    printing to remote CUPS servers (bug #1010580).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-9
changelog:
  - dbus notifier: call _exit when handling SIGTERM (STR #4314).
  - Use '-f' when using rm in %setup section.
  - Fixed avahi-no-threaded patch so it removes a call to
    avahi_threaded_poll_stop() (bug #1044602).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-10
changelog:
  - Removed cups-dbus-utf8.patch as no longer needed (see STR #4314).
  - Return jobs in rank order when handling IPP-Get-Jobs (STR #4326).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.1-6
changelog:
  - Track local default in cupsEnumDests() (STR #4332).
  - libcups: avoid race condition when sending IPP requests (STR #4386).
  - Prevent feedback loop when fetching error_log over HTTP (STR #4366).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-9
changelog:
  - New client subpackage containing command line client tools (bug #1002342).
  - Removed unneeded Group tags.
  - Removed 'Requires: /sbin/chkconfig'.
  - Moved 'Provides: lpd' to lpd subpackage.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.5-4
changelog:
  - Removed old one-off trigger now it's no longer needed.
  - Run systemd postun script for path and socket unit files as well as
    the main service unit file.
  - Upstream patch for STR #4396, pre-requisite for STR #2913 patch.
  - Upstream patch for STR #2913 to limit Get-Jobs replies to 500 jobs
    (bug #421671).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-4
changelog:
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149244).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-10
changelog:
  - cups-lspp.patch: use cupsdLogJob() when appropriate.
  - Fixed some warnings in cups-lspp.patch.
  - New systemd journal fields CUPS_DEST and CUPS_PRINTER, as well as
    accurate code location fields.


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-11
changelog:
  - Removed openssl requirements from spec file as it is no longer
    supported upstream (see bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-12
changelog:
  - Re-introduce SSLOptions configuration directive, disable SSL3 by
    default (STR #4476).
  - Enable SSL again via GnuTLS (bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.3-3
changelog:
  - Fix slow resume of jobs after restart (STR #4646).
  - Fix redirection from CGI scripts (bug #1232030, STR #4538).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3
changelog:
  - Unable to print from Windows (7) on a Cups-Server(2.2.1-1) with german umlauts in the filename (bug #1386751)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-4
changelog:
  - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46
changelog:
  - 2074684 - lp to a remote server takes a long time
  - 2074736 - CUPS is too chatty about "Removing document files." in debug mode


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64
changelog:
  - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-6
changelog:
  - Set cost for text filters to 200 so that the paps filter gets
    preference for the time being (bug #988909).


author: Tim Waugh <twaugh@redhat.com> - 1.0.36-3
changelog:
  - Upstream patch to re-work filter costs (bug #998977). No longer need
    text filter costs patch as paps gets used by default now if
    installed.


author: Tim Waugh <twaugh@redhat.com> - 1.0.41-4
changelog:
  - Adjust filter costs so application/vnd.adobe-read-postscript input
    doesn't go via pstotiff (bug #1008166).


author: Tim Waugh <twaugh@redhat.com> - 1.0.54-2
changelog:
  - Fix build issue (bug #1106101).
  - Don't use grep's -P switch in pstopdf as it needs execmem (bug #1079534).
  - Return work-around patch for bug #768811.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-3
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Christian Heimes <cheimes@redhat.com> - 0.2.0-4
changelog:
  - Add missing runtime requirement on python[23]-systemd.
  - Drop unnecesary build dependency on python%{python3_pkgversion}-configparser.
  - Fix tests, don't try to download dnspython3.


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Run tests with global site packages
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-2
changelog:
  - Run Custodia daemon with Python 3
  - Resolves: Bug 1426737 - custodia: Provide a Python 3 subpackage


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-2
changelog:
  - Skip etcd store on PPC64
  - Add missing pre/post install hooks for systemd service
  - Custodia 0.5 is compatible with FreeIPA 4.4.5 and newer
  - Drop custodia user from tmpfiles.d conf


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.5.10-1
changelog:
  - Initial update to the 2.5 series.
  - Significant spec cleanups.
  - Add sscg dep and follow
    https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup for initial
    cert generation.
  - Change default conf to use the system crypto policy.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-1
changelog:
  - Initial attempt at importing 3.0.  Many new dependencies.
  - Use a stock sample imapd.conf file instead of a Fedora-provided one.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-2
changelog:
  - Add patch to fix up some endianness issues.
  - Enable both test suites on all architectures.
  - Add arch-specific excludes for a few Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-3
changelog:
  - Remove clamav from build requirements.
  - Add --cleanup to Cassandane call to hopefully reduce build disk usage.
  - Disable maxforkrate test on s390x; our builders are too slow to run it.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-5
changelog:
  - Use proper path to ctl_mboxlist in cron file.
  - Add patch to increase individual test timeout.  Sometimes armv7hl can't
    complete a single test in 20 seconds.
  - Disable the Metronome tests; upstream says that they just won't reliably on
    shared hardware.
  - Don't bother running Cassandane on s390x for now.  The machines are simply
    too slow.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-6
changelog:
  - Rename two commands: quota -> cyr_quota, restore -> cyr_restore.
  - Fix Cassandane to handle those renames.
  - Fix location of cyr_fetchnews.
  - Fix Perl 5.26-related module linking issue which caused a test failure.
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1461669


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-7
changelog:
  - Add old /usr/lib/cyrus-imapd directory to the utils package and add a symlink
    there to the deliver binary.  This should help a bit with migrations.
  - Add upstream patch to fix reconstruct failures on 32-bit architectures.
    Re-enable those five Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-2
changelog:
  - Exclude one more test from 32-bit arches.  Looks like this failure crept in
    with the Cassandane update.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-3
changelog:
  - Patch the provided imapd.conf and cyrus.conf to more closely match previous
    Fedora defaults and directories included in this package and to enable
    features which are supported by the Fedora build.
  - Add tmpfiles.d configuration file for directories in /run.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-5
changelog:
  - Add two patches from upstream which fix JMAPCalendars issues on 32-bit and
    big-endian architectures.
  - Clean up test invocation and exclusion list.  More tests pass now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.3-1
changelog:
  - Update to 3.0.3, which contains an important security fix.  The fix is not
    embargoed but no CVE has been assigned yet.
  - Drop patches merged upstream.
  - An update of imaptest has resulted in three additional cassandane failures,
    reported upstream as https://github.com/cyrusimap/cyrus-imapd/issues/2087.
    In order to get the security fix out without delay, those three tests have been
    disabled.


author: Pavel Zhukov <landgraf@fedoraproject.org> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Patched cassandane for new behaviour. It should be updated idealy.
  - Disable ImapTest.urlauth2 test; it seems to fail randomly regardless of
    architecture.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.4-3
changelog:
  - Rebuild for new libical.
  - Add patch to fix compilation error with new libical.
  - Disable two tests which fail due to the new libical.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-3
changelog:
  - Re-enable clamav and mariadb support as those are now built with openssl 1.1.
  - But no clamav on ppc64 because of
    https://bugzilla.redhat.com/show_bug.cgi?id=1534071


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-5
changelog:
  - Add patch to fix segfaults in squatter.
  - Exclude one test on all releases instead of just F28+.
  - Remove --cleanup from cassandane invocation.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-6
changelog:
  - Update cassandane checkout.
  - Add two new build dependencies.
  - Remove all JMAP-related tests from the exclusion lists, since cassandane no
    longer runs any JMAP tests on cyrus 3.0.
  - Collapse unused test skip lists.
  - Add ten additional skipped tests, after consultation with upstream.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-10
changelog:
  - Update cassandane checkout to fix a test that was broken by DST.
  - Add patch to fix sieve scripts for usernames containing a dot.
  - Disable imaptest in cassandane until
    https://bugzilla.redhat.com/show_bug.cgi?id=1562970 is fixed.
  - Re-enable tests on s390; it seems to be better now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-11
changelog:
  - Re-enable imaptest on >= F29.
  - F29's imaptest fixes several bugs, allowing all tests to be run there.
  - Relocate cassandane base port to hopefully work better in koji.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-12
changelog:
  - Update list of excluded tests.
  - Update Cassandane snapshot; use new base_port config setting.  No need to
    patch that in now.
  - Add four new expected-to-fail tests from new Cassandane snapshot.
  - Add patch to collect extra Cassandane logging in case we hit some of those
    sporadic failures again.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.6-1
changelog:
  - Update to 3.0.6.
  - Remove upstreamed patches and renumber the rest.
  - Disable one new failing test:
    https://github.com/cyrusimap/cyrus-imapd/issues/2332


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: - John W. Linville <linville@redhat.com> - 1.7.0-2
changelog:
  - Use EXTRA_CFLAGS to include standard Fedora compiler flags in build
  - Set CONFIG_RTE_MACHINE=default to build for least-common-denominator machines
  - Turn-off build of librte_acl, since it does not build on default machines
  - Turn-off build of physical device PMDs that require kernel support
  - Clean-up the install rules to match current packaging
  - Correct changelog versions 1.0.7 -> 1.7.0
  - Remove ix86 from ExclusiveArch -- it does not build with above changes


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-4
changelog:
  - Copy the headers instead of broken symlinks into -devel package
  - Force sane mode on the headers
  - Avoid unnecessary %exclude by not copying unpackaged content to buildroot
  - Clean up summaries and descriptions
  - Drop unnecessary kernel-devel BR, we are not building kernel modules


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-5
changelog:
  - Avoid unnecessary use of %global, lazy expansion is normally better
  - Drop unused destdir macro while at it
  - Arrange for RTE_SDK environment + directory layout expected by DPDK apps
  - Drop config from main package, it shouldn't be needed at runtime


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-6
changelog:
  - Avoid variable expansion in the spec here-documents during build
  - Drop now unnecessary debug flags patch
  - Add a spec option to build a combined library


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-7
changelog:
  - Policy compliance: move static libraries to -devel, provide dpdk-static
  - Add a spec option to build as shared libraries


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-2
changelog:
  - Enable librte_vhost, which buildrequires fuse-devel
  - Enable physical NIC drivers that build (e1000, ixgbe) for VFIO use


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-3
changelog:
  - Fix -Wformat clash preventing i40e driver build, enable it
  - Fix -Wall clash preventing enic driver build, enable it


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-5
changelog:
  - Add DT_NEEDED for external dependencies (pcap, fuse, dl, pthread)
  - Enable combined library creation, needed for OVS
  - Enable shared library creation, needed for sanity


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-10
changelog:
  - Drop symbol versioning patches, always do library version for shared
  - Add comment on the combined library thing


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1695.gitc2ce3924.1
changelog:
  - Add spec magic to easily switch between stable and snapshot versions
  - Add tarball snapshot script for reference
  - Update to pre-2.0 git snapshot


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.2
changelog:
  - Move config changes from spec after "make config" to simplify things
  - Move config changes from dpdk-config patch to the spec


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.3
changelog:
  - Add spec option to build kernel modules too
  - Build eventfd-link module too if kernel modules enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1906.git00c68563.1
changelog:
  - New snapshot
  - Remove bogus devname module alias from eventfd-link module
  - Whack evenfd-link to honor RTE_KERNELDIR too


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1911.gitffc468ff.1
changelog:
  - New snapshot
  - Disable kernel module build by default
  - Add patch to fix missing defines/includes for external applications


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2049.git2f95a470.1
changelog:
  - New snapshot
  - Add spec option for enabling vhost-user instead of vhost-cuse
  - Build requires fuse-devel only with vhost-cuse
  - Add virtual provide for vhost user/cuse tracking


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2086.git263333bb.2
changelog:
  - Switch (back) to vhost-user, thus disabling vhost-cuse support
  - Build requires fuse-devel for now even when fuse is unused


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-2
changelog:
  - Remove the broken kmod stuff
  - Add a new dkms-based eventfd_link subpackage if vhost-cuse is enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-3
changelog:
  - Dont depend on fuse when built for vhost-user support
  - Drop version from testpmd binary, we wont be parallel-installing that


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-4
changelog:
  - Drop unused pre-2.0 era patches
  - Handle vhost-user/cuse selection automatically based on the copr repo name


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-7
changelog:
  - Drop pointless build conditional, the linker script is here to stay
  - Drop vhost-cuse build conditional, vhost-user is here to stay
  - Cleanup comments a bit
  - Enable parallel build again
  - Dont build examples by default


author: Panu Matilainen <pmatilai@redhat.com> - 2.1.0-1
changelog:
  - Update to dpdk 2.1.0 final
    - Disable ABI_NEXT
    - Rebase patches as necessary
    - Fix build of ip_pipeline example
    - Drop no longer needed -Wno-error=array-bounds
    - Rename libintel_dpdk to libdpdk


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-1
changelog:
  - Update DPDK to 2.2.0 final
  - Add README and MAINTAINERS docs
  - Adopt new upstream standard installation layout, including
    dpdk_nic_bind.py renamed to dpdk_nic_bind
  - Move the unversioned pmd symlinks from libdir -devel
  - Establish a driver directory for automatic driver loading
  - Disable CONFIG_RTE_SCHED_VECTOR, it conflicts with CONFIG_RTE_MACHINE default
  - Disable experimental cryptodev library
  - More complete dtneeded patch
  - Make option matching stricter in spec setconf
  - Update driverctl to 0.59


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-2
changelog:
  - Use a different quoting method to avoid messing up vim syntax highlighting
  - A string is expected as CONFIG_RTE_MACHINE value, quote it too
  - Enable librte_vhost NUMA-awareness


author: Panu Matilainen <pmatilai@redhat.com> - 16.07-1
changelog:
  - Update to DPDK 16.07 (#1383195)
  - Disable unstable bnx2x driver (#1330589)
  - Enable librte_vhost NUMA support again (#1279525)
  - Enable librte_cryptodev, its no longer considered experimental
  - Change example prefix to dpdk- for consistency with other utilities
  - Update driverctl to 0.89


author: John W. Linville <linville@redhat.com> - 16.11.2-3
changelog:
  - Enable i40e driver in PowerPC along with its altivec intrinsic support
  - Add PCI probing support for vfio-pci devices in Power8


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Jens Freimann <jfreimann@redhat.com> - 18.11.2-3
changelog:
  - Add fix for wrong pointer calculation to fix Covscan issue
  - https://cov01.lab.eng.brq.redhat.com/covscanhub/task/135452/log/added.html


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Coty Sutherland <csutherl@redhat.com> - 1:4.20-10
changelog:
  - Drop unnecessary javax16.api.jar (again)
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Krzysztof Daniel <kdaniel@redhat.com> 3.5.6-3
changelog:
  - Don't duplicate org.apache* plugins
  - Use context qualifier to avoid constant feature version changes.


author: Mat Booth <fedora@matbooth.co.uk> - 3.8.0-1
changelog:
  - Update to latest upstream.
  - Now necessary to explicitly build more fine-grained features.
  - Drop unneeded dep on jakarta-commons-httpclient.
  - Fixed mixed use of tabs and spaces.
  - Switch core package to R: java-headless, rhbz #1068037


author: Mat Booth <mat.booth@redhat.com> - 3.9.0-3
changelog:
  - Make core package archful so it can be installed into libdir
    where eclipse-platform expects it to be


author: Mat Booth <mat.booth@redhat.com> - 3.10.1-1
changelog:
  - Update to latest upstream version
  - Use XZ compressed tarball
  - Make symlink generation more dynamic


author: Mat Booth <mat.booth@redhat.com> - 3.12.2-2
changelog:
  - Avoid embedding versions of external deps in features. This avoids the need to
    rebuild when a dependency changes version.


author: Mat Booth <mat.booth@redhat.com> - 3.13.2-1
changelog:
  - Update to latest release
  - Set qualifiers to source-modification-time instead of build-time, to
    eliminate descrepancies between architectures
  - Add SDK package for sources


author: Mat Booth <fedora@matbooth.co.uk> 2.4.1-1
changelog:
  - Initial release, based on eclipse-gef spec file, but with disabled AOT
    compiled bits because of RHBZ #477707.


author: Mat Booth <fedora@matbooth.co.uk> 2.4.1-2
changelog:
  - Build example installer plugins using the source from the tarball instead of
    trying to get the examples from source control a second time.


author: Mat Booth <fedora@matbooth.co.uk> 2.5.0-1
changelog:
  - Update to 2.5.0 final release (Galileo).
  - Build the features seperately to allow for a saner %files section.


author: Roland Grunberg <rgrunber@redhat.com> 2.7.0-1
changelog:
  - Update to 2.7.0.
  - Re-apply necessary patches, content-handler error fixed upstream.
  - licenses now exist in org.eclipse.{emf,xsd}.license-feature only.


author: Krzysztof Daniel <kdaniel@redhat.com> 2.8.0-0.1.postM6
changelog:
  - Update to latest upstream version.
  - Package eclipse-emf-core created for the need of Eclipse 4.2. 
  - Removed usage of Eclipse reconciler script.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.2-1
changelog:
  - Update to latest upstream, Kepler SR2
  - Drop requires on java, rhbz #1068039
  - Remove unused patch
  - Update project URL


author: Mat Booth <mat.booth@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fix obsoletes on emf-core package, rhbz #1095431
  - Move edit plugin from core to main package


author: Mat Booth <mat.booth@redhat.com> - 2.10.1-2
changelog:
  - Make core package archful so it can be installed into libdir
    where eclipse-platform expects it to be
  - Move eclipse-emf -> eclipse-emf-runtime, this is because we can have
    noarch sub-packages of an archful package, but cannot have archful
    sub-packages of a noarch package
  - Fix some minor rpmlint errors


author: Mat Booth <mat.booth@redhat.com> - 2.12.0-2
changelog:
  - Set qualifiers to source-modification-time instead of build-time, to eliminate
    descrepancies between architectures
  - Temporarily remove dep on XSD


author: Mat Booth <mat.booth@redhat.com> - 2.12.0-5
changelog:
  - Make package noarch now that Eclipse is in the same location on all arches
  - Drop old obsoletes/provides


author: Mat Booth <mat.booth@redhat.com> - 2.14.0-1
changelog:
  - Update to Photon release
  - Add XSD sub-package (in line with upstream's new combined tycho build)
  - Run tests during maven build, no longer any need to package them
  - Also drop examples sub-package


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.1
changelog:
  - Update to Oxygen I-build
  - Don't build unsupported GTK2 backend for SWT
  - Move installation to a multilib agnostic location /usr/lib


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.3
changelog:
  - Simplify test installation and move machinery out of javadir now
    that java stuff is installed in its own place
  - Enable bootstrap mode


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.5
changelog:
  - Update to latest I-build
  - Update generated ant bundle to 1.10.1
  - Fix missing launcher bundle on s390, rhbz#1445162
  - Add missing BR on libsecret


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.10
changelog:
  - Rebuild for new ECF
  - Obsolete core NLS package
  - Fix cycle introduced between tests and contributor-tools


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.14
changelog:
  - Update to latest release candidate build
  - Rebuild for latest EMF and ECF
  - Drop nashorn extension mechanism


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.1-5
changelog:
  - Drop workaround for metainfo problem
  - Add patch for javascript/webkit2 bug ebz#525340
  - Add missing mocking deps for contributor-tools


author: Mat Booth <mat.booth@redhat.com> - 1:4.8.0-0.1
changelog:
  - Update to Photon I-build
  - Remove conditional for webkit2 (always use it now)
  - Bump requirement on lucene


author: Mat Booth <mat.booth@redhat.com> - 1:4.8.0-0.2
changelog:
  - Update to latest I-build and fix build on 32bit intel platform
  - Tighten deps on batik to prevent runtime bundle resolution errors


author: Mat Booth <mat.booth@redhat.com> - 1:4.10.0-0.3
changelog:
  - Update to latest I-build
  - Build against latest jetty, mockito packages
  - Update requirements on EMF and ECF


author: Mat Booth <mat.booth@redhat.com> - 1:4.11-3
changelog:
  - Pre-strip debuginfo from the launcher binary to avoid conflicts with other RCP
    applications, which will use identical launcher binaries


author: Mat Booth <mat.booth@redhat.com> - 1:4.15-3
changelog:
  - Don't build and ship the test framework. We are not shipping any actual tests
    anyway and this allows to drop the dependency on mockito and friends.


author: Laszlo Ersek <lersek@redhat.com> - 20140723-1.git3facc08.el7
changelog:
  - rebase from upstream a618eaa to 3facc08
  - update to openssl-0.9.8za
  - drop downstream-only split varstore patch, rely on upstream's


author: Laszlo Ersek <lersek@redhat.com> - 20140822-1.git9ece15a.el7
changelog:
  - rebase from upstream 3facc08 to 9ece15a
  - update to openssl-0.9.8zb
  - update to FatPkg SVN r86 (git 2355ea2c)
  - the following patches of Paolo Bonzini have been merged in upstream; drop the
    downstream-only copies:
    7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH
    d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2
            checkout
    1c023eb BuildEnv: remove useless check before setting $WORKSPACE
  - include the following patches that have been pending review on the upstream
    list for a long time:
    [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369
    [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515
  - nasm is a build-time dependency now because upstream BuildTools has started
    to call it directly


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-2.git9ece15a
changelog:
  - ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784]
  - ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784]
  - ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784]
  - ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592]
  - ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592]
  - ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592]
  - ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296]
  - ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296]
  - ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294]
  - ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294]
  - Resolves: bz#1145784
    (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce)
  - Resolves: bz#1147592
    (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary)
  - Resolves: bz#1148294
    (drop OvmfPkg's stale fork of SecureBootConfigDxe)
  - Resolves: bz#1148296
    (provide a non-interactive way to auto-enroll important SecureBoot certificates)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-3.git9ece15a.el7
changelog:
  - ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927]
  - ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927]
  - ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927]
  - Resolves: bz#1153927
    (set NEXTBOOT to uefi setting failed from Windows Recovery console)


author: Laszlo Ersek <lersek@redhat.com> - AAVMF-20141113-1.git77d5dac
changelog:
  - rebased to upstream 77d5dac
    <https://bugzilla.redhat.com/show_bug.cgi?id=1162314#c1>
  - patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION"
    is now upstream (SVN r16219, git edb5073)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-4.git9ece15a.el7
changelog:
  - ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314]
  - ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314]
  - Resolves: bz#1162314
   (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-6.git9ece15a.el7
changelog:
  - ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027]
  - Resolves: bz#1166027
    (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit")


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-7.git9ece15a.el7
changelog:
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971]
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971]
  - Resolves: bz#1166971
    (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20151104-1.gitb9ffeab.el7
changelog:
  - rebase to upstream b9ffeab
  - Resolves: bz#1207554
    ([AAVMF] AArch64: populate SMBIOS)
  - Resolves: bz#1270279
    (AAVMF: output improvements)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160202-1.gitd7c0dfa.el7
changelog:
  - rebase to upstream d7c0dfa
  - update OpenSSL to 1.0.2e (upstream)
  - update FatPkg to SVN r97 (upstream)
  - drive NVMe devices (upstream)
  - resize xterm on serial console mode change, when requested with
    -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y
    (downstream)
  - Resolves: bz#1259395
    (revert / roll back AAVMF fix for BZ 1188054)
  - Resolves: bz#1202819
    (OVMF: secure boot limitations)
  - Resolves: bz#1182495
    (OVMF rejects iPXE oprom when Secure Boot is enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160202-2.gitd7c0dfa.el7
changelog:
  - ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678]
  - ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678]
  - ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678]
  - ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678]
  - ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-3.el8
changelog:
  - edk2-redhat-Provide-and-Obsolete-OVMF-and-AAVMF.patch [bz#1596148]
  - edk2-ArmVirtPkg-unify-HttpLib-resolutions-in-ArmVirt.dsc..patch [bz#1536627]
  - edk2-ArmVirtPkg-ArmVirtQemu-enable-the-IPv6-stack.patch [bz#1536627]
  - edk2-advertise-OpenSSL-due-to-IPv6-enablement-too-RHEL-on.patch [bz#1536627]
  - edk2-redhat-add-D-NETWORK_IP6_ENABLE-to-the-build-flags.patch [bz#1536627]
  - edk2-redhat-update-license-fields-and-files-in-the-spec-f.patch [bz#1536627]
  - Resolves: bz#1536627
    (IPv6 enablement in OVMF)
  - Resolves: bz#1596148
    (restore Provides/Obsoletes macros for OVMF and AAVMF, from RHEL-8 Alpha)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-4.el8
changelog:
  - edk2-redhat-provide-virtual-bundled-OpenSSL-in-edk2-ovmf-.patch [bz#1607801]
  - Resolves: bz#1607801
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-BaseTools-footer.makefile-expand-BUILD_CFLAGS-last-f.patch [bz#1607906]
  - edk2-BaseTools-header.makefile-remove-c-from-BUILD_CFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-split-O2-to-BUILD_OPTFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_OPTFLAGS-from-the-call.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_LDFLAGS-from-the-calle.patch [bz#1607906]
  - edk2-BaseTools-VfrCompile-honor-EXTRA_LDFLAGS.patch [bz#1607906]
  - edk2-redhat-inject-the-RPM-compile-and-link-options-to-th.patch [bz#1607906]
  - Resolves: bz#1607906
    (edk2-tools: Does not use RPM build flags)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1641436]
  - edk2-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1641449 bz#1641453 bz#1641464 bz#1641469]
  - edk2-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1641453 bz#1641464 bz#1641469]
  - edk2-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1641445 bz#1641453 bz#1641464 bz#1641469]
  - Resolves: bz#1641436
    (CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [rhel-8])
  - Resolves: bz#1641445
    (CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [rhel-8])
  - Resolves: bz#1641449
    (CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [rhel-8])
  - Resolves: bz#1641453
    (CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641464
    (CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641469
    (CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-8.el8
changelog:
  - edk2-NetworkPkg-UefiPxeBcDxe-Add-EXCLUSIVE-attribute-when.patch [bz#1643377]
  - Resolves: bz#1643377
    (Exception when grubx64.efi used for UEFI netboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-9.el8
changelog:
  - edk2-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1662184]
  - edk2-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1662184]
  - edk2-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1662184]
  - edk2-git-Use-HTTPS-support.patch []
  - Resolves: bz#1662184
    (backport fix for (theoretical?) regression introduced by earlier CVE fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20190308git89910a39dcfd-2.el8
changelog:
  - edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230]
  - Resolves: bz#1600230
    ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-4.el8
changelog:
  - edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941]
  - edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941]
  - Resolves: bz#1666941
    (UEFI guest cannot boot into os when setting some special memory size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-5.el8
changelog:
  - edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205]
  - Resolves: bz#1693205
    (edk2: Enable TPM2 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-6.el8
changelog:
  - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446]
  - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446]
  - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446]
  - Resolves: bz#1714446
    (edk2-aarch64 silent build is not silent enough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-1.el8
changelog:
  - Rebase to edk2-stable201908 [bz#1748180]
  - Resolves: bz#1748180
    ((edk2-rebase-rhel-8.2) - rebase edk2 to upstream tag edk2-stable201908 for RHEL-8.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-2.el8
changelog:
  - edk2-MdePkg-Include-Protocol-Tls.h-Add-the-data-type-of-E.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-Add-the-new-API-TlsSetVerifyHost-CV.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-turn-strchr-into-a-function-CVE-2019-1.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-satisfy-inet_pton.c-dependencies-CVE-2.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-import-inet_pton.c-CVE-2019-14553.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-TlsSetVerifyHost-parse-IP-address-l.patch [bz#1536624]
  - edk2-NetworkPkg-TlsDxe-Add-the-support-of-host-validation.patch [bz#1536624]
  - edk2-NetworkPkg-HttpDxe-Set-the-HostName-for-the-verifica.patch [bz#1536624]
  - edk2-redhat-enable-HTTPS-Boot.patch [bz#1536624]
  - Resolves: bz#1536624
    (HTTPS enablement in OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-3.el8
changelog:
  - Update used openssl version [bz#1616029]
  - Resolves: bz#1616029
    (rebuild edk2 against the final RHEL-8.2.0 version of OpenSSL-1.1.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-4.el8
changelog:
  - edk2-redhat-set-guest-RAM-size-to-768M-for-SB-varstore-te.patch [bz#1778301]
  - edk2-redhat-re-enable-Secure-Boot-varstore-template-verif.patch [bz#1778301]
  - Resolves: bz#1778301
    (re-enable Secure Boot (varstore template) verification in %check)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-5.el8
changelog:
  - edk2-MdeModulePkg-UefiBootManagerLib-log-reserved-mem-all.patch [bz#1789797]
  - edk2-NetworkPkg-HttpDxe-fix-32-bit-truncation-in-HTTPS-do.patch [bz#1789797]
  - Resolves: bz#1789797
    (Backport upstream patch series: "UefiBootManagerLib, HttpDxe: tweaks for large HTTP(S) downloads" to improve HTTP(S) Boot experience with large (4GiB+) files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-6.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-fix-2M-4K-page-splitting-r.patch [bz#1789335]
  - Resolves: bz#1789335
    (VM with edk2 can't boot when setting memory with '-m 2001')


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-7.el8
changelog:
  - edk2-SecurityPkg-Fix-spelling-errors-PARTIAL-PICK.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-simplify-Ver.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-else-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-keep-PE-COFF.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-narrow-down-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-o.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-super.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-unnest-AddIm.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-eliminate-St.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-f.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-imgexec-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-defer-vs.patch [bz#1751993]
  - Resolves: bz#1751993
    (DxeImageVerificationLib handles "DENY execute on security violation" like "DEFER execute on security violation" [rhel8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-8.el8
changelog:
  - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch [bz#1801274]
  - edk2-MdeModulePkg-PiDxeS3BootScriptLib-Fix-potential-nume.patch [bz#1801274]
  - Resolves: bz#1801274
    (CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-9.el8
changelog:
  - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359]
  - Resolves: bz#1806359
    (bochs-display cannot show graphic wihout driver attach)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2112307]
  - Resolves: bz#2112307
    (Mark SEV launch secret area as reserved)


author: Camilla Conte <cconte@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - Bumping OpenSSL version [bz# 2074834]
  - Resolves: bz# 2074834
    (edk2: sync openssl sources with rhel openssl rpm)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-4
changelog:
  - edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - Resolves: bz#2164531
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
  - Resolves: bz#2164543
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
  - Resolves: bz#2164558
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
  - Resolves: bz#2164581
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-5
changelog:
  - edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
  - Resolves: bz#1861743
    (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-53009]
  - Resolves: RHEL-53009
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2 [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.4
changelog:
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830]
  - Resolves: RHEL-60830
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.5
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66236]
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66236]
  - Resolves: RHEL-66236
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-8.10])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.6
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-66188]
  - Resolves: RHEL-66188
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-8.10])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.7
changelog:
  - edk2-redhat-Fix-ovmf-vars-generator-RH-only.patch [RHEL-66236]
  - Resolves: RHEL-66236
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-8.10])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.8
changelog:
  - edk2-ArmVirtPkg-Add-Hash2DxeCrypto-to-ArmVirtPkg.patch [RHEL-71687]
  - Resolves: RHEL-71687
    ([Regression] HTTP boot not available [aarch64] [rhel-8.10.z])


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-10
changelog:
  - Fix etags local command injection vulnerability (#2175189)
  - Fix htmlfontify.el command injection vulnerability (#2175178)
  - Fix ob-latex.el command injection vulnerability (#2180587)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519)
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.5-9
changelog:
  - emacs "deadlocked" after using mercurial with huge amounts of ignored files in the repository (#1232422)
  - GDB interface gets confused by non-ASCII (#1283412)


author: Jan Synáček <jsynacek@redhat.com> - 1:25.0.95-3
changelog:
  - workaround: emacs build failure due to high memory consumption on ppc64 (#1356919)
    (patch provided by Sinny Kumari)


author: Richard W.M. Jones <rjones@redhat.com> - 1:25.3-2
changelog:
  - Rebuild to try to fix: libwebkit2gtk-4.0.so.37: undefined symbol:
    soup_auth_manager_clear_cached_credentials


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-12
changelog:
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Disable xwidgets (RHEL-14549)


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-7
changelog:
  - Avoid verbatim bidi formatting characters in source comments
    to make rpminspect complain less.
  - Resolves: RHEL-2237


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Related: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.28.5-25
changelog:
  - Resolves: RHEL-29169 (Composer: Cursor jumps to the starting line when "return" key is pressed at the end of the line)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Resolves: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1764818 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1765005 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-14
changelog:
  - Resolves: RHEL-19376 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Roland Grunberg <rgrunber@redhat.com> - 1.1.0-6
changelog:
  - Set source/target to 1.8 for Java 11 build.
  - Disable Java API link detection for javadoc generation as this fails.
  - Disable some assertions in TestParser.testPipe() that fail on Java 11.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.2
changelog:
  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.5
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-56840


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.7
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76492


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.23-1
changelog:
  - new upstream release
  - new package fence-agents-amt-ws
  - new package fence-agents-compute
  - new package fence-agents-drac
  - new package fence-agents-hds-cb
  - new package fence-agents-mpath
  - new package fence-agents-sanbox2
  - new package fence-agents-sbd
  - new package fence-agents-vbox
  - new package fence-agents-vmware
  - new package fence-agents-xenapi


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.24-12
changelog:
  - fence-agents-common: remove fence_scsi_check files
  - fence-scsi: add "fence_scsi_check_hardreboot"


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - new upstream release
  - fence_vmware_soap / fence_ovh: use Python 2 till python3-suds bug
    is fixed


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-11
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1654968
  - fence_scsi: add watchdog retry support
    Resolves: rhbz#1654976
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1654616
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1654973


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-13
changelog:
  - fence-agents-scsi: add missing fence-agents-common dependency
    Resolves: rhbz#1665170
  - fence_azure_arm: add bundled directory to search path
    Resolves: rhbz#1650214


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-23
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1709780
  - fence_rhevm: fix encoding issues
    Resolves: rhbz#1712263


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-25
changelog:
  - fence_redfish: add header for full Redfish spec compliance
    Resolves: rhbz#1704228
  - fence_scsi: fix to match new node ID format
    Resolves: rhbz#1714458


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_aliyun: add RAM role support
    Resolves: rhbz#1732766
  - fence_ilo4_ssh/fence_ilo5_ssh: add monitor timeout warning
    Resolves: rhbz#1734811
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751704


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760201
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1771594


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41
changelog:
  - fence_mpath: add plug parameter support to be able to use pcmk_host_map
    Resolves: rhbz#1753228
  - fence_mpath: fix --reserve parameter typo
    Resolves: rhbz#1798641


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-42
changelog:
  - fence-agents-lpar: build on non-ppc64le arch's
    Resolves: rhbz#1804907
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1810457


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-47
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1827652
  - fence_compute/fence_evacuate: fix --insecure parameter
    Resolves: rhbz#1830776
  - fence_scsi: add readonly parameter
    Resolves: rhbz#1750596


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-52
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
    Resolves: rhbz#1860544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-54
changelog:
  - fence_azure_arm: fix MSI support
    Resolves: rhbz#1818157
  - fence_mpath: allow spaces for comma-separated devices and add
    support for space-separated devices
    Resolves: rhbz#1851115
  - fence_ipmilan: add ability to increase ipmitool verbosity
    Resolves: rhbz#1853973
  - fence_lpar: fix list-status action
    Resolves: rhbz#1861926
  - all agents: make telnet a weak dependency
    Resolves: rhbz#1851232


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-59
changelog:
  - fencing: add disable-timeout parameter and make it true by default
    for Pacemaker 2.0+
    Resolves: rhbz#1470813, rhbz#1436429


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-61
changelog:
  - fence_scsi: dont write key to device if it's already registered,
    and dont write device to file when cluster is started again
    Resolves: rhbz#1841087


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-69
changelog:
  - fencing: add "stonith_status_sleep" parameter to set sleep between
    status calls during STONITH action
    Resolves: rhbz#1780825


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-79
changelog:
  - fence_amt_ws: fix "or" causing dead code
    Resolves: rhbz#2010710
  - fence_gce: add proxy support
    Resolves: rhbz#1969953


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-94
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2080994


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-96
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072421


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-99
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2092921


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-111
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152105


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-112
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#1787178


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-114
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183158


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-3
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132010


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-4
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage

    Resolves: rhbz#2138825


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-8
changelog:
  - Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86 platforms
    as it is known to be troublesome <https://github.com/open-mpi/ompi/issues/4260>.
    This resolves FTBFS issue (BZ#1518038).


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-11
changelog:
  - Regenerate autoconf files using current tools so proper build flags
    from redhat-rpm-config are used. This resolves BZ#1548473.


author: Eric Garver <egarver@redhat.com> - 0.9.3-12
changelog:
  - feat(config): add CleanupModulesOnExit configuration option
  - change default CleanupModulesOnExit=yes


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.2-1
changelog:
  - Fix signal handling for SIGTERM
  - Additional service files (RHBZ#914859)
  - Updated po files
  - s/persistent/permanent/ (Trac Ticket #7)
  - Better behaviour when running without valid DISPLAY (RHBZ#955414)
  - client.handle_exceptions(): do not loop forever
  - Set Zone.defaults in zone_reader (RHBZ#951747)
  - client: do not pass the dbus exception name to handler
  - IO_Object_XMLGenerator: make it work with Python 2.7.4 (RHBZ#951741)
  - firewall-cmd: do not use deprecated BaseException.message
  - client.py: fix handle_exceptions() (RHBZ#951314)
  - firewall-config: check zone/service/icmptype name (RHBZ#947820)
  - Allow 3121/tcp (pacemaker_remote) in cluster-suite service. (RHBZ#885257)
  - firewall-applet: fix default zone hangling in 'shields-up' (RHBZ#947230)
  - FirewallError.get_code(): check for unknown error


author: Thomas Woerner <twoerner@redhat.com> 0.3.3-1
changelog:
  - new service files
  - relicensed logger.py under GPLv2+
  - firewall-config: sometimes we don't want to use client's exception handler
  - When removing Service/IcmpType remove it from zones too (RHBZ#958401)
  - firewall-config: work-around masquerade_check_cb() being called more times
  - Zone(IO): add interfaces/sources to D-Bus signature
  - Added missing UNKNOWN_SOURCE error code
  - fw_zone.check_source: Raise INVALID_FAMILY if family is invalid
  - New changeZoneOfInterface method, marked changeZone as deprecated
  - Fixed firewall-cmd man page entry for --panic-on
  - firewall-applet: Fixed possible problems of unescaped strings used for markup
  - New support to bind zones to source addresses and ranges (D-BUS, cmd, applet
  - Cleanup of unused variables in FirewallD.start
  - New firewall/fw_types.py with LastUpdatedOrderedDict
  - direct.chains, direct.rules: Using LastUpdatedOrderedDict
  - Support splitted zone files
  - New reader and writer for stored direct chains and rules
  - LockdownWhitelist: fix write(), add get_commands/uids/users/contexts()
  - fix service_writer() and icmptype_writer() to put newline at end of file
  - firewall-cmd: fix --list-sources
  - No need to specify whether source address family is IPv4 or IPv6
  - add getZoneOfSource() to D-Bus interface
  - Add tests and bash-completion for the new "source" operations
  - Convert all input args in D-Bus methods
  - setDefaultZone() was calling accessCheck() *after* the action
  - New uniqify() function to remove duplicates from list whilst preserving order
  - Zone.combine() merge also services and ports
  - config/applet: silence DBusException during start when FirewallD is not running (RHBZ#966518)
  - firewall-applet: more fixes to make the address sources family agnostic
  - Better defaults for lockdown white list
  - Use auth_admin_keep for allow_any and allow_inactive also
  - New D-Bus API for lockdown policies
  - Use IPv4, IPv6 and BRIDGE for FirewallD properties
  - Use rich rule action as audit type
  - Prototype of string-only D-Bus interface for rich language
  - Fixed wrongly merged source family check in firewall/core/io/zone.py
  - handle_cmr: report errors, cleanup modules in error case only, mark handling
  - Use audit type from rule action, fixed rule output
  - Fixed lockdown whitelist D-Bus handling method names
  - New rich rule handling in runtime D-Bus interface
  - Added interface, source and rich rule handling (runtime and permanent)
  - Fixed dbus_obj in FirewallClientConfigPolicies, added queryLockdown
  - Write changes in setLockdownWhitelist
  - Fixed typo in policies log message in method calls
  - firewall-cmd: Added rich rule, lockdown and lockdown whitelist handling
  - Don't check access in query/getLockdownWhitelist*()
  - firewall-cmd: Also output masquerade flag in --list-all
  - firewall-cmd: argparse is able to convert argument to desired type itself
  - firewall-cmd_test.sh: tests for permanent interfaces/sources and lockdown whitelist
  - Makefile.am: add missing files
  - firewall-cmd_test.sh: tests for rich rules
  - Added lockdown, source, interface and rich rule docs to firewall-cmd
  - Do not masquerade lo if masquerade is enabled in the default zone (RHBZ#904098)
  - Use <rule> in metavar for firewall-cmd parser


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Remove migrating to a systemd unit file from a SysV initscript
  - Remove pointless "ExclusiveOS" tag


author: Thomas Woerner <twoerner@redhat.com> 0.3.4-1
changelog:
  - several rich rule check enhancements and fixes
  - firewall-cmd: direct options - check ipv4|ipv6|eb (RHBZ#970505)
  - firewall-cmd(1): improve description of direct options (RHBZ#970509)
  - several firewall-applet enhancements and fixes
  - New README
  - several doc and man page fixes
  - Service definitions for PCP daemons (RHBZ#972262)
  - bash-completion: add lockdown and rich language options
  - firewall-cmd: add --permanent --list-all[-zones]
  - firewall-cmd: new -q/--quiet option
  - firewall-cmd: warn when default zone not active (RHBZ#971843)
  - firewall-cmd: check priority in --add-rule (RHBZ#914955)
  - add dhcpv6 (for server) service (RHBZ#917866)
  - firewall-cmd: add --permanent --get-zone-of-interface/source --change-interface/source
  - firewall-cmd: print result (yes/no) of all --query-* commands
  - move permanent-getZoneOf{Interface|Source} from firewall-cmd to server
  - Check Interfaces/sources when updating permanent zone settings.
  - FirewallDConfig: getZoneOfInterface/Source can actually return more zones
  - Fixed toaddr check in forward port to only allow single address, no range
  - firewall-cmd: various output improvements
  - fw_zone: use check_single_address from firewall.functions
  - getZoneOfInterface/Source does not need to throw exception
  - firewall.functions: Use socket.inet_pton in checkIP, fixed checkIP*nMask
  - firewall.core.io.service: Properly check port/proto and destination address
  - Install applet desktop file into /etc/xdg/autostart
  - Fixed option problem with rich rule destinations (RHBZ#979804)
  - Better exception creation in dbus_handle_exceptions() decorator (RHBZ#979790)
  - Updated firewall-offline-cmd
  - Use priority in add, remove, query and list of direct rules (RHBZ#979509)
  - New documentation (man pages are created from docbook sources)
  - firewall/core/io/direct.py: use prirority for rule methods, new get_all_ methods
  - direct: pass priority also to client.py and firewall-cmd
  - applet: New blink and blink-count settings
  - firewall.functions: New function ppid_of_pid
  - applet: Check for gnome3 and fix it, use new settings, new size-changed cb
  - firewall-offline-cmd: Fix use of systemctl in chroot
  - firewall-config: use string.ascii_letters instead of string.letters
  - dbus_to_python(): handle non-ascii chars in dbus.String.
  - Modernize old syntax constructions.
  - dict.keys() in Python 3 returns a "view" instead of list
  - Use gettext.install() to install _() in builtins namespace.
  - Allow non-ascii chars in 'short' and 'description'
  - README: More information for "Working With The Source Repository"
  - Build environment fixes
  - firewalld.spec: Added missing checks for rhel > 6 for pygobject3-base
  - firewall-applet: New setting show-inactive
  - Don't stop on reload when lockdown already enabled (RHBZ#987403)
  - firewall-cmd: --lockdown-on/off did not touch firewalld.conf
  - FirewallApplet.gschema.xml: Dropped unused sender-info setting
  - doc/firewall-applet.xml: Added information about gsettings
  - several debug and log message fixes
  - Add chain for sources so they can be checked before interfaces (RHBZ#903222)
  - Add dhcp and proxy-dhcp services (RHBZ#986947)
  - io/Zone(): don't error on deprecated family attr of source elem
  - Limit length of zone file name (to 12 chars) due to Netfilter internals.
  - It was not possible to overload a zone with defined source(s).
  - DEFAULT_ZONE_TARGET: {chain}_ZONE_{zone} -> {chain}_{zone}
  - New runtime get<X>Settings for services and icmptypes, fixed policies callbacks
  - functions: New functions checkUser, checkUid and checkCommand
  - src/firewall/client: Fixed lockdown-whitelist-updated signal handling
  - firewall-cmd(1): move firewalld.richlanguage(5) reference in --*-rich-rule
  - Rich rule service: Only add modules for accept action
  - firewall/core/rich: Several fixes and enhanced checks
  - Fixed reload of direct rules
  - firewall/client: New functions to set and get the exception handler
  - firewall-config: New and enhanced UI to handle lockdown and rich rules
  - zone's immutable attribute is redundant
  - Do not allow to set settings in config for immutable zones.
  - Ignore deprecated 'immutable' attribute in zone files.
  - Eviscerate 'immutable' completely.
  - FirewallDirect.query_rule(): fix it
  - permanent direct: activate firewall.core.io.direct:Direct reader
  - core/io/*: simplify getting of character data
  - FirewallDirect.set_config(): allow reloading


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.5-1
changelog:
  - Only use one PK action for configuration (RHBZ#994729)
  - firewall-cmd: indicate non-zero exit code with red color
  - rich-rule: enable to have log without prefix & log_level & limit
  - log-level warn/err -> warning/error (RHBZ#1009436)
  - Use policy DROP while reloading, do not reset policy in restart twice
  - Add _direct chains to all table and chain combinations
  - documentation improvements
  - New firewalld.direct(5) man page docbook source
  - tests/firewall-cmd_test.sh: make rich language tests work
  - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150)
  - direct.passthrough wasn't always matching out_signature (RHBZ#967800)
  - firewall-config: twist ICMP Type IP address family logic.
  - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658)
  - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106)
  - firewall-config: Options->Lockdown was not changing permanent.
  - firewall-config: edit line on doubleclick (RHBZ#993572)
  - firewall-config: System Default Zone -> Default Zone (RHBZ#993811)
  - New direct D-Bus interface, persistent direct rule handling, enabled passthough
  - src/firewall-cmd: Fixed help output to use more visual parameters
  - src/firewall-cmd: New usage output, no redirection to man page anymore
  - src/firewall/core/rich.py: Fixed forwad port destinations
  - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask
  - doc/xml/firewalld.zone.xml: Added more information about masquerade use
  - Prefix to log message is optional (RHBZ#998079)
  - firewall-cmd: fix --permanent --change-interface (RHBZ#997974)
  - Sort zones/interfaces/service/icmptypes on output.
  - wbem-https service (RHBZ#996668)
  - applet&config: add support for KDE NetworkManager connection editor
  - firewall/core/fw_config.py: New method update_lockdown_whitelist
  - Added missing file watcher for lockdown whitelist in config D-Bus interface
  - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct
  - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6-1
changelog:
  - firewalld.richlanguage.xml: correct log levels (RHBZ#993740)
  - firewall-config: Make sure that all zone settings are updated properly on firewalld restart
  - Rich_Limit: Allow long representation for duration (RHBZ#994103
  - firewall-config: Show "Changes applied." after changes (RHBZ#993643)
  - Use own connection dialog to change zones for NM connections
  - Rename service cluster-suite to high-availability (RHBZ#885257)
  - Permanent direct support for firewall-config and firewall-cmd
  - Try to avoid file descriptor leaking (RHBZ#951900)
  - New functions to split and join args properly (honoring quotes)
  - firewall-cmd(1): 2 simple examples
  - Better IPv6 NAT checking.
  - Ship firewalld.direct(5).


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6.2-1
changelog:
  - firewall-offline-cmd: --forward-port 'toaddr' is optional (RHBZ#1014958)
  - firewall-cmd: fix variable name (RHBZ#1015011)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9-1
changelog:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9.3-1
changelog:
  - Fixed persistent port forwarding (RHBZ#1056154)
  - Stop default zone rules being applied to all zones (RHBZ#1057875)
  - Enforce trust, block and drop zones in the filter table only (RHBZ#1055190)
  - Allow RAs prior to applying IPv6_rpfilter (RHBZ#1058505)
  - Fix writing of rule.audit in zone_writer()


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.10-1
changelog:
  - new services: freeipa-*, puppermaster, amanda-k5, synergy,
                  xmpp-*, tor, privoxy, sane
  - do not use at_console in D-Bus policies (RHBZ#1094745)
  - apply all rich rules for non-default targets
  - AppData file (RHBZ#1094754)
  - separate Polkit actions for desktop & server (RHBZ#1091068)
  - sanitize missing ip6t_rpfilter (RHBZ#1074427)
  - firewall/core/io/*: few improvements (RHBZ#1065738)
  - no load failed error for absent direct.xml file
  - new DBUS_INTERFACE.getZoneSettings to get all run-time zone settings
  - fixed creation and deletion of zones, services and icmptypes over D-Bus signals
  - FirewallClientZoneSettings: Set proper default target
  - if Python2 then encode strings from sax parser (RHBZ#1059104, RHBZ#1058853)
  - firewall-cmd:
    - don't colour output of query commands (RHBZ#1097841)
    - use "default" instead of {chain}_{zone} (RHBZ#1075675)
    - New --get-target and --set-target
    - Create and remove permanent zones, services and icmptypes
  - firewall-config:
    - Adding services and icmptypes resulted in duplicates in UI
    - Use left button menu of -applet in Option menu
  - firewall-offline-cmd: same functionality as 'firewall-cmd --permanent'
  - firewall-applet: ZoneConnectionEditor was missing the Default Zone entry
  - bash-completion: getting zones/services/icmps is different with/without --permanent
  - firewalld.zone(5): removed superfluous slash (RHBZ#1091575)
  - updated translations


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-3
changelog:
  - New support for Fedora per-product configuration settings for Fedora.next
    https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft
  - Added Fedora server zone (RHBZ#1110711)
  - Added Fedora workstation zone(RHBZ#1113775)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-4
changelog:
  - renamed fedora specific zones to FedoraServer and FedoraWorkstation for 
    zone name limitations (length and allowed chars)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.11-1
changelog:
  - firewalld:
    - improve error messages
    - check built-in chains in direct chain handling functions (RHBZ#1120619)
    - dbus_to_python() check whether input is of expected type (RHBZ#1122018)
    - handle negative timeout values (RHBZ#1124476)
    - warn when Command/Uid/Use/Context already in lockdown whitelist (RHBZ#1126405)
    - make --lockdown-{on,off} work again (RHBZ#1111573)
  - firewall-cmd:
    - --timeout now accepts time units (RHBZ#994044)
  - firewall-config:
    - show active (not default) zones in bold (RHBZ#993655)
  - configuration:
    - remove ipp-client service from all zones (RHBZ#1105639).
    - fallbacks for missing values in firewalld.conf
    - create missing dirs under /etc if needed
    - add -Es to python command in lockdown-whitelist.xml (RHBZ#1099065)
  - docs:
    - 'direct' methods concern only chains/rules added via 'direct' (RHBZ#1120619)
    - --remove-[interface/source] don't need a zone to be specified (RHBZ#1125851)
    - various fixes in firewalld.zone(5), firewalld.dbus(5), firewalld.direct(5)
  - others:
    - rpm macros for easier packaging of e.g. services


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.12-1
changelog:
  - firewalld:
    - new runtimeToPermanent and tracked passsthrough support
    - make permanent D-Bus interfaces more fine grained like the runtime versions (RHBZ#1127706)
    - richLanguage: allow using destination with forward-port
    - Rich_Rule.check(): action can't be used with icmp-block/forward-port/masquerade
    - fixed Python specific D-Bus exception (RHBZ#1132441)
  - firewall-cmd:
    - new --runtime-to-permanent to create permanent from runtime configuration
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - --direct: make fail messages consistent (RHBZ#1141835)
  - firewall-config:
    - richRuleDialog - OK button tooltip indicates problem
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - update "Change Zones of Connections" menu on default zone change (RHBZ#11120212)
    - fixed rename of zones, services and icmptypes to not create new entry (RBHZ#1131064)
  - configuration:
    - new service for Squid HTTP proxy server
    - new service for Kerberos admin server
    - new services for syslog and syslog-tls
    - new services for SNMP and SNMP traps
    - add Keywords to .desktop to improve software searchability
  - docs:
    - updated translations
    - firewalld.richlanguage: improvements suggested by Rufe Glick
    - firewalld.dbus: various improvements
    - firewalld.zone: better description of Limit tag
    - mention new homepage everywhere


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.13-1
changelog:
  - firewalld:
    - ipXtables: use -w or -w2 if supported (RHBZ#1161745, RHBZ#1151067)
    - DROP INVALID packets (RHBZ#1169837)
    - don't use ipv6header for protocol matching. (RHBZ#1065565)
    - removeAllPassthroughs(): remove passthroughs in reverse order (RHBZ#1167100)
    - fix config.service.removeDestination() (RHBZ#1164584)
  - firewall-config:
    - portProtoDialog: other protocol excludes port number/range
    - better fix for updating zoneStore also in update_active_zones()
    - fix typo in menu
  - configuration:
    - new services: tinc, vdsm, mosh, iscsi-target, rsyncd
    - ship and install XML Schema files. (#8)
  - man pages:
    - firewalld.dbus, firewalld.direct, firewalld, firewall-cmd
  - spec file:
    - filesystem subpackage
    - make dirs&files in /usr/lib/ world-readable (RHBZ#915988)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.13-2
changelog:
  - enable python2 and python3 bindings for fedora >= 20 and rhel >= 7
  - use python3 bindings on fedora >= 22 and rhel >= 8 for firewalld,
    firewall-config and firewall-applet


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14-1
changelog:
  - renamed python2-firewall to python-firewall
  - fixed requirements for GUI parts with Python3
  - dropped upstream merged python3 patch
  - firewalld:
    - print real zone names in error messages
    - iptables 1.4.21 does not accept limits of 1/day, minimum is 2/day now
    - rate limit fix for rich rules
    - fix readdition of removed permanent direct settings
    - adaption of the polkit domains to use PK_ACTION_DIRECT_INFO
    - fixed two minor Python3 issues in firewall.core.io.direct
    - fixed use of fallback configuration values
    - fixed use without firewalld.conf
    - firewalld main restructureization
    - IPv6_rpfilter now also available as a property on D-Bus in the config interface
    - fixed wait option use for ipXtables
    - added --concurrent support for ebtables
    - richLanguage: allow masquerading with destination
    - richLanguage: limit masquerading forward rule to new connections
    - ipXtables: No dns lookups in available_tables and _detect_wait_option
    - full ebtables support: start, stop, reload, panic mode, direct chains and rules
    - fix for reload with direct rules
    - fix or flaws found by landscape.io
    - pid file handling fixes in case of pid file removal
    - fix for client issue in case of a dbus NoReply error
  - configuration
    - new services: dropbox-lansync, ptp
    - new icmptypes: timestamp-request, timestamp-reply
  - man pages:
    - firewalld.zones(5): fixed typos
    - firewalld.conf(5): Fixed wrong reference to firewalld.lockdown-whitelist page
  - firewall-applet:
    - new version using Qt4 fixing several issues with the Gtk version
  - spec file:
    - enabled Python3 support: new backends python-firewall and python3-firewall
    - some cleanup
  - git:
    - migrated to github
  - translations:
    - migrated to zanata
  - build environment:
    - no need for autoconf-2.69, 2.68 is sufficient


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.1-1
changelog:
  - firewall-applet
    - do not use isSystemTrayAvailable check to fix KDE5 startup
    - dropped gtk applet remain: org.fedoraproject.FirewallApplet.gschema.xml


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-1
changelog:
  - reunification of the firewalld spec files for all Fedora releases
  - fix dependencies for -applet and -config: use_python3 is the proper switch
    not with_python3 (RHBZ#1232493)
  - firewalld.spec:
    - fixed requirements for -applet and -config
  - man pages:
    - adapted firewall-applet man page to new version
  - firewall-applet:
    - Only honour active connections for zone changes
    - Change QSettings path and file names
  - firewall-config:
    - Only honour active connections for zone changes in the “Change Zones of Connections” menu
  - Translations:
    - updated translations
    - marked translations for “Connections” for review


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-3
changelog:
  - Require python3-gobject-base for fedora >= 23 and rhel >= 8 (RHBZ#1242076)
  - Fix rhel defines: No python3 for rhel-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Version 0.4.0
    - Speed ups
    - ipset support
    - MAC address support
    - Log of denied packets
    - Mark action in rich rules
    - Enhanced alteration of config files with command line tools
    - Use of zone chains in direct interface
    - firewall-applet enhancement
    - New services: ceph-mon, ceph, docker-registry, imap, pop3, pulseaudio,
      smtps, snmptrap, snmp, syslog-tls and syslog
    - Several bug fixes
    - Code optimizations


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1-1
changelog:
  - Enhancements of ipset handling
    - No cleanup of ipsets using timeouts while reloading
    - Only destroy conflicting ipsets
    - Only use ipset types supported by the system
    - Add and remove several ipset entries in one call using a file
  - Reduce time frame where builtin chains are on policy DROP while reloading
  - Include descriptions in --info-X calls
  - Command line interface support to get and alter descriptions of zones,
    services, ipsets and icmptypes with permanent option
  - Properly watch changes in combined zones
  - Fix logging in rich rule forward rules
  - Transformed direct.passthrough errors into warnings
  - Rework of import structures
  - Reduced calls to get ids for port and protocol names (RHBZ#1305434)
  - Build and installation fixes by Markos Chandras
  - Provide D-Bus properties in introspection data
  - Fix for flaws found by landscape.io
  - Fix for repeated SUGHUP
  - New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  - configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  - Code cleanups
  - Bug fixes


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-1
changelog:
  - Fixed translations with python3
  - Fixed exception for failed NM import, new doc string
  - Make ipsets visible per default in firewall-config
  - Install new fw_nm module
  - Do not fail if log file could not be opened
  - Fixed broken fr translation


author: Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
changelog:
  - New module to search for and change ifcfg files for interfaces not under
    control of NM
  - firewall_config: Enhanced messages in status bar
  - firewall-config: New message window as overlay if not connected
  - firewall-config: Fix sentivity of option, view menus and main paned if not
    connected
  - firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup
  - firewall-[offline]cmd: Show target in zone information
  - D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  - Fixed log-denied rules for icmp-blocks
  - Keep sorting of interfaces, services, icmp-blocks and other settings in zones
  - Fixed runtime-to-permanent not to save interfaces under control of NM
  - New icmp-block-inversion flag in the zones
  - ICMP type filtering in the zones
  - New services: sip, sips, managesieve
  - rich rules: Allow destination action (RHBZ#1163428)
  - firewall-offline-cmd: New option -q/--quiet
  - firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  - firewall-[offline-]cmd: Fix option for setting the destination address
  - firewall-config: Fixed resizing behaviour
  - New transaction model for speed ups in start, restart, stop and other actions
  - firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  - Fixed memory leak in dbus_introspection_add_properties
  - Landscape.io fixes, pylint calm downs
  - New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  - ebtables-restore: No support for COMMIT command
  - Source port support in services, zones and rich rules
  - firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  - firewall-config: New active bindings side bar for simple binding changes
  - Reworked NetworkManager module
  - Proper default zone handling for NM connections
  - Try to set zone binding with NM if interface is under control of NM
  - Code cleanup and bug fixes
  - Include test suite in the release and install in /usr/share/firewalld/tests
  - New Travis-CI configuration file
  - Fixed more broken frensh translations
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - New firewalld release 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page
  - New firewallctl utility (RHBZ#1147959)
  - doc.xml.seealso: Show firewalld.dbus in See Also sections
  - firewall.core.fw_config: Create backup on zone, service, ipset and icmptype
    removal (RHBZ#1339251)
  - {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  - firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  - firewall-cmd: Dropped duplicate setType call in --new-ipset
  - radius service: Support also tcp ports (RBZ#1219717)
  - xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset
    sources
  - config.xmlschema.service.xsd: Fix service destination conflicts
    (RHBZ#1296573)
  - firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  - firewall.command: Only print summary and description in print_X_info with
    verbose
  - firewall.command: print_msg should be able to print empty lines
  - firewall-config: No processing of runtime passthroughs signals in permanent
  - Landspace.io fixes and pylint calm downs
  - firewall.core.io.zone: Add zone_reader and zone_writer to __all__, pylint
    fixes
  - firewall-config: Fixed titles of command and context dialogs, also entry
    lenths
  - firewall-config: pylint calm downs
  - firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  - firewall-config: Use self.active_zoens in conf_zone_added_cb
  - firewall.command: New parse_port, extended parse methods with more checks
  - firewall.command: Fixed parse_port to use the separator in the split call
  - firewall.command: New [de]activate_exception_handler, raise error in parse_X
  - services ha: Allow corosync-qnetd port
  - firewall-applet: Support for kde5-nm-connection-editor
  - tests/firewall-offline-cmd_test.sh: New tests for service and icmptype
    modifications
  - firewall-offline-cmd: Use FirewallCommand for simplification and sequence
    options
  - tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  - firewall-cmd: Fixed set, remove and query destination options for services
  - firewall.core.io.service: Source ports have not been checked in _check_config
  - firewall.core.fw_zone: Method check_source_port is not used, removed
  - firewall.core.base: Added default to ZONE_TARGETS
  - firewall.client: Allow to remove ipv:address pair for service destinations
  - tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  - firewall-cmd: Landscape.io fixes, pylint calm downs
  - firewall-cmd: Use FirewallCommand for simplification and sequence options
  - firewall.command: New FirewallCommand for command line client simplification
  - New services: kshell, rsh, ganglia-master, ganglia-client
  - firewalld: Cleanup of unused imports, do not translate some deamon messages
  - firewalld: With fd close interation in runProg, it is not needed here anymore
  - firewall.core.prog: Add fd close iteration to runProg
  - firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface
    function
  - firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  - firewall-config: New add/remove ipset entries from file, remove all entries
  - firewall-applet: Fix tooltip after applet start with connection to firewalld
  - firewall-config: Select new zone, service or icmptype if the view was empty
  - firewalld.spec: Added build requires for iptables, ebtables and ipset
  - Adding nf_conntrack_sip module to the service SIP
  - firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  - Drop unneeded python shebangs
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - New service RH-Satellite-6
  - Fixed selinux-policy conflict version for RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.3-1
changelog:
  - Fix CVE-2016-5410: Firewall configuration can be modified by any logged in
    user
  - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
  - Update AppData configuration file.
  - tests/firewalld_rich.py: Use new import structure and FirewallClient classes
  - tests/firewalld_direct.py: Use new import structure
  - tests: firewalld_direct: Fix assert to check for True instead of False
  - tests: firewalld_config: Fix expected value when querying the zone target
  - tests: firewalld_config: Use real nf_conntrack modules
  - firewalld.spec: Added comment about make call for %build
  - firewall-config: Use also width_request and height_request with default size
  - Updated firewall-config screenshot
  - firewall-cmd: Fixed typo in help output (RHBZ#1367171)
  - test-suite: Ignore stderr to get default zone also for missing firewalld.conf
  - firewall.core.logger: Warnings should be printed to stderr per default
  - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
  - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
  - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
  - test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
  - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
  - doc/xml/firewalld.dbus.xml: Removed undefined reference
  - doc/xml/transform-html.xsl.in: Fixed references in the document
  - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
  - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
  - firewall: core: fw_nm: Instantiate the NM client only once
  - firewall/core/io/*.py: Do not traceback on a general sax parsing issue
  - firewall-offline-cmd: Fix --{add,remove}-entries-from-file
  - firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
  - firewall.core.prog: Do not output stderr, but return it in the error case
  - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)
  - config/firewall.service.in: use KillMode=mixed
  - config/firewalld.service.in: use network-pre.target
  - firewall-config: Add missing gettext.textdomain call to fix translations
  - Add UDP to transmission-client.xml service
  - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
  - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
  - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
  - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination
    calls
  - firewall.command: Add the removed FirewallError handling to the action
    (a17ce50)
  - firewall.command: Do not use query methods for sequences and also single
    options
  - Add missing information about MAC and ipset sources to man pages and help
    output
  - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
  - firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
  - firewallctl: Fix traceback if not connected to firewalld
  - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
  - firewall.command: Convert errors to string for Python3
  - firewall.command: Get proper firewall error code from D-BusExceptions
  - firewall-cmd: Fixed traceback without args
  - Add missing service files to Makefile.am
  - shell-completion: Add shell completion support for
    --{get,set}--{description,short}
  - Updated RHEL-7 selinux-policy and squid conflict


