# changelog

author: Michael Mraka <michael.mraka@redhat.com> 5.10.120-9
changelog:
  - Resolves: #1665858 - diff expects string not bytes
  - Resolves: #1622961 - avoid deprecated fucntions when running on python3


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-1
changelog:
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "fix except in rhnlib to make it compatible with Python 2.4"


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-4
changelog:
  - don't package python2 files for rhnlib (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.5.108-1
changelog:
  - run pylint on all Fedoras
  - simplified Makefile
  - modules are now in standard sitelib path
  - install files into python_sitelib/python3_sitelib
  - move rhnpush files into proper python2/python3 subpackages
  - split rhnpush into python2/python3 specific packages


author: Tomas Kasparek <tkasparek@redhat.com> 5.5.110-5
changelog:
  - disable pylint warnings discovered by run on python3 (tkasparek@redhat.com)
  - run pylint 2/3 depending on environment (tkasparek@redhat.com)
  - don't build python2 subpackages on systems with default python3
    (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)
  - require python3-devel for building on python3 (tkasparek@redhat.com)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Tomas Orsava <torsava@redhat.com> - 4.14.0-1
changelog:
  - Rebase to rpm 4.14.0 final (http://rpm.org/wiki/Releases/4.14.0)
  - Re-synchronize version/release macros with the rpm Fedora package


author: Tomas Orsava <torsava@redhat.com> - 5-5
changelog:
  - Create major-version provides only on major Python versions (2.7, 3.6)
  - Fix an extra parenthesis in python.attr
  - Resolves: rhbz#1776941


author: Charalampos Stratakis <cstratak@redhat.com> - 5-8
changelog:
  - Fix the pythondeps.sh and pythondistdeps.py scripts for multiple digits python versions
  - Resolves: rhbz#2143990


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.5-2
changelog:
  - Subpackage python2-rpmfluff has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jan Hutar <jhutar@redhat.com> - 0.5.6-1
changelog:
  - dshea: Add a add_manpage function
  - dshea: Sanitize the base directory name
  - dshea: Support subpackage scriptlets
  - dshea: Allow file directives to be added to symlinks
  - dshea: Use valid images for the test PNG and GIF data


author: Jan Hutar <jhutar@redhat.com> - 0.5.7-1
changelog:
  - Remove python 2 subpackage
  - ksrot: RPM now returns all string data as surrogate-escaped utf-8 strings
  - bcl: Tests fixes
  - bcl: pylint warnings
  - Better version of the check as advised by pmatilai


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-5
changelog:
  - Python 2 binary package renamed to python2-schedutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Tomas Popela <tpopela@redhat.com> - 0.35.9
changelog:
  - Bump the release so we can resurrect the python3 subpackages that we need for
    newer Inkscape
  - Related: rhbz#1891732


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protection


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-4
changelog:
  - Disable/remove neverallow options in frontends (#2184141)
  - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376)


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Jiri Konecny <jkonecny@redhat.com> - 0.5-1
changelog:
  - Fix exception in Screen input caused infinite loop (jkonecny)
  - Add test if app is initialized (jkonecny)
  - Redraw on first scheduled screen (#1487326) (jkonecny)
  - Redraw after YesNoDialog modal window close (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 0.6-1
changelog:
  - Implement the force quit all loops feature (jkonecny)
  - Improved GLib event loop testing (jkonecny)
  - Handle GLib event loop exceptions better (jkonecny)
  - Support for GLib event loop (jkonecny)
  - Wrap exceptions from handlers as ExceptionSignal (jkonecny)
  - Only highest priority events are processed in one iteration (jkonecny)
  - Move parts from MainLoop to AbstractEventLoop (jkonecny)
  - MainLoop won't wait in busy loop anymore (jkonecny)
  - Don't block loop when waiting on user input (jkonecny)
  - Fix user input lock (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 0.7-1
changelog:
  - Fix crash when container callback is not set (jkonecny)
  - Add EntryWidget to show item title and value (jkonecny)
  - Add GetPasswordInputScreen for getting passwords (jkonecny)
  - UIScreen can have hidden input (jkonecny)
  - Move getpass func inside locks (jkonecny)
  - Implement GetInputScreen (jkonecny)
  - Do not print new line with empty container (jkonecny)
  - Add no_separator to UIScreen (jkonecny)
  - Fix HelpScreen title (jkonecny)
  - Remove original classes from GLib tests (jkonecny)
  - Fix test case name (jkonecny)
  - Move tests to subfolder (jkonecny)
  - Move base widgets as second example (jkonecny)
  - Add example with basic widgets usage (jkonecny)
  - Improve README.md (jkonecny)
  - Improve example starting script (jkonecny)
  - Add glib loop example (jkonecny)
  - Add prefixes to examples to impress difficulty (jkonecny)
  - Add comments to the examples (jkonecny)
  - Update examples to use new features (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 0.8-1
changelog:
  - Test clean-up (jkonecny)
  - Move and rename force_quit loop (jkonecny)
  - Add dump screen stack method (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.0-1
changelog:
  - Fix docs based on the new PROCESSED feature (jkonecny)
  - Use new PROCESS_AND* in examples (jkonecny)
  - Add tests for PROCESSED_AND_{CLOSE|REDRAW} (jkonecny)
  - Use new PROCESSED_AND_{CLOSE|REDRAW} in advanced widgets (jkonecny)
  - Support PROCESSED_AND_CLOSE UserInputState (jkonecny)
  - Rename UserInputResult to UserInputAction (jkonecny)
  - Support PROCESSED_AND_REDRAW (jkonecny)
  - Fix link to the documentation in README (jkonecny)
  - Add link to the documentation (jkonecny)
  - Write documentation for Simpleline (jkonecny)
  - Disable pylint error for doc copyright variable (jkonecny)
  - Add new example used in the documentation (jkonecny)
  - Mock modules for readthedocs (jkonecny)
  - Do a small fixes to improve documentation (jkonecny)
  - Get version from the spec file (jkonecny)
  - Add documentation skeleton (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1-1
changelog:
  - Add global configuration initialize test (jkonecny)
  - Use default password function from GlobalConfiguration (jkonecny)
  - Add tests for GlobalConfiguration class (jkonecny)
  - Move default width to GlobalConfiguration class (jkonecny)
  - Add GlobalConfiguration object (jkonecny)
  - Fix a missing article in docs. (jkonecny)
  - Add tests for UIScreen get_user_input method (jkonecny)
  - Only InputManager is used to get input in UIScreen (jkonecny)
  - Move emit of InputReadySignal to InputRequest (jkonecny)
  - Get only last input on concurrent input (jkonecny)
  - Add concurrency tests for InputHandler (jkonecny)
  - Add requester source to the InputHandler (#1557472) (jkonecny)
  - Use InputManager as screen helper not in ScreenScheduler (#1557472) (jkonecny)
  - Add test to check InputThreadManager after initialization (jkonecny)
  - Reinitialize InputThreadManager when app is initialized (jkonecny)
  - Input requests are now handled by InputThreadManager (jkonecny)
  - Remove io_manager property from ScreenScheduler (jkonecny)
  - Rename io_manager to input_manager (jkonecny)
  - Change IOManager to InputManager (jkonecny)
  - Move draw from IOManager to ScreenScheduler (jkonecny)
  - Separate password input to PasswordInputHandler (jkonecny)
  - Add DEFAULT_WIDTH constant (jkonecny)
  - Add tests for InputHandler (jkonecny)
  - Replace get_input_without_check by new property (jkonecny)
  - Separate input to a new module (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1.1-1
changelog:
  - Use relative imports in tests (jkonecny)
  - Solve pylint errors (jkonecny)
  - Remove pot file (jkonecny)
  - Switch translations to rhel-8 Weblate branch (jkonecny)
  - Add potfile to the .gitignore (jkonecny)
  - Pause releasing when calling bumpver (jkonecny)
  - Remove Zanata from the Simpleline (jkonecny)
  - Switch po-push from Zanata to Weblate (jkonecny)
  - Download translations from Weblate (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1.3-1
changelog:
  - Add tests for UIScreen wide disabling of concurrency check (jkonecny)
  - Abstract registering signal handler in the InputHandler constructor (jkonecny)
  - Allow to disable concurrency check for all UIScreen inputs (jkonecny)
  - Enable execution of the tests on GitHub actions (jkonecny)
  - Add Makefile target for container tests execution (jkonecny)
  - Remove pocketlint from the build requires (jkonecny)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-8
changelog:
  - Python 2 binary package renamed to python2-slip
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.4-10
changelog:
  - Also rename python-slip-dbus and python-slip-gtk to python2-*
  - Add missing %python_provide macros
  - Use new python2- names in dependencies


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6.4-12
changelog:
  - Make firewalld to not log errors when running commands as root
    in the absence of polkitd.
  Resolves: rhbz#2076606


author: Jan Dobes 2.7.2-1
changelog:
  - Updating .po translations from Zanata
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - use standard rpmbuild bytecompile
  - modules are now in standard sitelib path
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-abrt into python2/python3 specific packages


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.43-1
changelog:
  - support syncing of modules during ISS
  - export modules in rhn-satellite-exporter
  - support downloading modules.yaml from backend
  - retrieve module metadata when syncing yum type repository
  - provide a way how to retrieve module files for yum type repositories


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-koan into python2/python3 specific packages


author: Ondrej Gajdusek <ogajduse@redhat.com> 2.6.1-1
changelog:
  - Increasing required version of rhnlib in due to ImportError module i18n in
    scap.py
  - Bumping package versions for 2.6.


author: Tomas Kasparek <tkasparek@redhat.com> 2.7.1-1
changelog:
  - 1451778 - require openscap-utils on rhel for backward compatibility
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub
  - Bumping package versions for 2.7.


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-oscap into python2/python3 specific packages


author: Tomas Kasparek <tkasparek@redhat.com> 2.7.4-1
changelog:
  - do checks to match latest __init__.py from spacewalk-backend-libs
  - don't rely on module initialization on backend-libs


author: Tomas Kasparek <tkasparek@redhat.com> 2.7.5-1
changelog:
  - Revert "do checks to match latest __init__.py from spacewalk-backend-libs"
  - don't package pyc and pyo files


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.1-3
changelog:
  - split spacewalk-usix into python2 and python3 variants (tkasparek@redhat.com)
  - build python3-spacewalk-usix also on rhel8 (tkasparek@redhat.com)


author: Javier Peña <jpena@redhat.com> - 1.0.1-8.20180316git
changelog:
  - Update to commit ebe84efc1a869da8d5689c706cdcf6ea864f0d9b
  - Fix build with Sphinx 1.7 (bz#1578132)


author: Scott Talbert <swt@techie.net> - 0.7-0.1.94664ddd46a6
changelog:
  - Switched to Jurko fork of suds
  - Modernize python packaging, build python3 package
  - Fixed bogus changelog dates


author: Scott Talbert <swt@techie.net> - 0.7-0.2.94664ddd46a6
changelog:
  - Applied patch from Haikel Guemar to support building on CentOS w/o Python 3
  - Move BRs to subpackages, support python- vs python2- BRs on non-Fedora


author: Petr Viktorin <pviktori@redhat.com> - 0.7-0.8.94664ddd46a6
changelog:
  - Don't build the python2 subpackage in rhel>7
    https://bugzilla.redhat.com/show_bug.cgi?id=1567165


author: Adam Williamson <awilliam@redhat.com> - 1.4.0-1
changelog:
  - New release 1.4.0 (builds against Python 3.6)
  - Drop sources merged upstream
  - Modernize spec a bit (use modern macros)
  - Rename python2 package to python2-sure


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.3-4
changelog:
  - Initial package for RHEL 8
  - Resolves: rhbz#2175215
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.7.0-1
changelog:
  - Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797@gmail.com)
  - Fixes #104 - Replace None with "" when sorting (seanokeeffe797@gmail.com)
  - Update Python 2 dependency declarations to new packaging standards
    (seanokeeffe797@gmail.com)
  - Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797@gmail.com)
  - Cache process info (elyscape@gmail.com)
  - Handle sshd sessions that use privilege separation (elyscape@gmail.com)
  - fix typo in docs (seanokeeffe797@gmail.com)
  - Switch Travis to container-based infrastructure (seanokeeffe797@gmail.com)
  - Fix RHBug #1469282 - bash completion should exit cleanly if python-
    argcomplete is not installed (seanokeeffe797@gmail.com)
  - Fix argparse logic in spec (#94) (frostyx@email.cz)
  - Update branches for fedora releaser (frostyx@email.cz)
  - Add epel releaser (seanokeeffe797@gmail.com)
  - rename tito releasers (seanokeeffe797@gmail.com)


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.6-1
changelog:
  - Update tito releasers (frostyx@email.cz)
  - CentOS-8 uses DNF (mmarusak@redhat.com)
  - Add missing runtime dependency on python2-six (frostyx@email.cz)
  - Add support for SUSE distributions using DNF (ngompa13@gmail.com)
  - Print a user-friendly error when a xml file cannot be parsed
    (frostyx@email.cz)
  - Update tito releasers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.7-1
changelog:
  - Add installation instructions of EPEL 8 (frostyx@email.cz)
  - Make the source of README.md more readable (frostyx@email.cz)
  - Remove duplicates in suggested helpers (frostyx@email.cz)
  - Make sure Collection.sorted doesn't traceback for None values
    (frostyx@email.cz)
  - Ignore sudo and su in the output (frostyx@email.cz)
  - Don't traceback for nonexisting PID (frostyx@email.cz)
  - Access process PID only once (frostyx@email.cz)
  - Rename tito master branch to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.8-1
changelog:
  - Release also for F35 (frostyx@email.cz)
  - Use distro.id() instead of platform.linux_distribution() (frostyx@email.cz)
  - Implement compare_packages for the alpm backend (jvanderwaa@redhat.com)
  - Add find_package support for alpm (jvanderwaa@redhat.com)
  - Use importlib instead of deprecated imp (frostyx@email.cz)
  - Drop beautifulsoup4/lxml dependencies (jvanderwaa@redhat.com)
  - Drop F32 from releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Lescak <rlescak@gmail.com> - 1.7.3-18
changelog:
  - Change file mode before owner when configuring remote control unix socket to avoid AVC denials
  - Resolves: rhbz#2038251


author: Petr Menšík <pemensik@redhat.com> - 1.16.0-1
changelog:
  - Upgrade to 9.16.0 (#2027735)
  - Update to recent version with compatibility with RHEL8 (#2027735)
  - Ensure also source level compatibility with previous version


author: Petr Viktorin <pviktori@redhat.com> - 1.1.0-13
changelog:
  - Drop the python-traceback2 dependency

    The traceback2 module duplicates functionality from the Python standard
    library. Use the standard library instead.


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Lumír Balhar <lbalhar@redhat.com> - 1.24.2-3
changelog:
  - Enable TLS 1.3 post-handshake authentication
  - Adjust RECENT_DATE variable according to rules
  Resolves: rhbz#1726743


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.0-11
changelog:
  - Python 2 binary package renamed to python2-urwid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Cantrell <dcantrell@redhat.com> - 1.3.1-2
changelog:
  - Apply upstream fix for EINTR handling in test_vterm test case
  - Apply upstream fix for test_remove_watch_file flakiness
  - Apply upstream fix for test_vterm handling of NUL characters


author: Tomas Orsava <torsava@redhat.com> - 0.5.1-6
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633609


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11.10-7
changelog:
  - Python 2 binary package renamed to python2-werkzeug
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomas Orsava <torsava@redhat.com> - 3.11.4-4
changelog:
  - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage
  Resolves: rhbz#2207631


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3047, RHEL-3267


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5569


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-14
changelog:
  - Set a special Provides tag that advertises the `python36` package as an
    alternative to the non-existing `python` package
  - Resolves: rhbz#1633561


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-15
changelog:
  - Don't list /usr/bin/python as a ghost file so `yum install /usr/bin/python`
    doesn't install this package
  - Resolves: rhbz#1633534


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-18
changelog:
  - Remove the Python source tarball as it's not being used in this symlink
    component
  - Create a new explanatory README
  - Resolves: rhbz#1654867


author: Lumír Balhar <lbalhar@redhat.com> - 3.8.6-2
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868006


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Rebase to 3.8.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.5-12
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7.0-2
changelog:
  - Drop explicit locale setting for python3, use C.UTF-8 for python2
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.4-1
changelog:
  - Update to 4.6.4, move python2-pytest to its own source package
  - Make /usr/bin/pytest and /usr/bin/py.test Python 3


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.7-10
changelog:
  - Subpackage python2-wcwidth has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33676, RHEL-33688


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 1.1.1-2
changelog:
  - Convert from Fedora to the python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Remove dependency on setuptools_scm
  - Resolves: rhbz#1877430


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-7
changelog:
  - Subpackage python2-py has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Tomas Orsava <torsava@redhat.com> - 1:0.35.1-3
changelog:
  - Add back Epoch 1 to the package version because the original version with the
    epoch was available in CentOS Stream for a few days
  - Resolves: rhbz#1877430


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-21
changelog:
  - kvm-backends-hostmem-Fix-support-of-memory-backend-memfd.patch [bz#2117149]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125271]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125271]
  - Resolves: bz#2117149
    (Can't run when memory backing with hugepages and backend type memfd)
  - Resolves: bz#2125271
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-8.8.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-22
changelog:
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2124757]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2124757]
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2018885]
  - Resolves: bz#2124757
    (RHEL8: skey test in kvm_unit_test got failed)
  - Resolves: bz#2018885
    ([virtiofs] virtiofsd debug log's timestamp is NULL)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-23
changelog:
  - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302]
  - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302]
  - Resolves: bz#2116302
    (RHEL8.6 - virtiofs will not mount fs on secure execution guest)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-24
changelog:
  - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909]
  - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909]
  - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909]
  - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909]
  - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909]
  - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909]
  - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909]
  - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909]
  - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909]
  - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760]
  - Resolves: bz#1664378
    ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part)
  - Resolves: bz#2043909
    ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part)
  - Resolves: bz#2129760
    (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-25
changelog:
  - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609]
  - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609]
  - Resolves: bz#2132609
    (qemu-kvm: backport some aarch64 fixes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-26
changelog:
  - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225]
  - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896]
  - Resolves: bz#2128225
    ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu)
  - Resolves: bz#2141896
    (VMs hung on vnc_clipboard_send)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-27
changelog:
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545]
  - Resolves: bz#2148545
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-28
changelog:
  - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448]
  - Resolves: bz#2155448
    (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-39.el8
changelog:
  - kvm-ppc-spapr-Add-hotremovable-flag-on-DIMM-LMBs-on-drme.patch [bz#1901837]
  - kvm-ppc-spapr-re-assert-IRQs-during-event-scan-if-there-.patch [bz#1901837]
  - kvm-slirp-check-pkt_len-before-reading-protocol-header.patch [bz#1902237]
  - kvm-s390x-s390-virtio-ccw-Reset-PCI-devices-during-subsy.patch [bz#1905386]
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1859494]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1859494]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1859494]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1859494]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1859494]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1859494]
  - Resolves: bz#1859494
    (Report logical_name for disks without mounted file-system)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1902237
    (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets [rhel-8])
  - Resolves: bz#1905386
    (RHEL8.3 - s390x/s390-virtio-ccw: Reset PCI devices during subsystem reset (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-40.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
  - kvm-qga-rename-Error-parameter-to-more-common-errp.patch [bz#1910326]
  - kvm-util-Introduce-qemu_get_host_name.patch [bz#1910326]
  - kvm-qga-Use-qemu_get_host_name-instead-of-g_get_host_nam.patch [bz#1910326]
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1910220]
  - Resolves: bz#1910267
    (There is no soft link '/etc/qemu-kvm/fsfreeze-hook')
  - Resolves: bz#1910326
    (Incorrect hostname returned by  qga command 'guest-get-host-name')
  - Resolves: bz#1910220
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-41.el8
changelog:
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
  - kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
  - kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
  - kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
  - Resolves: bz#1909244
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1843852
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1904393
    (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
  - Resolves: bz#1898628
    (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
  - Resolves: bz#1903070
    (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-42.el8
changelog:
  - kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
  - kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
  - kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
  - kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
  - kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
  - Resolves: bz#1905391
    (RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-43.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
  - Resolves: bz#1918054
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-44.el8
changelog:
  - kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
  - kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
  - kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
  - kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
  - kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
  - kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
  - kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
  - Resolves: bz#1834281
    (qemu-img convert abort when converting image with unaligned size)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1912974
    (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-45.el8
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
  - Resolves: bz#1919111
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-46.el8
changelog:
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
  - Resolves: bz#1902960
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1912891
    ([ppc64le] --disk cdimage.iso,bus=usb fails to boot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-47.el8
changelog:
  - kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
  - kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
  - Resolves: bz#1790620
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
  - Resolves: bz#1917451
    (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-49.el8
changelog:
  - kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1892350]
  - kvm-e1000-fail-early-for-evil-descriptor.patch [bz#1930092]
  - kvm-net-forbid-the-reentrant-RX.patch [bz#1859175]
  - kvm-qemu-img-convert-Don-t-pre-zero-images.patch [bz#1855250]
  - kvm-audio-audio_generic_get_buffer_in-should-honor-size.patch [bz#1932823]
  - Resolves: bz#1892350
    (CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.5.0])
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#1859175
    (CVE-2020-15859 virt:rhel/qemu-kvm: QEMU: net: e1000e: use-after-free while sending packets [rhel-8])
  - Resolves: bz#1855250
    (qemu-img convert uses possibly slow pre-zeroing on block storage)
  - Resolves: bz#1932823
    (after upgrade from 4.3 to 4.4 audio stops working in guests after couple of seconds)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-50.el8
changelog:
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1925430]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1842478]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1842478]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1842478]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1842478]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1842478]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1842478]
  - Resolves: bz#1925430
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.5.0])
  - Resolves: bz#1842478
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.5.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-51.el8
changelog:
  - kvm-linux-headers-Add-VFIO_CCW_REQ_IRQ_INDEX.patch [bz#1940450]
  - kvm-vfio-ccw-Connect-the-device-request-notifier.patch [bz#1940450]
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1942880]
  - Resolves: bz#1940450
    (RHEL8.5 - Mediated Device already in use by same domain we are booting (vfio-ccw/Multipath Testing) (kvm) - qemu-kvm part (also has kernel and libvirt parts))
  - Resolves: bz#1942880
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-52.el8
changelog:
  - kvm-file-posix-Mitigate-file-fragmentation-with-extent-s.patch [bz#1877163]
  - kvm-block-file-posix-Fix-problem-with-fallocate-PUNCH_HO.patch [bz#1944861]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1969768]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1969768]
  - Resolves: bz#1877163
    ([FJ 8.3 Bug] The progress bar of the "virt-clone --nonsparse" command shows the progress rate exceeding 100%.)
  - Resolves: bz#1944861
    (Qemu-img convert fails when source image is on gpfs)
  - Resolves: bz#1969768
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-23.el8
changelog:
  - kvm-Add-mtod_check.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970823]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970842]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970850]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970858]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1804196]
  - Resolves: bz#1970823
    (CVE-2021-3592 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-av-8])
  - Resolves: bz#1970842
    (CVE-2021-3593 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-av-8])
  - Resolves: bz#1970850
    (CVE-2021-3595 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-av-8])
  - Resolves: bz#1970858
    (CVE-2021-3594 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-av-8])
  - Resolves: bz#1804196
    (inconsistent paths for interop json files)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-24.el8
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1968326]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1968326]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1968326]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1968326]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - Resolves: bz#1968326
    ([vfio_ccw] I/O error when checking format - dasdfmt requires --force in quick mode when passed through)
  - Resolves: bz#1935014
    (qemu crash when attach vhost-user-blk-pci with option queue-size=4096)
  - Resolves: bz#1935019
    (qemu guest failed boot when attach vhost-user-blk-pci with option iommu_platform=on)
  - Resolves: bz#1935020
    (qemu guest failed boot when attach vhost-user-blk-pci with option packed=on)
  - Resolves: bz#1935031
    (qemu guest failed boot when attach vhost-user-blk-pci with unmatched num-queues with qsd)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-25.el8
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1976171]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1943653]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1943653]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1943653]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1943653]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1943653]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1943653]
  - Resolves: bz#1976171
    ([IBM 8.5 FEAT] CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#1943653
    (RHV VM pauses due to 'qemu-kvm' getting EINVAL on i/o to a direct lun with scsi passthrough enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-26
changelog:
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1977798]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1787194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1959676]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1959729]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1924822]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1838221]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1838221]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1838221]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1930286]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1930286]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1930286]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1848881]
  - Resolves: bz#1977798
    (RHEL8.5 guest network interface name changed after upgrade to qemu-6.0)
  - Resolves: bz#1787194
    (After canceling the migration of a vm with VF which enables failover, using "migrate -d tcp:invalid uri" to re-migrating the vm will cause the VF in vm to be hot-unplug.)
  - Resolves: bz#1959676
    (guest status is paused after loadvm on rhel8.5.0)
  - Resolves: bz#1959729
    (SAP/3TB VM migration slowness [idle db])
  - Resolves: bz#1924822
    ([Intel 8.5 FEAT] qemu-kvm AVX2 VNNI - Fast Train)
  - Resolves: bz#1838221
    ([Intel 8.5 FEAT]  qemu-kvm Bus Lock VM Exit - Fast Train)
  - Resolves: bz#1930286
    (randread and randrw regression with virtio-blk multi-queue)
  - Resolves: bz#1848881
    (nvme:// block driver can exhaust IOMMU DMAs, hanging the VM, possible data loss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-27
changelog:
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1976852]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1976852]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1974579]
  - Resolves: bz#1976852
    ([failover vf migration]  The failover vf will be unregistered  if canceling the migration whose status is "wait-unplug")
  - Resolves: bz#1974579
    (It's not possible to start installation from a virtual USB device on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-28.el8
changelog:
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1946084]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1946084]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1946084]
  - kvm-audio-Never-send-migration-section.patch [bz#1991671]
  - Resolves: bz#1946084
    (qemu-img convert --bitmaps fail if a bitmap is inconsistent)
  - Resolves: bz#1991671
    (vmstate differs between -audiodev and QEMU_AUDIO_DRV when no sound frontends devs present.)


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-2
changelog:
  - kvm-qxl-fix-pre-save-logic.patch [bz#2002907]
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998949]
  - kvm-redhat-Update-pseries-rhel8.5.0.patch [bz#1998949]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998950]
  - Resolves: bz#2002907
    (Unexpectedly failed when managedsave the guest which has qxl video device)
  - Resolves: bz#1998949
    (Add machine type compatibility update for 6.1 rebase [ppc64le])
  - Resolves: bz#1998950
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-3
changelog:
  - kvm-virtio-net-fix-use-after-unmap-free-for-sg.patch [bz#1999221]
  - Resolves: bz#1999221
    (CVE-2021-3748 virt:rhel/qemu-kvm: QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-4
changelog:
  - kvm-spec-Remove-qemu-kiwi-build.patch [bz#2002694]
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998947]
  - Resolves: bz#2002694
    (remove qemu-kiwi rpm from qemu-kvm sources in rhel-8.6)
  - Resolves: bz#1998947
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-5
changelog:
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#1930092]
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2020720]
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#2020720
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2062613]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2062613]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2062613]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2060843]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2062610]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2062610]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2065207]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2065207]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2062611]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2062611]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2062611]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2062611]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2062611]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2062611]
  - Resolves: bz#2062613
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA [rhel-8.7.0])
  - Resolves: bz#2060843
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device [rhel-8.7.0])
  - Resolves: bz#2062610
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating [rhel-8.7.0])
  - Resolves: bz#2065207
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04' [rhel-8.7.0])
  - Resolves: bz#2062611
    (Guest can not start with SLIC acpi table [rhel-8.7.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2068202]
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2067118]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2067118]
  - kvm-s390x-css-fix-PMCW-invalid-mask.patch [bz#2071070]
  - kvm-Set-permission-on-installing-files.patch [bz#2072377]
  - Resolves: bz#2068202
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.7.0])
  - Resolves: bz#2067118
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2071070
    (s390x/css: fix PMCW invalid mask)
  - Resolves: bz#2072377
    (Fix build warnings that occur when installing the keymap files)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#1999236]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#1999236]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#1999236]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-13
changelog:
  - kvm-s390x-ipl-support-extended-kernel-command-line-size.patch [bz#2043830]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2063206]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#1519071]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#1519071]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#1519071]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#1519071]
  - Resolves: bz#2043830
    ([IBM 8.7 FEAT] KVM: Allow long kernel command lines for QEMU)
  - Resolves: bz#2063206
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8])
  - Resolves: bz#1519071
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-20.el8.1
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743]
  - Resolves: bz#2116743
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-29
changelog:
  - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119]
  - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119]
  - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188]
  - kvm-migration-Read-state-once.patch [bz#2074205]
  - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713]
  - Resolves: bz#2125119
    (Mirror job with "copy-mode":"write-blocking" that used for storage migration can't converge under heavy I/O)
  - Resolves: bz#2161188
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)
  - Resolves: bz#2074205
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set)
  - Resolves: bz#2163713
    ([s390x] VM fails to start with ISM passed through)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-30
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617]
  - Resolves: bz#2147617
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-31
changelog:
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187]
  - Resolves: bz#2137740
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168187
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-32.el8_8
changelog:
  - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472]
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990]
  - Resolves: bz#2168472
    (Guest hangs when starting or rebooting)
  - Resolves: bz#2090990
    (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion `req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion `r->req.aiocb != NULL' failed [8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-33
changelog:
  - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2187159]
  - Resolves: bz#2187159
    (RHEL8.8 - KVM - Secure Guest crashed during booting with 248 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-34
changelog:
  - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957]
  - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957]
  - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957]
  - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712]
  - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712]
  - Resolves: bz#2177957
    (Qemu core dump if cut off nfs storage during migration)
  - Resolves: bz#2035712
    ([qemu] Booting from Guest Image over NBD with TLS Is Slow)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-35
changelog:
  - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880]
  - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605]
  - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605]
  - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605]
  - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605]
  - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605]
  - Resolves: bz#2196880
    ([virtiofs] Backport FUSE_SYNCFS support)
  - Resolves: bz#2169308
    (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9)
  - Resolves: bz#2209605
    ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-36
changelog:
  - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236]
  - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236]
  - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236]
  - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236]
  - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236]
  - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236]
  - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236]
  - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236]
  - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236]
  - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236]
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203]
  - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])
  - Resolves: bz#2216203
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2169733
    (Qemu on destination host crashed if migrate with postcopy and multifd enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-37
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964]
  - kvm-iotests-iov-padding-New-test.patch [bz#2141964]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964]
  - Resolves: bz#2141964
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-38
changelog:
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840]
  - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947]
  - Resolves: bz#2214840
    ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2223947
    ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-39
changelog:
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786]
  - Resolves: bz#2215786
    (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-40
changelog:
  - kvm-ui-vnc-clipboard-fix-infinite-loop-in-inflate_buffer.patch [bz#2218488]
  - Resolves: bz#2218488
    (CVE-2023-3255 virt:rhel/qemu-kvm: QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-41
changelog:
  - kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
  - kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
  - kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
  - kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
  - kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
  - Resolves: bz#2111390
    ([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-42
changelog:
  - kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
  - kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
  - kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
  - Resolves: RHEL-16696
    (RHEL8 - KVM : Secure execution guest remains in "paused" state, post "virsh dump" failure (qemu-kvm))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-43
changelog:
  - kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
  - kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
  - kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
  - kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
  - Resolves: RHEL-7309
    (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
  - Resolves: RHEL-7567
    ([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
  - Resolves: RHEL-2600
    (qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-44
changelog:
  - kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
  - kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
  - Resolves: RHEL-15437
    (CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-45
changelog:
  - kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
  - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
  - kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
  - Resolves: RHEL-20189
    ([RHEL.8.10.0]Failed to migrate guest with pc (i440x)  between RHELAV 8.4.0 and RHEL 8.10.0)
  - Resolves: RHEL-14870
    ([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-46
changelog:
  - kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
  - kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
  - kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
  - kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
  - kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
  - Resolves: RHEL-18214
    ([RHEL8][Secure-execution][s390x]  The error message is not clear when boot up a SE guest with wrong encryption)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-47
changelog:
  - kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
  - kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
  - kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
  - Resolves: RHEL-22411
    ([s390x] VM fails to start with ISM passed through)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-48
changelog:
  - kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
  - kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
  - kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
  - kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
  - Resolves: RHEL-7353
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-49
changelog:
  - kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
  - kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
  - kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
  - Resolves: RHEL-19628
    (CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
  - Resolves: RHEL-19496
    (CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-29.el8
changelog:
  - kvm-file-posix-Cap-max_iov-at-IOV_MAX.patch [bz#1994494]
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974366]
  - Resolves: bz#1994494
    (VM remains in paused state when trying to write on a resized disk resides on iscsi)
  - Resolves: bz#1974366
    (Fail to set migrate incoming for 2nd time after the first time failed)


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.2-2
changelog:
  - omit -qtdoc-doc bits, conflicts with real qt5-qtdoc (#1520355)
  - use %_qt5_docdir macro (instead of hard-coded %_docdir/qt5)
  - optimize build a bit


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-2
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209491


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-3
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212753


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212753


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-3
changelog:
  - rpcgen tool split from glibc-common package
  - Pass TIRPC header files location to all RPC compilation units
  - Do not iterate over negative UIDs in repquota
  - Fix mistakes in warnquota reported by GCC 8


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-4
changelog:
  - Avoid questions in quotacheck non-interactive mode
  - Report an error when quotacheck fails to cache quota files
  - Report an error if quota file magic is invalid


author: Aristeu Rozanski <aris@redhat.com> 0.6.1-9
changelog:
  - Prevent ras-mc-ctl trying to access extlog and mce tables if rasdaemon was built without support for them [2011404]


author: Sumit Bose <sbose@redhat.com> - 0.16.3-14
changelog:
  - Fix python BuildRequires
    Resolves: rhbz#1615564
  - Add RHEL specific patch for IPA
    Resolves: rhbz#1615320
  - Fix issues found by Coverity
    Resolves: rhbz#1602677


author: Sumit Bose <sbose@redhat.com> - 0.16.3-17
changelog:
  - rebuild fails if DISTRO variable is exported
    Resolves: rhbz#1747454
  - realmd.conf user-principal RFE and clarification
    Resolves: rhbz#1747452
  - realmd.conf documentation incorrect
    Resolves: rhbz#1747457
  - Document realmd.conf and how realmd reads the configuration
    Resolves: rhbz#1747456


author: Sumit Bose <sbose@redhat.com> - 0.16.3-19
changelog:
  - Realm join fails with error 'Failed to join domain: failed to lookup
    DC info ...'
    Resolves: rhbz#1859503
  - realm command to use option like dnshostname=fqdn
    Resolves: rhbz#1867912


author: Sumit Bose <sbose@redhat.com> - 0.16.3-20
changelog:
  - realmd should handle default_realm in krb5.conf
    Resolves: rhbz#1791016
  - [RFE] Enable LDAPS functionality in realmd join
    Resolves: rhbz#1826964


author: Sumit Bose <sbose@redhat.com> - 0.16.3-24
changelog:
  - Avoid duplicated log messages and use Samba's new CLI options
    Resolves: rhbz#2024248
    Resolves: rhbz#2028528


author: Sumit Bose <sbose@redhat.com> - 0.17.1-2
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: RHEL-12113
  - fix ccache handling for leave operation
    Resolves: RHEL-26166


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-1
changelog:
  - Rebase to upstream release 2.6 and drop unneded patches.
    Add S/390 support.
    Resolves: rhbz1983003, rhbz1988493, rhbz1868421
  - Add missing dependencies on dhcp-client (see #1926451), file
  - Patch documents to be compatible with asciidoc,
    we don't have asciidoctor
  - On POWER add bootlist & ofpathname to the list of required programs
    conditionally (bootlist only if running under PowerVM, ofpathname
    always except on PowerNV) - upstream PR2665, add them to package
    dependencies
    Resolves: rhbz1983013


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-2
changelog:
  - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
    Resolves: rhbz1993296


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-3
changelog:
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore
    Resolves: rhbz1747468


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-4
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-5
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86 and aarch64, needed for EFI System Partition


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-6
changelog:
  - Restore usr/share/rear/output/PXE/default/820_copy_to_net.sh
    removed in 2.4-19 with rsync refactor.
    It is still needed to use a rsync OUTPUT_URL when OUTPUT=PXE and BACKUP=RSYNC


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-8
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-12
changelog:
  - Skip invalid disk drives when saving layout PR 3047
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136
  - make initrd accessible only by root (CVE-2024-23301), PR 3123
  - Backport PR 3061 to save LVM pool metadata volume size in disk layout
    and restore it
  - Backport PR 3058 to skip useless xfs mount options when mounting
    during recovery, prevents mount errors like "logbuf size must be greater
    than or equal to log stripe size"


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4-18
changelog:
  - Fix typo in default.conf
    Resolves: #1882060
  - Modify the cron command to avoid an e-mail with error message after
    ReaR is installed but not properly configured when the cron command
    is triggered for the first time
    Resolves: #1729499
  - Backport upstream code related to LUKS2 support
    Resolves: #1832394
  - Changes for NetBackup (NBU) support, upstream PR2544
    Resolves: #1898080


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-19
changelog:
  - Backport PR2608:
    Fix setting boot path in case of UEFI partition (ESP) on MD RAID
    Resolves: rhbz1945869
  - Backport PR2625
    Prevents accidental backup removal in case of errors
    Resolves: rhbz1958247
  - Fix rsync error and option handling
    Fixes metadata storage when rsync user is not root
    Resolves: rhbz1930662


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole<pghole@redhat.com> - 0.10.1-1
changelog:
  - Resolves: rhbz#1670001 - redhat-support-tool -o option does not work (soscleaner)
  - Resolves: rhbz#1670369 - redhat-support-lib-python: Traceback on make_report from utils.reporthelper
  - Resolves: rhbz#1670044 - redhat-support-tool proxy does not work on rhel-8


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-1
changelog:
  - Resolves: rhbz#1677257 - redhat-support-lib-python: AttributeError from utils/reporthelper.py no buf


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#1947346 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#1947345 - Add support for handling JSON response from API's
  - Resolves: rhbz#1767196 - Add support to upload to and download from S3


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
  - Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
  - Resolves: rhbz#1342628 - When opening a new case, offer a default product.
  - Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-2
changelog:
  - Resolves: rhbz#1685296 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1685295 - [RFE][RHEL8] Include Reason in cases of failed proxy
  - Resolves: rhbz#1684321 - redhat-support-tool config debug <level>` fails with "ERROR: debug is not a valid configuration file option.


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2018195 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2018194 - Add support for handling JSON response from API's
  - Resolves: rhbz#1767195 - Add support to upload to and download from S3


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2223405)
  - Failling to get system profile is not an error but a warning (RHBZ#2227019)
  - Added bash completion (RHBZ#2227014)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17180)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17180)


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.7
changelog:
  - Add ExcludeArch i686 to fix build issues with ansible-core
  - Resolves: RHEL-21946 : keylime_server - won't detect registrar start failure


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.9
changelog:
  - Resolves: RHEL-21383 : ad_integration - feat: add ad_integration_preserve_authselect_profile
  - Resolves: RHEL-21134 : ad_integration - feat: Add SSSD parameters support
  - Resolves: RHEL-21123 : journald - feat: Add support for ForwardToSyslog
  - Resolves: RHEL-22310 : podman - fix: cast secret data to string in order to allow JSON valued strings
  - Resolves: RHEL-21402 : podman - fix: name of volume quadlet service should be basename-volume.service
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9
  - Resolves: RHEL-16975 : rhc - rhc: new rhc_insights.ansible_host parameter


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.10
changelog:
  - Resolves: RHEL-14022 : storage - Basic support for creating shared logical volumes
    GFS2 support in blivet is enabled


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.11
changelog:
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9
  - Resolves: RHEL-23309 : storage - tests_lvm_auto_size_cap_nvme_generated failed at "Assert expected size is actual size"


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.13
changelog:
  - Resolves: RHEL-16975 : rhc - rhc: new rhc_insights.ansible_host parameter
    Rename test playbook from .yaml to .yml


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.14
changelog:
  - Resolves: RHEL-3241 : bootloader - Create bootloader role (MVP)
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.16
changelog:
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    this is the MVP candidate for the snapshot role


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.17
changelog:
  - Resolves: RHEL-25509 : nbde_server - fix: Allow tangd socket override directory to be managed outside of the role
  - Resolves: RHEL-21491 : network - Add blackhole type route to rhel-system-roles.network
  - Fixed issues with ANSIBLE_GATHERING=explicit in several roles
  - Fixed test cleanup issues in several roles


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.18
changelog:
  - Resolves: RHEL-22229 : podman - user linger needed before secrets
    fixed issue with ANSIBLE_GATHERING=explicit
  - Resolves: RHEL-5985 ansible-sshd - Manage SSH certificates
    fixed issue with RHEL7 tests


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.19
changelog:
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes idempotency, check mode, cleanup, basic-smoke-test


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.20
changelog:
  - Resolves: RHEL-16965 : rhc - new rhc_insights.display_name parameter
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes error handling


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.21
changelog:
  - Resolves: RHEL-3241 : bootloader - Create bootloader role (MVP)
    fix issue with path on arches other than x86_64, and EFI systems
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    cockpit - fixed issue with test cleanup
    postgresql - fixed issue with test cleanup


author: Sergei Petrosian <spetrosi@redhat.com> - 1.23.0-1
changelog:
  - Resolves: RHEL-5345 spec - Remove with_html, instead use built-in .README.html
  - Resolves: RHEL-5985 ansible-sshd - Manage SSH certificates
  - rhbz#2224648: Remove ad_integration patch and use the latest ad_integration
    version instead. Vendor community-general.ini_files for
  - RHEL-1119: ad_integration: Support for dynamic DNS Updates
  - Change link to open new issue in galaxy.yml from deprecated BZ to Jira


author: Sergei Petrosian <spetrosi@redhat.com> - 1.23.0-2
changelog:
  - RHEL-1119: ad_integration: Support for dynamic DNS Updates
    Update to a new version with fixed tests


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.1
changelog:
  - Resolves: RHEL-15872 :  - RHEL for Edge support in system roles
    except for nbde_client, rhc, metrics
  - Resolves: RHEL-17667 : ad_integration - feat: Add sssd custom settings
  - Resolves: RHEL-16542 : fapolicyd - feat: Import code for fapolicyd system role
  - Resolves: RHEL-14090 : ha_cluster - [RFE] HA Cluster system role should be able to enable Resilient Storage repository
  - Resolves: RHEL-4624 : ha_cluster - [FutureFeature] Allow ha_cluster role to configure fencing topology
  - Resolves: RHEL-3264 : ha_cluster - [FutureFeature] Allow ha_cluster role to configure all qdevice options
  - Resolves: RHEL-3354 : kdump - fix: retry read of kexec_crash_size
  - Resolves: RHEL-15933 : logging - feat: Add support for the global config option preserveFQDN with a new logg…
  - Resolves: RHEL-15440 : logging - feat: Add support for general queue and general action parameters
  - Resolves: RHEL-15038 : logging - fix: check that logging_max_message_size is set, not rsyslog_max_message_size
  - Resolves: RHEL-16501 : network - Ansible RHEL network system role issue with ipv6.routing-rules the prefix length for 'from' cannot be zero"
  - Resolves: RHEL-15871 : selinux - fix: Use `ignore_selinux_state` module option
  - Resolves: RHEL-16213 : storage - feat: Support for creating volumes without a FS


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.2
changelog:
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    vpn - fixed issue with test cleanup


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.3
changelog:
  - Resolves: RHEL-17874 : ha_cluster - high-availability firewall service is not added on qdevice node


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.4
changelog:
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    updated several roles with ostree improvements
    metrics role support for ostree
  - Resolves: RHEL-16542 : fapolicyd - feat: Import code for fapolicyd system role
    several role improvements
  - Resolves: RHEL-4684 : ha_cluster - fix: set sbd.service timeout based on SBD_START_DELAY
  - Resolves: RHEL-19047 : logging - fix: avoid conf of RatelimitBurst when RatelimitInterval is zero
  - Resolves: RHEL-18170 : metrics - [RFE] Metrics system role support for configuring PMIE webhooks
  - Resolves: RHEL-19242 : podman - fix: add no_log: true for tasks that can log secret data
  - Resolves: RHEL-18963 : postgresql - feat: enable using postgresql 16
  - Resolves: RHEL-16977 : rhc - rhc: support RHEL 7 managed nodes
  - Resolves: RHEL-19042 : selinux - fix: no longer use "item" as a loop variable
  - Resolves: RHEL-19044 : selinux - fix: Print an error message when module to be created doesn't exist
  - Resolves: RHEL-14022 : storage - Basic support for creating shared logical volumes


author: Tomas Kasparek <tkasparek@redhat.com> 5.4.42-4
changelog:
  - Resolves: #1566053 - require dnf-plugin-spacewalk on rhel8 instead of yum
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Christopher Snyder <csnyder@redhat.com> 1.28.5-1
changelog:
  - removing yarn (jmolet@redhat.com)
  - Revert "1847910: DNF plugins are part of sub-man RPM, libdnf RPM; ENT-2536"
    (csnyder@redhat.com)
  - 1886745: Fix __init__ of CPProvider; ENT-3147 (jhnidek@redhat.com)
  - 1833316: unset-addons argument is missing in the bash completion of
    syspurpose (wpoteat@redhat.com)
  - 1875595: Service-Level set issues (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.6-1
changelog:
  - 1850624: Uncaught JSONDecodeError when content_access.json is empty and
    registering to Satellite6 (wpoteat@redhat.com)
  - 1831082: Better messages for attach --auto for SCA mode; ENT-3175
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.7-1
changelog:
  - 1855437: Fixed rpm dependency of subscription-manager; ENT-3250 (#2365)
    (jhnidek@redhat.com)
  - 1894450: Fix issue with identity command; ENT-3235 (#2364)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.8-1
changelog:
  - 1904541: subscription-manager should not prompt for "Organization" when only
    one organization (#2372) (wpoteat@redhat.com)
  - 1801570: drop scrollkeeper/rarian as a dependency from rhsm-gtk
    (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.28.10-1
changelog:
  - Use python3-requests and not python-requests. (jhnidek@redhat.com)
  - ENT-3289: automatic registration on public cloud (#2407) (jhnidek@redhat.com)
  - ENT-3191: Collect metadata of cloud providers (#2381) (jhnidek@redhat.com)
  - Detecting of cloud providers; ENT-3288 (#2367) (jhnidek@redhat.com)
  - 1899677: Extract of strings for translations (#2399) (wpoteat@redhat.com)
  - Syntax update to translation commands (#2395) (wpoteat@redhat.com)
  - Update project to use Weblate for translations (#2388) (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.11-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - 1922173: Repeat auto-register only, when first attempt fail (#2420)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.13-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (jsefler@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1636950: make value possibly plural for addons in syspurpose man page
    (tmerry@localhost.localdomain)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - update language of REPOS OPTIONS in subscription-manager man page
    (tmerry@localhost.localdomain)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - change add-ons to addons (tmerry@localhost.localdomain)
  - 1634780: typo in syspurpose man page (tmerry@localhost.localdomain)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    of the subscription-manager man pages (tmerry@localhost.localdomain)
  - 1637083: add unset sections (tmerry@localhost.localdomain)
  - 1920017: Remove a sentence from the subscription-manager man page.
    (tmerry@localhost.localdomain)
  - 1646718: Debrand message to not include Red Hat Subscription Manager but
    instead with an entitlement server (tmerry@localhost.localdomain)
  - 1682943: put a blank space back into a comment to separate two sentences
    (tmerry@localhost.localdomain)
  - 1857491: Add newline character to split a message into 2 lines
    (tmerry@localhost.localdomain)
  - 1920020: Set default_log_level to INFO when an invalid value is passed on the
    command line (#2481) (31166354+tlhmerry9@users.noreply.github.com)
  - 1924921: Fix getting releases, when SCA is used (jhnidek@redhat.com)
  - 1944093: Translated using Weblate (Korean) (simmon@nplob.com)
  - 1944093: Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - 1944093: Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - 1927245: Mark several dir as part of RPM (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.16-1
changelog:
  - 1950015: fix typos in syspurpose(8) (#2604) (ptoscano@redhat.com)
  - Updated translations for Korean and Italian from weblate (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - 1637083: Removed the parameters to the unset-addons subcommand
    (tmerry@redhat.com)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - 1636950: modify description in the man page for syspurpose for the generic
    commands (tmerry@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - cockpit: Update test API to 236 (martin@piware.de)
  - cockpit: Replace obsolete wait_present() with wait_visible()
    (martin@piware.de)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
  - 1878133: Deprecation message for syspurpose (#2421) (wpoteat@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Add RHEL 8.5 releaser (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.15-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - make value possibly plural for addons in syspurpose man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - update language of REPOS OPTIONS in subscription-manager man page
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - change add-ons to addons (tmerry@localhost.localdomain)
  - 1634780: typo in syspurpose man page (tmerry@localhost.localdomain)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    of the subscription-manager man pages (tmerry@localhost.localdomain)
  - 1637083: add unset sections (tmerry@localhost.localdomain)
  - 1920017: Remove a sentence from the subscription-manager man page.
    (tmerry@localhost.localdomain)
  - 1646718: Debrand message to not include Red Hat Subscription Manager but
    instead with an entitlement server (tmerry@localhost.localdomain)
  - 1682943: put a blank space back into a comment to separate two sentences
    (tmerry@localhost.localdomain)
  - 1857491: Add newline character to split a message into 2 lines
    (tmerry@localhost.localdomain)
  - 1920020: Set default_log_level to INFO when an invalid value is passed on the
    command line (#2481) (31166354+tlhmerry9@users.noreply.github.com)
  - 1924921: Fix getting releases, when SCA is used (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - Added translation using Weblate (Sinhala) (r45xveza@pm.me)
  - 1927245: Mark several dir as part of RPM (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.17-1
changelog:
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (#2641)
    (tmerry@redhat.com)
  - 1897767: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - 1951057: Cherry Pick to Add in memory read of cache, delete SCA cert with not
    needed. (#2618) (tmerry@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1956764: New extraction for translatable strings (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1638080: surround the syspurpose feedback in quotes (tmerry@redhat.com)
  - 1949492: remove bogus %changelog entries (ptoscano@redhat.com)
  - 1637083: remove the unset PROPERTY VALUE from the Generic Commands
    (tmerry@redhat.com)
  - 1897767: what does 'No valid values provided for usage' mean to the user for
    subscription-manager-1.28 branch (tmerry@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values (tmerry@redhat.com)


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Neil Horman <nhorman@redhat.com> - 6.8-2
changelog:
  - Fix erroneous message due to bad errno check (bz 1776710)
  - Enable addition of 0 value for fill-watermark (bz 1776710)


author: Vladis Dronov <vdronov@redhat.com> - 6.8-4
changelog:
  - There is no need to hardcode _sbindir anymore, also the old value is
    incorrect
  - Update the rngd.service file
  - Fix a busyloop bug (bz 1956248)
  - Fix /dev/hwrng permission issue (bz 1955522)


author: Vladis Dronov <vdronov@redhat.com> - 6.8-6
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm is not
    run in a container (bz 1975554)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Fix a number of issues (bz 1974103, bz 1980421, bz 1859154)


author: Vladis Dronov <vdronov@redhat.com> - 6.14-4.git.b2b7934e
changelog:
  - Update rng-tools to v6.14 @ b2b7934e (bz 2015570)
  - Update jitterentropy library to v3.3.1 @ 887c9871
  - Add a config file for storing rngd options
  - Fix a security issue found by a covscan in jitterentropy library


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974)
  - Update jitterentropy library to v3.4.0 @ 887c9871
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update rng-tools to v6.15 @ 6dcc9ec2 (bz 2124602)
  - Update jitterentropy library to v3.4.1 @ 4544e113
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update rng-tools to v6.15 @ cb8cc624 (bz 2141379)
  - Update jitterentropy library to v3.4.1 @ 7bf9f85d
  - Fix a stack corruption on s390x
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update rng-tools to v6.16 @ 0e560296 (bz 2174908)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Ondrej Vasik <ovasik@redhat.com> 0.1-13
changelog:
  - copy content of /etc/skel directory for root as posstrans,
    don't overwrite  existing files (#999114)


author: Steve Dickson <steved@redhat.com> - 1.2.5-1
changelog:
  - Fixed stack buffer overflow in rpcinfo (bz 1637565)
  - Make sure /var/lib/rpcbind exists (bz 1628901)


author: Jarod Wilson <jarod@redhat.com> - 5-4
changelog:
  - Make hooks more resilient to missing info
  - Error out with a useful message when necessary info isn't there
  - Resolves: rhbz#1627122


author: Colin Walters <walters@verbum.org> - 2022.2.8.gd50a74bd-2
changelog:
  - Update to latest rhel8 branch
    https://github.com/coreos/rpm-ostree/pull/3749
    https://github.com/coreos/rpm-ostree/pull/3751
    Resolves: rhbz#2095528


author: Colin Walters <walters@verbum.org> - 2022.10.86.gd8f0c67a-3
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/d8f0c67a0eba32281c9f2782a286e06486a4b909
    Resolves: rhbz#2105414


author: Colin Walters <walters@verbum.org> - 2022.10.90.g4abaf4b4-4
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/4abaf4b4
    Resolves: rhbz#2118774


author: Colin Walters <walters@verbum.org> - 2022.10.94.g89f58028-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/89f58028f0bea5b6fa59bdb3506078e09957ec00
  - Resolves: rhbz#2122289
  - Resolves: rhbz#2122299


author: Colin Walters <walters@verbum.org> - 2022.10.97.gade6df33-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/ac182cb920f84946bb155e9cf061db7f5f26e917
  - Resolves: rhbz#2122289


author: Colin Walters <walters@verbum.org> - 2022.10.112.g3d0ac35b-3
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4311/commits/a0f1275dfbd835b704355d095e610ac1f1254f25
    Resolves: rhbz#2170579


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.10.117.g52714b51-2
changelog:
  - Backport fb97c48f3 & eae7e1d8
    https://github.com/coreos/rpm-ostree/commit/fb97c48f3cd070c1ad559f3f43f86ad6548f6b02
    https://github.com/coreos/rpm-ostree/commit/eae7e1d8d692b5ce6d3d6eef29abbd7512ae4682
    Resolves: rhbz#2229804


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: John Kacur <jkacur@redhat.com> - 5.14.0-6
changelog:
  - Forward port the tests directory for ci testing
  Resolves: rhbz#2196611
  jiraProject == RHELPLAN-156801


author: John Kacur <jkacur@redhat.com> - 6.6.0-1
changelog:
  Update to rtla in linux-6.6.0
  - Add patch to use SYS_gettid and add -lpthread to the Makefile
  Resolves: RHEL-10081


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.5.0-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Dan Horák <dhorak@redhat.com> - 2:2.22.0-1
changelog:
  - rebased to 2.22.0 (#2043846)
  - add tool to persistently configure vfio-ap devices (#1660911)
  - NVMe stand-alone dump support (#1847462)
  - KVM: Secure Execution Attestation Userspace Tool (#1984908)
  - KVM: Allow long kernel command lines for Secure Execution guests (#2043831)
  - KVM: Secure Execution guest dump encryption with customer keys (#2043833)
  - zcrypt DD: Exploitation Support of new IBM Z Crypto Hardware (#2043857)
  - zipl: Site-aware environment block (#2043913)
  - Add additional information to SCLP CPI (#2046681)
  - Add new CPU-MF Counters for IBM z16 Hardware (#2047727)
  - Long Kernel Commmand Line for s390x (#2060829)
  - zkey: Fix re-enciphering of EP11 identity key of KMIP plugin (#2075011)
  - genprotimg/check_hostkeydoc: cert. verification is too strict (#2075013)
  - Resolves: #2043846 #1660911 #1847462 #1984908 #2043831 #2043833 #2043857 #2043913 #2046681 #2047727 #2060829 #2075011 #2075013


author: Dan Horák <dhorak@redhat.com> - 2:2.25.0-1
changelog:
  - rebased to 2.25.0 (#2110312)
  - KVM: Tool to process encrypted Secure Execution guest dumps (#2043851)
  - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2043852)
  - zdev: Site-aware device configuration (#2043858)
  - Display Processor Activity Instrumentation CPACF counters (#2111013)
  - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126618)
  - zipl: Add secure boot trailer (#2142884)
  - Resolves: #2110312 #2043851 #2043852 #2043858 #2111013 #2126618 #2142884


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2159698)
  - lszcrypt fails when querying a specific domain (#2177613)
  - DASD autoquiesce support (#2196510)
  - zcrypt DD: AP command filtering (#2170362)
  - vmconvert and zgetdump consolidation (#2173925)
  - Support for List-Directed dump from ECKD DASD (#2159694)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2159691)
  - Resolves: #2159698 #2177613 #2196510 #2170362 #2173925 #2159694 #2159691


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11409)
  - KVM: Support AP Bindings in SE Header (RHEL-10573)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441)
  - vmur: fix handling of option -t (RHEL-11479)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526)
  - enable multi-arch build (RHEL-10568)
  - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10568


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-20
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-2
changelog:
  - silence coverity regarding inconsistent parameter passing
  - adapt fence-agents-dependency from upstream to distribution

    Resolves: rhbz#1769305


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-7
changelog:
  - Port from deprecated add_maven_depmap to mvn_install
  - Remove unused BR felix-framework
  - Fix unowned directory


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-11
changelog:
  - Correct license tag to include CC0 and Public Domain
  - Repack tarball to remove possibly proprietary binaries
  - Use %license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-13
changelog:
  - Stop scaladoc from trying to bundle non-existent resources
  - Temporarly disable docs generation during build


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-8
changelog:
  - Update to ensure a sysctl option is not defined in multiple files (RHBZ#2079241)
  - Update RHEL8 STIG profile to V1R6 (RHBZ#2079241)


author: Watson Sato <wsato@redhat.com> - 0.1.60-9
changelog:
  - Fix validation of OVAL 5.10 content (RHBZ#2079241)
  - Fix Ansible sysctl remediation (RHBZ#2079241)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2221695)
  - Fixed CCE link URL (RHBZ#2178516)
  - align remediations with rule description for rule configuring OpenSSL cryptopolicy (RHBZ#2192893)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2167999)
  - Fixed rules related to AIDE configuration (RHBZ#2175684)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2184487)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2209073)
  - improved and unified OVAL checks checking for interactive users (RHBZ#2157877)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155789)
  - unify OVAL checks to correctly identify interactive users (RHBZ#2178740)
  - make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2170530)
  - Fixed excess quotes in journald configuration files (RHBZ#2169857)
  - rules related to polyinstantiated directories are not applied when building images for Image Builder (RHBZ#2130182)
  - evaluation and remediation of rules related to mount points have been enhanced for Image Builder (RHBZ#2130185)
  - do not enable FIPS mode when creating hardened images for Image Builder (RHBZ#2130181)
  - Correct URL used to download CVE checks (RHBZ#2222583)
  - mention exact required configuration value in description of some PAM related rules (RHBZ#2175882)
  - make mount point related rules not applicable when no such mount points exist (RHBZ#2176008)
  - improve checks determining if FIPS mode is enabled (RHBZ#2129100)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25250)
  - Increase CIS standards coverage regarding SSH and cron (RHEL-1314)
  - Increase compatibility of accounts_tmout rule for ksh (RHEL-16896 and RHEL-1811)
  - Align Ansible and Bash remediation in sssd_certificate_verification rule (RHEL-1313)
  - Add a warning to rule service_rngd_enabled about rule applicability (RHEL-1819)
  - Add rule to terminate idle user sessions after defined time (RHEL-1801)
  - Allow spaces around equal sign in /etc/sudoers (RHEL-1904)
  - Add remediation for rule fapolicy_default_deny (RHEL-1817)
  - Fix invalid syntax in file /usr/share/scap-security-guide/ansible/rhel8-playbook-ospp.yml (RHEL-19127)
  - Refactor ensure_pam_wheel_group_empty (RHEL-1905)
  - Prevent remediation of display_login_attempts rule from creating redundant configuration entries (RHEL-1809)
  - Update PCI-DSS to v4 (RHEL-1808)
  - Fix regex in Ansible remediation of configure_ssh_crypto_policy (RHEL-1820)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-9
changelog:
  - use %{?dist} instead of %{dist} (#1725774)
  - scl-utils-build own the pkgconfig directory by %scl_files (#1431962)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-10
changelog:
  - use %__python3 instead of macro %__python (#1733526)
  - corrected unescaped per-cent character in the changelog (#1734103)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-3.el8
changelog:
  - seabios-rh-add-configs-for-ramfb-and-bochs-display.patch [bz#1724098]
  - Resolves: bz#1724098
    (enable device: bochs-display (seabios))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-4.el8
changelog:
  - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
  - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
  - Resolves: bz#1705212
    (Backport 1.12.1 patches to RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-5.el8
changelog:
  - seabios-add-get_keystroke_full-helper.patch [bz#1693031]
  - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
  - Resolves: bz#1693031
    (On systems with more than 10 available boot devices, keys are uninintuitive)


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: Petr Stodulka <pstodulk@redhat.com> - 4.2.2-14
changelog:
  - remove meaningless redefinition of _bindir - it's standard macro now;
    sed will be store in /usr/bin/sed
    Resovles: #1305835


author: Jakub Martisko <jamartis@redhat.com> - 4.4-4
changelog:
  - When editing file inplace, the SELinux context should
    be based on the link instead of the target file itself.
    --follow-symlinks option remains unchanged
  - Resolves: #1401442


author: Jakub Martisko <jamartis@redhat.com> - 4.5-2
changelog:
  - fix "in-place edits on FUSE filesystems create files with all-zero mode bits"
  - Resolves: #1835761


author: Jakub Martisko <jamartis@redhat.com> - 4.5-5
changelog:
  - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3)
  - Resolves: rhbz#1869253


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-125
changelog:
  - Allow user_u and staff_u get attributes of non-security dirs
  Resolves: rhbz#2216151
  - Allow unconfined user filetrans chrome_sandbox_home_t 1/2
  Resolves: rhbz#2221573
  - Allow unconfined user filetrans chrome_sandbox_home_t 2/2
  Resolves: rhbz#2221573
  - Allow insights-client execmem
  Resolves: rhbz#2225233
  - Allow svnserve execute postdrop with a transition
  Resolves: rhbz#2004843
  - Do not make postfix_postdrop_t type an MTA executable file
  Resolves: rhbz#2004843
  - Allow samba-dcerpc service manage samba tmp files
  Resolves: rhbz#2210771
  - Update samba-dcerpc policy for printing
  Resolves: rhbz#2210771


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-126
changelog:
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t 1/2
  Resolves: rhbz#2229726
  - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
  Resolves: rhbz#2177704
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t 2/2
  Resolves: rhbz#2229726
  - Make insights_client_t an unconfined domain
  Resolves: rhbz#2225527
  - Allow insights-client create all rpm logs with a correct label
  Resolves: rhbz#2229559
  - Allow insights-client manage generic logs
  Resolves: rhbz#2229559


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-128
changelog:
  - Allow ssh_agent_type manage generic cache home files
  Resolves: rhbz#2177704
  - Add chromium_sandbox_t setcap capability
  Resolves: rhbz#2221573


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-129
changelog:
  - Set default file context of /var/lib/authselect/backups to <<none>>
  Resolves: RHEL-3539
  - Add file context specification for /usr/libexec/realmd
  Resolves: RHEL-2147
  - Add numad the ipc_owner capability
  Resolves: RHEL-2415


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-130
changelog:
  - Label msmtp and msmtpd with sendmail_exec_t
  Resolves: RHEL-1678
  - Set default file context of HOME_DIR/tmp/.* to <<none>>
  Resolves: RHEL-1099
  - Improve default file context(None) of /var/lib/authselect/backups
  Resolves: RHEL-3539


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-131
changelog:
  - Additional permissions for ip-vrf
  Resolves: RHEL-9981
  - Allow ip an explicit domain transition to other domains
  Resolves: RHEL-9981
  - Allow  winbind_rpcd_t processes access when samba_export_all_* is on
  Resolves: RHEL-5845
  - Allow system_mail_t manage exim spool files and dirs
  Resolves: RHEL-14186


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-132
changelog:
  - Allow sudodomain read var auth files
  Resolves: RHEL-16567
  - Update cifs interfaces to include fs_search_auto_mountpoints()
  Resolves: RHEL-14072
  - Allow systemd-localed create Xserver config dirs
  Resolves: RHEL-16715
  - Label /var/run/auditd.state as auditd_var_run_t
  Resolves: RHEL-14376
  - Allow auditd read all domains process state
  Resolves: RHEL-14471
  - Allow sudo userdomain to run rpm related commands
  Resolves: RHEL-1679
  - Remove insights_client_watch_lib_dirs() interface
  Resolves: RHEL-16185


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-133
changelog:
  - Label /dev/acpi_thermal_rel char device with acpi_device_t
  Resolves: RHEL-18027
  - Allow sysadm execute traceroute in sysadm_t domain using sudo
  Resolves: RHEL-9947
  - Allow sysadm execute tcpdump in sysadm_t domain using sudo
  Resolves: RHEL-15398
  - Add support for syslogd unconfined scripts
  Resolves: RHEL-10087
  - Label /dev/wmi/dell-smbios as acpi_device_t
  Resolves: RHEL-18027
  - Make named_zone_t and named_var_run_t a part of the mountpoint attribute
  Resolves: RHEL-1954
  - Dontaudit rhsmcertd write memory device
  Resolves: RHEL-17721


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-134
changelog:
  - Allow syslog to run unconfined scripts conditionally
  Resolves: RHEL-10087
  - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
  Resolves: RHEL-10087
  - Allow collectd connect to statsd port
  Resolves: RHEL-19482
  - Allow collectd_t read network state symlinks
  Resolves: RHEL-19482
  - Allow collectd_t domain to create netlink_generic_socket sockets
  Resolves: RHEL-19482
  - Allow opafm search nfs directories
  Resolves: RHEL-19426
  - Allow mdadm list stratisd data directories
  Resolves: RHEL-21374


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-135
changelog:
  - Label /tmp/libdnf.* with user_tmp_t
  Resolves: RHEL-11249
  - Allow su domains write login records
  Resolves: RHEL-2606
  - Allow gpg read rpm cache
  Resolves: RHEL-11249
  - Allow unix dgram sendto between exim processes
  Resolves: RHEL-21903
  - Allow hypervkvp_t write access to NetworkManager_etc_rw_t
  Resolves: RHEL-17687
  - Add interface for write-only access to NetworkManager rw conf
  Resolves: RHEL-17687
  - Allow conntrackd_t to use sys_admin capability
  Resolves: RHEL-22276


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-136
changelog:
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  Resolves: RHEL-1388
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-1388
  - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files
  Resolves: RHEL-22500
  - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t
  Resolves: RHEL-23442
  - Allow admin user read/write on fixed_disk_device_t
  Resolves: RHEL-23434
  - Only allow confined user domains to login locally without unconfined_login
  Resolves: RHEL-1628
  - Add userdom_spec_domtrans_confined_admin_users interface
  Resolves: RHEL-1628
  - Only allow admindomain to execute shell via ssh with ssh_sysadm_login
  Resolves: RHEL-1628
  - Add userdom_spec_domtrans_admin_users interface
  Resolves: RHEL-1628
  - Move ssh dyntrans to unconfined inside unconfined_login tunable policy
  Resolves: RHEL-1628
  - Allow utempter_t use ptmx
  Resolves: RHEL-25002
  - Dontaudit subscription manager setfscreate and read file contexts
  Resolves: RHEL-21639
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-1388
  - Add crontab_domtrans interface
  Resolves: RHEL-1388
  - Add dbus_manage_session_tmp_files interface
  Resolves: RHEL-22500
  - Allow httpd read network sysctls
  Resolves: RHEL-22748
  - Allow keepalived_unconfined_script_t dbus chat with init
  Resolves: RHEL-22843


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-137
changelog:
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-1388
  - Allow su domains write login records
  Resolves: RHEL-2606
  - Revert "Allow su domains write login records"
  Resolves: RHEL-2606
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-1388
  - Allow gpg manage rpm cache
  Resolves: RHEL-11249


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-138
changelog:
  - Allow wdmd list the contents of the sysfs directories
  Resolves: RHEL-27507
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  Resolves: RHEL-27394


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.2-2
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    as we don't allow tcp_wrappers in RHEL8, #1663556)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2044589)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#1945400)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#1917934)


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.0-1
changelog:
  - move /etc/networks from initscripts to setup
  - move /etc/profile.d/lang.{sh,csh} from initscripts to setup


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-17
changelog:
  - subordinateio: also compare the owner ID. Resolves: #2093311
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-18
changelog:
  - Update patch to close label to reset libselinux state. Resolves: #1984740
  - useradd: check if subid range exists for user. Resolves: #2012929
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-1
changelog:
  - New upstream release with many enhancements and bugfixes
  - Metainfo file for AppData/Software Center
  - Drop patch for Fedora bug#803234 which is fixed upstream


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: Čestmír Kalina <ckalina@redhat.com> - 1.6.0-1
changelog:
  - Resolves: #1869292 Statistics Support - smc-tools part
  - Resolves: #1919225 Add SMC-D Setup Check (smc-tools)
  - Resolves: #1919240 Upgrade smc-tools to latest version


author: Čestmír Kalina <ckalina@redhat.com> - 1.6.0-3
changelog:
  - Patch stats.c to fix overruns
  - Patch stats.c to fix leaks
  - Patch stats.c to fix fallback counter values
  - Resolves: #1993469


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.1-1
changelog:
  - Upgrade smc-tools to latest version
  - Add User-defined EID (Enterprise ID) Support
  - Resolves: #1919228
  - Resolves: #2043841


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11417 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.1.8-1
changelog:
  - Rebase to latest github version Snappy-1.1.8
  - Also change the URL to reflect to the updated github location.


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-2
changelog:
  - [utilities] Relax from hard dependency of python3-magic
    Resolves: bz2129038
  - [dnf] Collect legacy yum config symlinks, properly obfuscate pwds
    Resolves: bz2100154


author: Pavel Moravec <pmoravec@redhat.com> = 4.5.1-3
changelog:
  - Rebase on upstream 4.5.1
    Resolves: bz2175806
  - [composer] Capure /etc/osbuild-composer file
    Resolves: bz2169776
  - [ostree] Collect "ostree fsck" under plugin specific opt
    Resolves: bz2161533
  - [iprconfig] guard whole plugin by sg kmod predicate
    Resolves: bz2176086
  - [cleaner] dont clean sys_tmp from final_path
    Resolves: bz2176218


author: Jan Jansky <jjansky@redhat.com> = 4.5.3-1
changelog:
  - [report] Ignore case when scrubbing via do_file_sub
    Resolves: bz2143272
  - [subscription_manager] Scrub proxy passwords from repo_server_val
    Resolves: bz2177282
  - [virsh] Scrub passwords in virt-manager logs
    Resolves: bz2184062


author: Pavel Moravec <pmoravec@redhat.com> = 4.5.4-1
changelog:
  - [plugins] collect strings before commands
    Resolves: bz2203141
  - [collector] collect report from primary node if in node_list
    Resolves: bz2186460
  - [powerpc] collect invscout logs
    Resolves: bz2210543
  - [rhc] New plugin for RHC
    Resolves: bz2196649


author: Jan Jansky <jjansky@redhat.com> = 4.5.5-1
changelog:
  - [clean] Respect permissions of sanitised files
    Resolves: bz2218279
  - [plugin] Fix exception when calling os.makedirs
    Resolves: bz2216608
  - [cleaner] Enhance trailing characters list after AMC address
    Resolves: bz2207562


author: Jan Jansky <jjansky@redhat.com> = 4.5.5-2
changelog:
  - Adding patch for mac obfuscation
    Resolves: bz2218279
    Resolves: bz2216608
    Resolves: bz2207562


author: Pavel Moravec <pmoravec@redhat.com> = 4.6.1-1
changelog:
  - rebase to upstream 4.6.1
    Resolves: RHEL-21173
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21177


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-1
changelog:
  - Drop paramiko dependency, use OpenSSH ControlPersist instead
  - Layered cluster profiles can now accept base profile options
  - Debian/Ubuntu hosts now supported


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-1
changelog:
  - New upstream release
  - Overhaul mechanism of execution of sosreport in containers
  - Added RHCOS support
  - Added a 'none' cluster type


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to RHEL 8 version
  - Fix execution from within a container


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Gennadii Altukhov <galt@redhat.com> 2.5.1-1
changelog:
  - Adapt spacewalk-client-cert for Python 2/3 compatibility
  - Bumping package versions for 2.5.
  - Bumping package versions for 2.4.


author: Jan Dobes 2.7.1-1
changelog:
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub
  - Bumping package versions for 2.7.
  - Bumping package versions for 2.6.


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-4
changelog:
  - Related: #1577219 - explicitly require pygpgme (tkasparek@redhat.com)
  - Resolves: #1577219 - fix build macro for python3 (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-5
changelog:
  - Related: #1633532 - require python-gpg instead of python-gpgme where possible
    (tkasparek@redhat.com)
  - Resolves: #1633532 - use python-gpg instead of python-gpgme where possible
    (tkasparek@redhat.com)


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Victor Toso <victortoso@redhat.com> - 0.38-2
changelog:
  - Brings some post releases fixes and disables celt051 that is
    deprecated in spice-protocol 0.14.2
  - Possibly related to rhbz#1688737 rhbz#1746239
    Related: rhbz#1817471
  - Fix mouse pointer on relative mouse mode
    Resolves: rhbz#1674311
  - Handle detailed errors from guest agent
    Related:  rhbz#1520393


author: Uri Lublin <uril@redhat.com> - 0.38-4
changelog:
  - Fix some static analyzer issues
    Resolves: rhbz#1839104
  - Fix spice-usbredir-redirect-on-connect
    Resolves: rhbz#1874740


author: Julien Ropé <jrope@redhat.com> - 0.20.0-3
changelog:
  - Fix mouse problems in multi-monitor environments under Wayland
    Resolves: rhbz#1790904 rhbz#1824610


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Abhi Das <adas@redhat.com> - 4.3-21
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    Resolves: rhbz#2007303 rhbz#2000637


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.3-5
changelog:
  - Autodetect the minimum key strength from the system security level.
  - Autodetect the hash algorithm to use from the system security level.
  - Disallow setting a key strength below the system minimum.
  - Resolves: rhbz#1653323


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120800


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790053):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Update tests-m32/ioctl_evdev.c and tests-mx32/ioctl_evdev.c
    in 0002-evdev-fix-decoding-of-EVIOCGBIT-0.patch.
  - Update tests-m32/Makefile.in and tests-mx32/Makefile.in
    in 0032-tests-check-decoding-of-successful-evdev-ioctl.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-8
changelog:
  - Fix expected alignment for IPC tests (#1795251):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".
  - Update tests-m32/looping_threads.test and tests-mx32/looping_threads.test
    in 0025-tests-check-tracing-of-looping-threads.patch.
  - Update the bpf syscall decoder:
    d6c71dd0 "Fix preprocessor indentation",
    cabd6955 "bpf: print struct bpf_prog_info.gpl_compatible",
    14a9b6ca "bpf: add support for btf_* fields in BPF_MAP_CREATE",
    27bd13d3 "bpf: add support for btf_* fields in struct bpf_map_info",
    d1f90bcd "bpf: add support for *jited_ksyms and *jited_func_lens fields
             in struct bpf_prog_info", and
    940fe50f "bpf: add support for new twelve fields in struct bpf_prog_info".
    c661605b "tests: robustify bpf-obj_get_info_by_fd test against future kernels"


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-9
changelog:
  - Fix the "extra tokens at end of #ifdef directive" warning:
    579f2702 "bpf: exclude bit fields from the check".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-1
changelog:
  - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917).
  - Address some issues reported by covscan.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747214).
  - Include commit v4.26~65 "s390x: beautify sthyi data tail prints" (#1747514).
  - Include upstream patches that fix issues reported by covscan (#1747526):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-2
changelog:
  - Update to 2.0.0
  - Allow the user to interact with the daemon under conditions
    where a pool, filesystem, or blockdev is not fully functional.
  - Resolves: rhbz#1730493
  - Establish an environment variable for D-Bus timeout parameter.
  - Resolves: rhbz#1678631
  - Return detailed error messages on all error-appearing user actions.
  - Resolves: rhbz#1642393
  - Resolves: rhbz#1687869
  - Exit with error code 0 and error message on stderr for all command-line
    parsing errors.
  - Resolves: rhbz#1747564
  - Show more complete error messages on D-Bus method call failures.
  - Resolves: rhbz#1717460
  - Add version numbers to required packages
  - Resolves: rhbz#1717489


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.1-6
changelog:
  - Update to 2.1.1
  - Resolves: rhbz#1791472
  - Update RPM spec file
  - Resolves: rhbz#1827360
  - Error messages when creating a pool are more helpful
  - Resolves: rhbz#1734496
  - Support per-pool encryption of devices that form a pools data tier
  - Resolves: rhbz#1768580
  - Improve error handling on partial unlock failure of encrypted pools
  - Resolves: rhbz#1855520


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144068


author: Sahana Prasad <sahana@redhat.com> - 5.56-5
changelog:
  - Fix CVE-2021-20230 stunnel: client certificate not
    correctly verified when redirect and verifyChain options are used.


author: Sahana Prasad <sahana@redhat.com> - 5.56-5
changelog:
  - Fixes CVE-2021-20230 stunnel: client certificate not
    correctly verified when redirect and verifyChain options are used.


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2340
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Christopher Snyder <csnyder@redhat.com> 1.28.18-1
changelog:
  - Removed .orig files, which leaked into main branch (jhnidek@redhat.com)
  - Move cloud detector/collector to cloud-what package (jhnidek@redhat.com)
  - Make Azure cloud collector more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Fixed reporting of AWS cloud facts (null value) (#2693) (jhnidek@redhat.com)
  - New extraction for translatable strings (#2688) (ptoscano@redhat.com)
  - Refactoring of cloud collector/detector and facts (#2657)
    (jhnidek@redhat.com)
  - 1973731: fix wording on error when listing syspurpose values
    (ptoscano@redhat.com)
  - 1971693: syspurpose: remove deprecation notices (#2683) (ptoscano@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1971693: syspurpose: adjust deprecation messages (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - Fixed white space before '(' (jhnidek@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - cockpit: Invoke setup.py with python3 (martin@piware.de)
  - 1897767: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Korean) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)


author: Christopher Snyder <csnyder@redhat.com> 1.28.19-1
changelog:
  - Translated using Weblate (German) (ljanda@redhat.com)
  - Translated using Weblate (German) (patrick.vollandt@mein-gym.de)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (#2704) (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.20-1
changelog:
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.21-1
changelog:
  - Updated translations from weblate
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.22-1
changelog:
  - 1924338: [1.28] list prints no status and dates in SCA mode
    (jhnidek@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 2000867: syspurpose: show deprecation notices (ptoscano@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - [1.28] 1859157: Display better error message on incorrect --org
    (mhorky@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - 2000883: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fixup syspurpose module help text / bash completion (csnyder@redhat.com)
  - Added new syspurpose command; ENT-3060 (jhnidek@redhat.com)
  - [1.28] ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - [1.28] ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - [1.28] 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - [1.28] 1859569: Abort on invalid username/token argument in syspurpose
    (mhorky@redhat.com)
  - [1.28] ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.23-1
changelog:
  - 2021982: Fix syspurpose bash completion (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - syspurpose: remove redundant _() (ptoscano@redhat.com)
  - syspurpose: translate more UI strings (ptoscano@redhat.com)
  - syspurpose: include argparse string in message catalog (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - 1859529: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - 2014646: fix rhn-migrate-classic-to-rhsm & its tests for argparse
    (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.24-1
changelog:
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)
  - 2020284: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.25-1
changelog:
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2037902: consider user-specified --org in any case (ptoscano@redhat.com)
  - 2037901: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - 2037901: Only hint organizations if it's needed (mhorky@redhat.com)
  - 2037901: Show available organizations before asking for input
    (mhorky@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - 2017795: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2017795: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Extended D-Bus API - syspurpose methods; ENT-2373 (jhnidek@redhat.com)
  - 2029384: Fix bash autocompletion (mhorky@redhat.com)
  - Try to use --forked for all unit tests. (jhnidek@redhat.com)
  - Updates to cherry pick for pytest (wpoteat@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2024589: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2000326: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 2024930: build: fix build on 'build' target (ptoscano@redhat.com)
  - Add 8.6 releaser (csnyder@redhat.com)
  - 2023392: libdnf: respect environment CFLAGS (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.26-1
changelog:
  - 2049441: [1.28] Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - 2046302: Apply Conscious language initiative changes (mhorky@redhat.com)
  - ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - WIP: try to not use junit('coverage.xml') (jhnidek@redhat.com)
  - 2024573: [1.28] Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.27-1
changelog:
  - Update translation files (noreply@weblate.org)
  - 1887600: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
  - 2046516: register: do not check environments w/ activation keys
    (ptoscano@redhat.com)
  - No-op refactor of RegisterCommand._process_environments()
    (ptoscano@redhat.com)
  - environments: fix list for account in env-less org (ptoscano@redhat.com)
  - 1994056: Multiple environment capability (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.28-1
changelog:
  - Revert "1887600: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)
  - environments: fix usage of injection (ptoscano@redhat.com)


author: Petr Viktorin <pviktori@redhat.com> - 1.15.0-8
changelog:
  - Run sanity-check.py with Python 3
    https://bugzilla.redhat.com/show_bug.cgi?id=1595816
    https://bugzilla.redhat.com/show_bug.cgi?id=1610038


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-6
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed The LDAP backend which is not properly parsing sudoOptions,
    resulting in selinux roles not being applied
  Resolves: rhbz#1738326


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-8
changelog:
  RHEL 8.6.0 ERRATUM
  - sudoedit does not work with selinux args
  Resolves: rhbz#2029551
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#1999751
  - [RFE] pass KRB5CCNAME to pam_authenticate environment if available
  Resolves: rhbz#1917379
  - utmp resource leak in sudo
  Resolves: rhbz#1986572


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29.9
changelog:
  RHEL 8.8.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161221
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2114576


author: Radovan Sroka <rsroka@redhat.com> - 1.8.25-5
changelog:
  - RHEL 8.1 ERRATUM
  - Fixed problem with sudo-1.8.23 and 'who am i'
  Resolves: rhbz#1673886
  - Backporting sudo bug with expired passwords
  Resolves: rhbz#1676819


author: RAdovan Sroka <rsroka@redhat.com> - 1.8.29-7.1
changelog:
  RHEL 8.4.0 ZSTREAM ERRATUM
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#2015136


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29.9
changelog:
  RHEL 8.8.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2114576


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-1
changelog:
  RHEL 8.9.0.Z ERRATUM
  - Rebase to 1.9.5p2
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21825
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21831
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21820


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: psimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Jan Tulak <jtulak@redhat.com> - 1.2-1
changelog:
  - Upstream release 1.2 which fixes:
  - use pwquality to test password strength for cryptsetup (#1141871)
  - add multipath detection support (#1309729)
  - add migrate command (#1014708)


author: Jan Tulak <jtulak@redhat.com> - 1.2-3:
changelog:
  - Gating tests implementation, which meant adding few more changes
    to the existing patches (#1681969)
  - sphinx patch was merged to python3 change
  - add seq numbers to patch files


author: Jan Tulak <jtulak@redhat.com> - 1.4-1:
changelog:
  - Bring changes from upstream 1.4 (mostly bugfixes)
  - Remove multipath from the list of default backends (rhbz#1685019)
  - Fix locale issue (rhbz#1679587)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-70
changelog:
  - basic: recognize pdfs filesystem as a network filesystem (#2094661)
  - core: move reset_arguments() to the end of main's finish (#2127131)
  - manager: move inc. of n_reloading into a function (#2136869)
  - core: Add new DBUS properties UnitsReloadStartTimestamp and UnitsLoadTimestampMontonic (#2136869)
  - core: Indicate the time when the manager started loading units the last time (#2136869)
  - core: do not touch /run/systemd/systemd-units-load from user session instances (#2136869)
  - sysctl: downgrade message when we have no permission (#2158160)
  - core: respect SELinuxContext= for socket creation (#2136738)
  - manager: use target process context to set socket context (#2136738)
  - virt: detect Amazon EC2 Nitro instance (#2117948)
  - machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 (#2117948)
  - virt: use string table to detect VM or container (#2117948)
  - fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (#2117948)
  - Use BIOS characteristics to distinguish EC2 bare-metal from VMs (#2117948)
  - device: drop refuse_after (#2043524)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-71
changelog:
  - manager: limit access to private dbus socket (#2119405)
  - journalctl: do not treat EINTR as an error when waiting for events (#2161683)
  - core: bring manager_startup() and manager_reload() more inline (#2059633)
  - pam: add a call to pam_namespace (#1861836)
  - virt: Support detection for ARM64 Hyper-V guests (#2158307)
  - virt: Fix the detection for Hyper-V VMs (#2158307)
  - basic: add STRERROR() wrapper for strerror_r() (#2155520)
  - coredump: put context array into a struct (#2155520)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155520)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-72
changelog:
  - test: import logind test from debian/ubuntu test suite (#1866955)
  - test: introduce inst_recursive() helper function (#1866955)
  - tests: verify that Lock D-Bus signal is sent when IdleAction=lock (#1866955)
  - systemctl: simplify halt_main() (#2053273)
  - systemctl: shutdown don't fallback on auth fail (#2053273)
  - systemctl: reintroduce the original halt_main() (#2053273)
  - systemctl: preserve old behavior unless requested (#2053273)
  - pam_systemd: suppress LOG_DEBUG log messages if debugging is off (#2170084)
  - udev/net_id: introduce naming scheme for RHEL-8.8 (#2170499)
  - pam: add a call to pam_namespace (#1861836)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-73
changelog:
  - journald: add API to move logging from /var to /run again (#1873540)
  - journalctl: add new --relinquish and --smart-relinquish options (#1873540)
  - units: automatically revert to /run logging on shutdown if necessary (#1873540)
  - pstore: Tool to archive contents of pstore (#2158832)
  - meson: drop redundant line (#2158832)
  - pstore: drop unnecessary initializations (#2158832)
  - pstopre: fix return value of list_files() (#2158832)
  - pstore: remove temporary file on failure (#2158832)
  - pstore: do not add FILE= journal entry if content_size == 0 (#2158832)
  - pstore: run only when /sys/fs/pstore is not empty (#2158832)
  - pstore: fix use after free (#2158832)
  - pstore: refuse to run if arguments are specified (#2158832)
  - pstore: allow specifying src and dst dirs are arguments (#2158832)
  - pstore: rework memory handling for dmesg (#2158832)
  - pstore: fixes for dmesg.txt reconstruction (#2158832)
  - pstore: Don't start systemd-pstore.service in containers (#2158832)
  - units: pull in systemd-pstore.service from sysinit.target (#2158832)
  - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832)
  - units: make sure systemd-pstore stops at shutdown (#2158832)
  - pstore: Run after modules are loaded (#2158832)
  - pstore: do not try to load all known pstore modules (#2158832)
  - logind-session: make stopping of idle session visible to admins (#2156780)
  - journald: Increase stdout buffer size sooner, when almost full (#2029426)
  - journald: rework end of line marker handling to use a field table (#2029426)
  - journald: use the fact that client_context_release() returns NULL (#2029426)
  - journald: rework pid change handling (#2029426)
  - test: Add a test case for #15654 (#2029426)
  - test: Stricter test case for #15654 (Add more checks) (#2029426)
  - man: document the new _LINE_BREAK= type (#2029426)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-74
changelog:
  - journald-server: always create state file in signal handler (#2174645)
  - journald-server: move relinquish code into function (#2174645)
  - journald-server: always touch state file in signal handler (#2174645)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-75
changelog:
  - journald-server: always create state file in signal handler (#2176892)
  - journald-server: move relinquish code into function (#2176892)
  - journald-server: always touch state file in signal handler (#2176892)
  - test: make TEST-35-LOGIN stable again (#2179309)
  - pager: set $LESSSECURE whenver we invoke a pager (#2175624)
  - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624)
  - pager: make pager secure when under euid is changed or explicitly requested (#2175624)
  - ci: trigger differential-shellcheck workflow on push (#2179309)
  - ci: codeql `master` -> `main` (#2179309)
  - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-76
changelog:
  - ci(Mergify): drop requirements on linting workflows (#2179309)
  - ci: workflow for gathering metadata for source-git automation (#2179309)
  - ci: first part of the source-git automation - commit linter (#2179309)
  - pstore: fix crash and forward dummy arguments instead of NULL (#2190151)
  - test: Disable LUKS devices from initramfs in QEMU tests (#2190151)
  - pstore: explicitly set the base when converting record ID (#2190151)
  - pstore: avoid opening the dmesg.txt file if not requested (#2190151)
  - test: add a couple of tests for systemd-pstore (#2190151)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-77
changelog:
  - ci: update permissions for source-git automation workflows (#2179309)
  - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932)
  - parse-util: in parse_permille() check negative earlier (#2178179)
  - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179)
  - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846)
  - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846)
  - libsystemd: ignore both EINTR and EAGAIN (#2172846)
  - sd-bus: handle -EINTR return from bus_poll() (#2172846)
  - stdio-bridge: don't be bothered with EINTR (#2172846)
  - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846)
  - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846)
  - utmp-wtmp: fix error in case isatty() fails (#2172846)
  - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846)
  - journal-vacuum: count size of all journal files (#2180380)
  - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751)
  - resolved: close UDP socket when we received a network error on it (#2156751)
  - ci: allow RHEL-only labels to mark downstream-only commits (#2179309)
  - man: tweak markup in systemd-pstore.service(8) (#2217786)
  - man: add .service suffix to systemd-pstore(8) (#2217786)
  - presets: enable systemd-pstore.service by default (#2217786)
  - logind: simplify code (#2209328)
  - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786)
  - loginctl: shorten variable name (#2156786)
  - loginctl: use bus_map_all_properties (#2156786)
  - loginctl: show session idle status in list-sessions (#2156786)
  - loginctl: list-sessions: fix timestamp for idle hint (#2156786)
  - loginctl: also show idle hint in session-status (#2156786)
  - core/timer: Always use inactive_exit_timestamp if it is set (#1719364)
  - timer: Use dual_timestamp_is_set() in one more place (#1719364)
  - ci: drop systemd-stable from advanced-commit-linter config (#2179309)
  - core/mount: escape invalid UTF8 char in dbus reply (#2158724)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-78
changelog:
  - login: add a missing error check for session_set_leader() (#2158167)
  - logind: reset session leader if we know for a fact that it is gone (#2158167)
  - test-login: skip consistency checks when logind is not active (#2223582)
  - sd-event: remove dead code and use _cleanup_ (#2211358)
  - sd-event: don't destroy inotify data structures from inotify event handler (#2211358)
  - sd-event: add sd_event_add_inotify_fd() call (#2211358)
  - test: add test case for self-destroy inotify handler (#2211358)
  - doc: add downstream CONTRIBUTING document (#2179309)
  - doc: use link with prefilled Jira issue (#2179309)
  - docs: link downstream CONTRIBUTING in README (#2179309)
  - unit drop-in: Fix ordering of special type.d drop-ins (#2156620)
  - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620)
  - test: set indentation to 4 spaces (#2156620)
  - test/TEST-15: remove all created unit files (#2156620)
  - test: use quotes where necessary (#2156620)
  - tree-wide: drop manually-crafted message for missing variables (#2156620)
  - manager: reformat boolean expression in unit_is_pristine() (#2156620)
  - manager: allow transient units to have drop-ins (#2156620)
  - TEST-15: allow helper functions to accept other unit types (#2156620)
  - TEST-15: also test hierarchical drop-ins for slices (#2156620)
  - TEST-15: add test for transient units with drop-ins (#2156620)
  - TEST-15: add one more test for drop-in precedence (#2156620)
  - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846)
  - meson: remove libdw dependency from pstore (#2211416)
  - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416)
  - tmpfiles: don't complain if we can't enable pstore in containers (#2211416)
  - pstore: don't enable crash_kexec_post_notifiers by default (#2211416)
  - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925)
  - man: link Delegate= documentation up with the markdown docs (#2215925)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-79
changelog:
  - ci: Extend source-git-automation (RHEL-1087)
  - ci: add missing configuration for commit linter (RHEL-1087)
  - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087)
  - ci: enable source-git automation to validate reviews and ci results (RHEL-1087)
  - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087)
  - ci: enable auto-merge GH Action (RHEL-1087)
  - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087)
  - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087)
  - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087)
  - resolved: actually check authenticated flag of SOA transaction (RHEL-6213)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-80
changelog:
  - fd-util: rework how we determine highest possible fd (RHEL-18302)
  - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302)
  - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302)
  - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302)
  - ci: use source-git-automation composite Action (RHEL-1087)
  - ci: increase the cron interval to 45 minutes (RHEL-1087)
  - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087)
  - tree-wide: always declare bitflag enums the same way (RHEL-2857)
  - login: Add KEY_RESTART handling (RHEL-2857)
  - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991)
  - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991)
  - analyze-security: include an actual syscall name in the message (RHEL-5991)
  - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426)
  - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-82
changelog:
  - ci: add configuration for regression sniffer GA (RHEL-1087)
  - coredump: actually store parsed unit in the context (RHEL-18302)
  - resolved: limit the number of signature validations in a transaction (RHEL-26644)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-82.1
changelog:
  - pid1: by default make user units inherit their umask from the user manager (RHEL-28048)
  - pam: add call to pam_umask (RHEL-28048)
  - ci: deploy systemd man to GitHub Pages (RHEL-32494)
  - ci(src-git): update list of supported products (RHEL-32494)


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Ondrej Dubaj <odubaj@redhat.com> - 1.30-6
changelog:
  - added "padding with zeros" info message (#1913566)
  - do not report disk error as file shrank (#1913569)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-5
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-004-do-not-use-old-pointer-tricks.patch
      tcsh-6.20.00-005-reset-fixes-numbering.patch
      tcsh-6.20.00-006-cleanup-in-readme-files.patch
      tcsh-6.20.00-007-look-for-tgetent-in-libtinfo.patch
      tcsh-6.20.00-008-guard-ascii-only-reversion.patch
      tcsh-6.20.00-009-fix-regexp-for-backlash-quoting-tests.patch (bug #1424082)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Mat Booth <mat.booth@redhat.com> - 6.11-1
changelog:
  - Update to latest upstream release
  - Continue building with maven for now, instead of moving to gradle due to
    rhbz#1467724


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.5.0-9
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove group tag
  - Replace %define with %global


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Petr Pisar <ppisar@redhat.com> - 1.8-1
changelog:
  - 1.8 bump
  - License changed from GPLv2+ to (GPLv3+ and GFDL)
  - Disable printing command failure in POSIX mode


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-6
changelog:
  - Resolves: #2173874 Tomcat installs older java even though newer java is installed
  - Sync with rhel-8.8.0 branch


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-7
changelog:
  - Related: #2173874 Tomcat installs older java even though newer java is installed
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-10
changelog:
  - Resolves: #2210630 CVE-2023-28709 tomcat
  - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
  - Resolves: RHEL-13904
  - Resolves: RHEL-12951
  - Resolves: RHEL-12544
  - Resolves: RHEL-2386


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.9-1
changelog:
  - Upstream release 1.3.9.
  - Add fixes for build errors with OpenSSL 1.1.
  - Add fixes for NULL cipher context use in seal/unseal.
  - spec file modernization.


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Jerry Snitselaar <jsnitsel@redhat.com> - 3.1.1-4
changelog:
  - lib/tpm2_options: restore TCTI configuration environment variables
  - tpm2_getcap: restore tool output to print properties with TPM_PT prefix
  resolves: rhbz#1648001


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-2
changelog:
  - Fix ESYS_TR hierarchy transition.
  - Refactor fix_esys_hierarchies to return actual TSS2_RC return code.
  - tpm2_alg_util.c: fix a bug where the string rsa3072 wasn't being parsed.
  - tpm2_create.c: Fix an issue where userwithauth attr cleared if policy specified.
  - tpm2_hierarchycontrol: Fix bug where hierarchycontrol operation failed silently.
  - tpm2_nvdefine.c: Fix error reporting message.
  - tpm2_policyor: Fix silent failure for invalid/unspecified policy digest alg.
  resolves: rhbz#1854774


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-3
changelog:
  - Fix resource leak.
  - Fix to restrict policy digest size.
  - Fix incompatible pointer cast.
  - Fix error message in files_load_##name
  - Fix issue where execution couldn't reach function return.
  resolves: rhbz#1920821


author: Javier Martinez Canillas <javierm@redhat.com> - 1.4.0-1
changelog:
  - Update URLs to point to the new project location
  - Add README.md CHANGELOG.md to %files directive
  - Update to 1.4.0 release (RHBZ#1508870)


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 release (RHBZ#1508870)
  - Remove patch file 60-tpm-udev.rules, use upstream tpm-udev.rules instead
  - Disable ESAPI to fix build errors caused by dependency to libgcrypt 1.6.0
  - Add scriptlet to fix Rpath errors
  - Update file installation paths and names accordingly


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-2
changelog:
  - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora
  - Bump release version to 2.0.0-2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-3
changelog:
  - Add tss user if doesn't exist.
  - Update exported symbols map for libtss2-mu
  - esys: Check object handle node before calling compute_session_value
  - esys: fix resource name calculation
  - esys: fix Esys_StartAuthSession called with optional params
  - esys: fix keysize of ECC curve TPM2_ECC_NISTP224
  - esys: fixup compute_encrypted_salt error handling
  - esys: use memcmp in byte array comparison
  - esys: zero out ctx->salt after startAuthSession_finish
  - mu: Remove use of VLAs for Marshalling TPML types
  - return proper error code on memory allocation failure
  - sys: match counter variable type for cmdAuthsArray->count
  - tcti-device: getPollHandles should allow num_handles query
  - tctildr: fix segmentation fault if name_conf is too big
  resolves: rhbz#1879071 rhbz#1855180


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-4
changelog:
  - Fix hmac calculation for tpm2_clear command.
  - Remove private implementation of strndup.
  resolves: rhbz#1920825 rhbz#1940861


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.15-1
changelog:
  - Rebase to 0.3.15
  - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332
  resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1234-5
changelog:
  - Move header files to ibmtss directory.
  - Check return value of TSS_Hash_Generate.
  resolves: rhbz#1636245


author: John Kacur <jkacur@redhat.com> - 0.16-4
changelog:
  - Make it clear in online help and man pages that --include and --isolate
    affect IRQs as well as threads
  Resolves: rhbz#1886804


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.17-2
changelog:
  - Fix typo for variable parm
  - Handle get_policy_and_rtprio exceptions
  - Remove finally block in get_policy_and_rtprio
  Resolves: rhbz#2049746


author: John Kacur <jkacur@redhat.com> - 0.18-8
changelog:
  - Remove deprecated distutils from setup
  - Adjust SPDX patch to accomdate the removed distutils
  Resolves: RHEL-19037


author: John Kacur <jkacur@redhat.com> - 0.18-9
changelog:
  - Don't start the gui if a display is not available
  - Revert removing distutils for rhel8
  - Update the License tag in the specfile to the spdx version
  Resolves: RHEL-19179


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003833
    - tuned-gui: fixed creation of new profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.19.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2057602
    - fixed parsing of inline comments
      resolves: rhbz#2060138
    - added support for quotes in isolated_cores specification
      resolves: rhbz#1891036
    - recommend: preset balanced profile for notebook, laptop or portable if
      syspurpose is not defined
      resolves: rhbz#1896717


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133814
    - systemd: relax polkit requirement
      resolves: rhbz#2065591
    - sysvinit: fixed path
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - do not exit on duplicate config lines
      resolves: rhbz#2071418
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
      resolves: rhbz#1998310
    - plugin_scheduler: do not leak FDs from the perf
      resolves: rhbz#2080227
    - plugin_cpu: added support for intel_pstate scaling driver
    - added support for the API access through the Unix Domain Socket


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182119
    - sap-hana: new profile sap-hana-kvm-guest
      resolves: rhbz#2173740
    - serialized SIGHUP handler to prevent possible bootcmdline corruption
      resolves: rhbz#2215298


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17119
    - print all arguments of failing commands in error messages
    - plugin_sysctl: added support for sysctl names with slash
    - tuned-adm: added support for moving devices between plugin instances
    - api: added methods for retrieval of plugin instances and devices
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
    - hotplug: do not report ENOENT errors on device remove
    - plugin_sysctl: expand variables when reporting overrides
    - plugin_acpi: new plugin which handles ACPI platform_profile
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
    - scheduler: add option for ignoring IRQs affinity
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17119
    - lower CPU usage by using runtime=0 in profiles using scheduler plugin
      resolves: RHEL-6869


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17119
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
  - Includes changes in tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Jiri Kucera <jkucera@redhat.com> - 2.3-2
changelog:
  - wrudf: Fix parsing Volume Descriptor Sequence
  - wrudf: Exit on allocation failure
    Related: #1882531


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Jakub Martisko <jamartis@redhat.com> - 6.0-40
changelog:
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').
  - Related: #1602721


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
  - rebase to 20170801 version
  - removed urw-* string from subpackages
  - fontconfig priority value updated to 35
  - error messages from 'xset fp rehash' suppressed (bug #1466254)
  - AppStream files added into (sub)packages
  - fontconfig files added into (sub)packages
  - fixed fonts path during %install
  - source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-10
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leaks on connection failure to D-bus
  Resolves: rhbz#2059067


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-13
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2159411
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2159409
  - Add missing files to documentation
  Resolves: rhbz#2159412
  - Disable logging to console, logging to syslog is still enabled
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2159413
  - Remove build for i686 arch
  Resolves: rhbz#2105091


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-6
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Bastien Nocera <bnocera@redhat.com> - 1.1.0-13
changelog:
  + usbmuxd-1.1.0-13
  - Fix usbmuxd not starting up a second time, and properties being lost
    with kernel >= 4.12


author: Victor Toso <victortoso@redhat.com> - 0.12.0-3
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server.
    Related: rhbz#2157521
  - Fixes USB redirection of identical devices.
    Resolves: rhbz#2157521


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Jiri Kucera <jkucera@redhat.com> - 1.112-2
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1611752
  - Fixed bad FSF address


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.1-3
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz #1853168)
  - Added CI gating tests (bz #1682555)
  - Resolves: bz #1682555, #1853168


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.1-5
changelog:
  - Introduce doc-subpackage
  - Use unified %_pkgdocdir
  - Updated Patch0 and use on el <= 6, only
  - Rename Patch0 --> Patch 1000
  - Clean-up indentation


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-5
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Mark Wielaard <mjw@redhat.com> - 3.22.0-1
changelog:
  - Upstream 3.22.0 final
  - BuildRequires elfutils-debuginfod for testing
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package
  - Use %patch -Pn instead of deprecated %patchn


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-3
changelog:
  - Disabled running make check again. Too many timing issues. All tests run
    successfully on all arches from time to time, but seldom in a single
    run while all redhat builders are loaded.


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-4
changelog:
  - Disabled pcre-jit on x86_64 and arm in rawhide for now. It does not
    work, and makes other varnish dependant packages crash
    (upstream bug #2521)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1
changelog:
  - New upstream release
  - Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6
  - Added a patch fixing compilation on epel6
  - Fresh checkout of pkg-varnish-cache
  - Updated find-requires sed fix to update variant and moved it to prep
  - Removed -libs subpackage
  - varnish_reload_vcl changed name to varnishreload, as in upstream
  - varnish.params is gone. To override startup configuration,
    use /etc/systemd/system/varnish.service
  - Dropped patch and sed fixes for find-provides, as it is fixed upstream
  - Dropped patch for test vsv00002, as it is fixed upstream
  - Droppet patch for python3, as it is included upstream
  - Dropped buildreq on groff, as tarball includes prebuilt manpages
  - Dropped systemv to systemd helpers
  - Updated project url
  - Use prebuilt html files for docs subpackage
  - Dropped unnecessary explicit require of initscripts, closes #1592398


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2
changelog:
  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1
changelog:
  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-14
changelog:
  - Added --pending option to the vdo status command to indicate
    configuration options which have been modified but will not take
    effect until the next device start.
  - Resolves: rhbz#1838314


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.11-14
changelog:
  - Introduced new memory size parameter values for UDS indexes which have
    been converted from vdo script management to LVM.
  - Related: rhbz1928284
  - Modified vdo script to fail if the same option is supplied multiple
    times.
  - Resolves: rhbz#1944087
  - Fixed permissions on the vdo script's lock directory.
  - Resolves: rhbz#1952105


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.21-14
changelog:
  - Added a tool for converting a VDO volume from the vdo management script
    to LVM. The tool can be invoked from the new vdo convert command.
  - Related: rhbz#1928284
  - Fixed a (relatively harmless) buffer overflow in vdo userspace tools.
  - Resolves: rhbz#1927938


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-14
changelog:
  - Integrated the vdo to lvm conversion tool into the vdo management script
    and modified the tool itself to correctly convert the UDS index so that
    dedupe information is not lost by conversion.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-14
changelog:
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Added a parameter to the lvm conversion tool to specify the amount of
    space to free up.
  - Resolves: rhbz#1966827
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.74-14
changelog:
  - Renamed vdo2LVM to vdopreparelvm and moved its installation location to
    /usr/libexec so that it is not in common default paths as this utility is
    intended to be called from LVM, not directly by users.
  - Related: rhbz#1986930


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-14
changelog:
  - Added a check to vdopreparelvm to determine whether it has already been
    converted.
  - Resolves: rhbz#2017843


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.7-14
changelog:
  - Fixed bugs in the vdopreparelvm check to determine whether a device has
    already been converted.
  - Resolves: rhbz#2017843
  - Fixed an issue in the vdo-by-dev tool which could result in a failure to
    start vdo devices when some devices in the vdo config file do not exist.
  - Resolves: rhbz#2022154


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.14-14
changelog:
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#1999640


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-14
changelog:
  - Fixed excessive vdo2lvm "Retrying" messages.
  - Resolves: rhbz#1986595
  - Fixed a pylint 2+ complaint in the vdo scripts.
  - Resolves: rhbz#2072131
  - Updated vdo script documentation and help text for the uuid option.
  - Resolves: rhbz#2089957


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.3
changelog:
  - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
  - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.4
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16.5
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.8
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.9
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - Improve fix
  - Resolves: rhbz#2049403


author: Tomas Korbar <tkorbar@redhat.com> - 2:8.0.1763-16.11
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - Fix specfile problems
  - Resolves: rhbz#2048525


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-16
changelog:
  - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
  - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - fix test suite after fix for CVE-2022-0318
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-19.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Pavel Hrdina <phrdina@redhat.com> - 2.0.0-2
changelog:
  - virt-install: Fix description for --os-variant (rhbz#1649406)
  - virt-install: Add "Guest OS" options group (rhbz#1649406)
  - virt-xml: Accept --os-variant option (rhbz#1649406)
  - tests: Add some tests for virt-xml with KVM (rhbz#1649406)
  - virt-xml: Start using --os-variant (rhbz#1649406)
  - cli: s390x+graphics specified, use video=virtio (bz #1654994) (rhbz#1654994)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-1
changelog:
  - Rebased to virt-manager-2.2.0 (rhbz#1721001)
  - The rebase also fixes the following bugs:
      rhbz#1718065, rhbz#1714304, rhbz#1709857, rhbz#1707379, rhbz#1700354
      rhbz#1692489, rhbz#1690687, rhbz#1690685, rhbz#1683609, rhbz#1679018
      rhbz#1677019, rhbz#1671599, rhbz#1667025, rhbz#1666597, rhbz#1663430
      rhbz#1661867, rhbz#1660467, rhbz#1660123, rhbz#1659354, rhbz#1658511
      rhbz#1648939, rhbz#1599139, rhbz#1508147, rhbz#1501608
  - spec: add build dependencies that are now required for build (rhbz#1721001)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-2
changelog:
  - xmleditor: Handle gtksourceview3 as well as gtksourceview4 (rhbz#1722820)
  - xmleditor: Fix the gtksource version checking (rhbz#1722820)
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-3
changelog:
  - guest: Drop set_capabilities_defaults call from get_uefi_path (rhbz#1753644)
  - devices: video: Simplify model hvm check (rhbz#1753644)
  - domcapabilities: Get video devices (rhbz#1753644)
  - domcapabilities: Add supports_video_bochs() (rhbz#1753644)
  - video: Prefer "bochs" when it's supported. (rhbz#1753644)
  - addhardware: Add "bochs" display to the video list (rhbz#1753644)
  - osdict: Always return the most generic tree (rhbz#1749865)
  - osdict: Choose the most appropriate tree when a profile is set (rhbz#1749865)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-4
changelog:
  - virt-install: Use minutes instead of seconds on get_time_string() (rhbz#1777664)
  - details: Fix showing the firmware type in case of firmware auto selection (rhbz#1857069)
  - details: fix detection of firmware auto-selection (rhbz#1857069)
  - domain: Fix VM deletion with firmare='efi' (rhbz#1869135)
  - virt-xml: fix defined_xml_is_unchanged (rhbz#1857504)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-1
changelog:
  - Rebased to virt-manager-3.2.0 (rhbz#2009080)
  - The rebase also fixes the following bugs:
      rhbz#2001794
  - cli: introduce --resource fibrechannel.appid option (rhbz#2011327)
  - virt-install: add mediated device (rhbz#1995125)
  - virt-xml: add support for mediated devices (rhbz#1995125)
  - hostdev: use method get_mdev_uuid() (rhbz#1995125)
  - tests: verify MDEV support (rhbz#1995125)
  - virt-manager: enable MDEV support (rhbz#1995125)
  - Handle new nodedev name for mediated devices (rhbz#2020241)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-37
changelog:
  - Fix "Input/output error" in journal
    resolves: rhbz#2149139
  - Store the patches in an upstream branch in git.


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 9.0-1
changelog:
  - Rebase to latest upstream
    Resolves: rhbz#1837489
  - Do not filter out DATA storage domains
    Resolves: rhbz#1835640


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-8
changelog:
  - Add support for Nutanix AHV
    resolves: rhbz#1756381
  - Add all patches since 1.18 was released, up to 1.20 and beyond.


author: William Poteat <wpoteat@redhat.com> 0.30.1-1
changelog:
  - 1878136: Deprecation comment in config file (wpoteat@redhat.com)
  - 1854829: rhsm_port and rhsm_password are missing in template.conf
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.30.2-1
changelog:
  - 1890421: New section of virt-who.conf file for environment variables
    (wpoteat@redhat.com)
  - 1876927: virt-who fails to parse output from hypervisor (wpoteat@redhat.com)
  - Correction in patch builder for directory location (wpoteat@redhat.com)
  - Update releasers (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.30.3-1
changelog:
  - 1890421: Update to docs for config change (wpoteat@redhat.com)
  - Tweak of patch builder (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.5-1
changelog:
  - 1855550: [Remote Libvirt] The Name in Stage Candlepin cannot update based on
    hypervisor_id configuration (wpoteat@redhat.com)
  - 1879329: List possible values for type in man page (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.6-1
changelog:
  - 1943486: Clear previous report hash when hypervisor count is zero
    (wpoteat@redhat.com)
  - Convert CI from Travis to Jenkins (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.7-1
changelog:
  - 1984018: Take out AHV removal patch mechanism (wpoteat@redhat.com)
  - Update tito releaser for next release (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.8-1
changelog:
  - 1986761:  Add the description for nutanix mode in man virt-who and man virt-
    who-config (wpoteat@redhat.com)
  - 1985210: The guest state in mapping should be uniform with other hypervisors
    1985213: The guest shows wrong active value "0" in mapping when it's running.
    (wpoteat@redhat.com)
  - 1985224: Get UnboundLocalError when configured hypervisor_id=hwuuid
    (wpoteat@redhat.com)
  - 1985203: Add dmi.system.uuid to ahv facts (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.9-1
changelog:
  - This change will only query the VM related tasks from AHV clusters during
    continous mode to reduce the laod in returning the tasks in the AHV task
    manager. A new wait time flag is also added to cause delay in querying for
    the tasks in the continous mode. (amir.eibagi@nutanix.com)
  - 1889363: Update dependency between libvirtd and virt-who (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.10-1
changelog:
  - 2000024: Convert non-latin1 username/password to bytes (jhnidek@redhat.com)
  - 1910020: replace deprecated call (wpoteat@redhat.com)
  - Update for deprecation of MutableMapping (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.11-1
changelog:
  - 1986755: Remove the redundant 'update_interval' option from ahv config
    (wpoteat@redhat.com)
  - 1986749: rename configuration entry to show ahv specificity
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.12-1
changelog:
  - Run complex tests as forked for consistent results (wpoteat@redhat.com)
  - 1996944: Use cluster name instead of UUID for fabric consistency
    (wpoteat@redhat.com)
  - 2000423: Nutanix config needs to handle bad server value (wpoteat@redhat.com)
  - 1990563: Move progress bar to stderr to keep stdout clean
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.30.13-1
changelog:
  - 2091661: [1.30] Nutanix: Gather information about VMs correctly
    (jhnidek@redhat.com)
  - Update releasers for current needs (wpoteat@redhat.com)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 5-1
changelog:
  - switch to dot-prefixed Aliases
  - order Aliases for compatibility with older Apache releases
  - enable webfonts
  - enable symlinks in %{_webassetdir} and %{_jsdir}
  - re-enable httpd subpackage


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.40.5-1
changelog:
  - Upgrade to 2.40.5. Also, disable JIT
    Resolves: #2176269
    Resolves: #2185742
    Resolves: #2209728
    Resolves: #2209745
    Resolves: #2218649
    Resolves: #2218651
    Resolves: #2224611


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.3-1
changelog:
  - New release: 35.3 (bcl)
  - spec: Adjust build methods for RHEL 8 (bcl)
  - github: Run build-in-podman to test building package (bcl)
  - spec: Use v2 module (bcl)
  - Makefile: Use v2 module (bcl)
  - Makefile: Add a build-in-podman target (bcl)
  - tests: Add JSON and error result testing to status (bcl)
  - tests: Add JSON and error result testing to sources (bcl)
  - tests: Add JSON and error result testing to projects (bcl)
  - tests: Add JSON and error result testing to modules (bcl)
  - tests: Add JSON and error result testing to distros (bcl)
  - tests: Add JSON and error result testing to compose (bcl)
  - tests: Add JSON and error result testing to blueprints (bcl)
  - test: Fix test client setup and output capture code (bcl)
  - test: Close output capture in printwrap_test (bcl)
  - test: reset the root flags on every ExecuteTest call (bcl)
  - status: Use ExecutionErrors for API errors (bcl)
  - sources: Use ExecutionErrors for API errors (bcl)
  - projects: Use ExecutionErrors for API errors (bcl)
  - modules: Use ExecutionErrors for API errors (bcl)
  - distros: Use ExecutionErrors for API errors (bcl)
  - compose: Use ExecutionErrors for API errors (bcl)
  - blueprints: Use ExecutionErrors for API errors (bcl)
  - composer-cli: Turn off normal command Stdout when --json is used (bcl)
  - weldr: Fix Stringer interface on API messages (bcl)
  - weldr: Clean up error message return code (bcl)
  - weldr: Move Unmarshal error to error position (bcl)
  - root: Add a helper function to print a list of errors (bcl)
  - Use GetFilePath for ComposeImage (bcl)
  - Use GetFilePath for ComposeResults (bcl)
  - Use GetFilePath for ComposerMetadata (bcl)
  - Use GetFilePath for ComposeLogs (bcl)
  - weldr: Add GetFilePath to download a file to a path (bcl)
  - Creating v2 module for breaking API changes (bcl)
  - Makefile: Add update-mods target (bcl)
  - vendor: Update the modules and vendor directory (bcl)
  - Bump go version to 1.15 (bcl)
  - Limit dependabot to 1 PR (bcl)
  - Enable Dependabot service (atodorov)
  - tests: Fix integration tests (bcl)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.21-8
changelog:
  - Fix invalid [ ... ] syntax which results in complaints by zsh.
    https://bugzilla.redhat.com/show_bug.cgi?id=1546221
  - Remove pointless Group tag, buildroot cleaning and %defattr.


author: Than Ngo <than@redhat.com> - 2.21-17
changelog:
  - Resolves: #2025709, check shell correctly 
  - Resolves: #2009547, which treats function contents as aliases when parsing ksh


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-16
changelog:
  - Resolves: #2210866 - VMS TCPIPtrace file parser crash
  - Resolves: #2210867 - NetScaler file parser crash
  - Resolves: #2210869 - RTPS dissector crash


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-2
changelog:
  - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275)
  - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780)
  - enable WIFI_DISPLAY (rh #1755941)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-3
changelog:
  - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684)
  - allow changing 'bridge' via D-Bus (rh #1888050)
  - expose OWE configurability via D-Bus (rh #1888718)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-5
changelog:
  - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
  - Fix buffer overflow when processing P2P group information (CVE-2021-0326)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-15
changelog:
  - Disable build of wpa_gui (rh #1542234)
  - Fix build issue with latest kernel headers (rh #1582604)
  - Disable WEXT (rh #1537143)
  - Fix memory leak when macsec MKA/PSK is used (rh #1582511)
  - Fix authentication failure when the MAC is updated externally (rh #1582508)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1582501)


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Jonas Ådahl <jadahl@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0 (#1837413)
  - Bump supported Mutter screen cast API version (#1837413)
  - Backport bugfix (#1837413)


author: Debarshi Ray <rishi@fedoraproject.org> - 1.8.0-1
changelog:
  - Rebase to 1.8.0
  - Remove unnecessary non-arch-specific explicit library Requires
  Resolves: #2062432


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-4
changelog:
  - save mimetype defaults to ~/.config/mimeapps.list
    (instead of ~/.local/share/applications/mimeapps.list)


author: Pavel Reichl <preichl@redhat.com> - 3.1.8-5
changelog:
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2055289


author: Pavel Reichl <preichl@redhat.com> - 3.1.8-6
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape
  - related: bz#2166554


author: Pavel Reichl <preichl@redhat.com> - 3.1.8-7
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-11883


author: Eric Sandeen <sandeen@redhat.com> 5.0.0-1
changelog:
  - New upstream version (#1712147)
  - mkfs.xfs: validate extent size hint parameters (#1683007)
  - mkfs.xfs: null-terminate symlinks created via protofile (#1640503)
  - xfs_repair: allow '/' in attribute names (#1667354)
  - xfs_info: allow device name as parameter (#1679840)
  - xfs_quota: fix project inheritance flag handling (#1664105)
  - xfs_metadump: handle symlinks correctly (#1693074)
  - xfs_db: fix finobt record decoding with sparse inodes (#1690245)


author: Eric Sandeen <sandeen@redhat.com> 5.0.0-2
changelog:
  - mkfs.xfs: validate log stripe unit alignment (#1632596)
  - xfs_growfs: allow mounted device node as argument (#1765217)


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-6
changelog:
  - xfs_repair: improve AG btree ptr validation (libxfs_verify_agbno) (#1887288)
  - mkfs.xfs: fix ASSERT on too-small device with stripe geometry (#1887401)
  - xfs_repair: fix rebuilding btree block less than minrecs (#1759452)


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-7
changelog:
  - xfs_quota: document how the default quota is stored (#1850188)
  - xfs_db: skip type change if type_f unchanged (#1867474)


author: Pavel Reichl <preichl@redhat.com> - 5.0.0-11
changelog:
  - Fix xfstest fails with error "missing xfsprogs fix patch"(#2161936,#2160746)
  - Fix ignore autofs mount table entries (#2182361)


author: Pavel Reichl <preichl@redhat.com> - 5.0.0-12
changelog:
  - Fix xfs_repair progress reporting is not working (#2183398)
  - Fix man page default for sparse mkfs option (#2118564)


author: Eric Sandeen <sandeen@redhat.com> 4.19.0-1
changelog:
  - New upstream release (#1652248)
  - Note reflink default in mkfs.xfs manpage (#1641698)
  - Fix xfs_db sign extension in agi freecount (#1640090)
  - Fix xfs_repair hang on large filesystem (#1630674)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Simone Caronni <negativo17@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1.
  - Skip PDF document generation through fop. It fixes FTBFS on Fedora 22. Tarball
    is not yet compatible with Fedora xmlgraphics-commons >= 2.0.
  - Remove useless db files.


author: Adam Jackson <ajax@redhat.com> - 1.7.1-5
changelog:
  - Drop BuildRequires: java-devel. Originally that was to force a specific
    JDK version, which we no longer need to do.


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.14-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038066), CVE-2021-4009 (#2038068),
    CVE-2021-4010 (#2038071), CVE-2021-4011 (#2038073)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-6
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110442, rhbz#2110437


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-8
changelog:
  - CVE fix for: CVE-2022-4283 (#2151802), CVE-2022-46340 (#2151777),
    CVE-2022-46341 (#2151782), CVE-2022-46342 (#2151785),
    CVE-2022-46343 (#2151792), CVE-2022-46344 (#2151795)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-15
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Tomas Popela <tpopela@redhat.com> - 2:3.28.1-3
changelog:
  - Add the Quit entry to the app menu
  - Handle Ctrl+Q shortcut for quitting the application
  - Resolves: rhbz#1638876


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 3.0-22
changelog:
  - Add missing linker flags
  - Port the configure patch from unzip that allows linker flags configuration
    from the spec file
  - Related: #1624188


author: Jakub Martisko <jamartis@redhat.com> - 3.0-23
changelog:
  - Set the ziperr function as noreturn
  - Fix email in the previous chnagelog entry
  - Related: #1602741


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-16
changelog:
  - Permit a deflateParams() parameter change
  - Another fix for Z hardware-accelerated deflate for s390x architectures
  - according to previous change by upstream


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - Fixed DFLTCC compression level switching issues (#1875492)
  - Enabled HW compression for compression levels 1 through 6 (#1847438)
  - Fixed inflateSyncPoint() bad return value on z15 (#1888930)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-19
changelog:
  - Apply IBM patch for compressBound() function
  - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
  - Resolves: #2056900


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-20
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-23
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)


author: Kamil Dudka <kdudka@redhat.com> - 5.5-1
changelog:
  - update to latest upstream release, which fixes the following vulnerabilities:
      CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
      CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
      CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-11
changelog:
  - Use /usr/libexec/platform-python macro during the config phase (used for doc generation)
    Resolves: RHEL-22880


