# changelog

author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-10
changelog:
  - Resolves: RHEL-69822 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-8.10.z]
  - Resolves: RHEL-71215 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-11
changelog:
  - Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-12
changelog:
  - Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
  - Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
  - Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
  - Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
  - Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
  - Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
  - Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-13
changelog:
  - Resolves: RHEL-89749 - Nested group does not receive memberOf attribute [rhel-8.10.z]
  - Resolves: RHEL-89758 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-8.10.z]
  - Resolves: RHEL-89765 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-8.10.z]
  - Resolves: RHEL-89778 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-14
changelog:
  - Reverts: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-95442 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-8.10.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.1.9-6
changelog:
  - Add explicit requirement on javapackages-tools for script which
    uses java-functions. See RHBZ#1600426.


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  - Modified to initiate VPN connections with openswan whack interface
  - Fixed the issue of world readable conf and secret files
  - Cleaned conf and secret files after VPN connection is stopped
  - Fixed the issue of storing sensitive information like user
    password in a file (rhbz# 607352)
  - Changed PLUTO_SERVERBANNER to PLUTO_PEER_BANNER due
    to the same change in Openswan
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-4.20100411git
changelog:
  - Modified fix for the bz 607352
  - Fix to read connection configuration from stdin
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-6.20100411git
changelog:
  - Modified import and export interfaces to import_from_file and export_to_file, respectively,
    due to changes in NMVpnPluginUiInterface struct in NM (bz 631159).


author: Dan Williams <dcbw@redhat.com> - 0.8.999-1
changelog:
  - Update to 0.8.999 (0.9-rc2)
  - Port to GTK 3.0 and GtkBuilder
  - Fix some issues with secrets storage


author: Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.4-1
changelog:
  - New upstream release 0.9.8.4
  - Fixed 926225
  - Fixed dependency to libreswan.
  - Created a new sub package NetworkManager-openswan-gnome
  - Various other spec file fixes.
  - Additional code changes are as follows:
  - Fixed an issue where proper network stack is not loaded unless
    _stackmanager is run before starting pluto daemon service.
  - Fixed the termination operation of pluto daemon to comply with
    libreswan changes.
  - Fixed various debug messages.
  - Fixed initiation of pluto daemon by this plugin to reflect the
    changes in libreaswan.
  - Fixed defaults values for more parameters to help the VPN
    connection stay more reliable.
  - Rewrote pluto watch API which watches the pluto process for its status.
    Fixed memory leak issues as not all child processes were reaped correctly.
    Also g_spwan_close_pid was not being called after children were reaped.
    Also modified debugs and added more to help with debugging in the future.
  - Fixed an issue where nm-openswan service is searching for ipsec binary in
    both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
    symlink to /usr/sbin, so removed /sbin from the search paths.
  - Fixed some libreswan related macro changes.
  - Fixed netmask issue when sending IP information to the nm openswan
    plugin service.
  - Fixed the current code as it does not set the default route field
    NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
    to nm-openswan plugin. This fix sets the field to TRUE.
  - Fixed some issues found by coverity scan.
  - Fixed an issue where writing configuration on stdin should not end with
    \n as it gives error. It used to work previously, but not with latest
    NetworkManager versions.
  - libreswan related fixes, as some macros have been modified after forking
    to libreswan from openswan.
  - openswan/libreswan does not provide tun0 interface, so fixed the code
    where it sends tun0 interface.
  - Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
  - Fixed dead code based on coverity scan.
  - Fixed gnomekeyring lib dependencies.
  - Fixed Networkmanager and related lib dependencies.
  - Fixed gtk label max width issue by setting it to 35.
  - NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
    So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
    Makefile and configure.ac files.


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: - John Eckersberg <jeckersb@redhat.com> - 3.08-5
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py
  - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.12-6
changelog:
  - Python 2 binary package renamed to python2-pyyaml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John Eckersberg <eck@redhat.com> - 4.2-0.1.b4
changelog:
  - New upstream beta release 4.2b4
  - Replaces 4.1 which was retracted upstream
    See https://mail.python.org/pipermail/python-announce-list/2018-June/011977.html
  - Add BuildRequires for gcc
    See https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6 [bz#2083465]
  - Adding restart_if implementation for RHEL [bz#2085578]
  - Resolves: bz#2083465
    ([Azure][RHEL-8][8.7] Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2085578
    ([Azure][WALA][8.6] WALA provisions VM failed because of no "ifdown")


author: Camilla Conte <cconte@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2080826]
  - Resolves: bz#2080826
    ([Azure][WALA][RHEL-8] [8.7] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2092002]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2114824]
  - Resolves: bz#2092002
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2114824
    ([Azure][WALA][RHEL-8.7] The description of "Logs.Collect" is incorrect)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-7.el8_8
changelog:
  - wla-redhat-Fix-frh.py-to-not-skip-valid-patches-to-init-.patch [bz#2170104]
  - wla-Use-platform-python-in-waagent.service.patch [bz#2170104]
  - Resolves: bz#2170104
    ([Azure][WALA][RHEL-8] systemd service should not use python3)


author: Nicolas Chauvet <kwizart@gmail.com> - 0.7.4-24
changelog:
  - Multilibs support - rhbz#1433758
  - Simplify description
  - Convert AUTHORS to UTF-8
  - Drop Groups
  - Add Obsoletes/Provides for a52dec-devel


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.10.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
  - Related: Jira:RHEL-2110


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.1-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: RHEL-13151
    Resolves: RHEL-4795
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: RHEL-11168


author: Martin Kolman <mkolman@redhat.com> - 33.16.10.2-1
changelog:
  - Propagate a lazy proxy of the storage model (vponcova)
    Resolves: RHEL-16276
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-4784


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.4-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23344
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23344


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 33.16.10.5-1.inferit
changelog:
  - Disable subscription
  - Hide CDN source button
  - Set MSVSphere installer colors
  - Add Minimal and Server repository support
  - Set default timezone to Europe Moscow
  - Add MSVSphere product config
  - Set Russian language as default
  - Set Russian as default language for new regions
  - Added new products
  - Debranding from RHEL
  - Update Russian translation
  - Fix smt url
  - Enable administrator by default
  - Fix Translation "Encrypt my data"
  - Activate network interfaces in anaconda


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-528


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-17080
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-19202
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19204
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19203


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.2-1
changelog:
  - Update role to version 2.2.2 to fix HA
    Resolves: RHEL-19202
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-17080
  - ExcludeArch: i686


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125591
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2015288
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127447
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127885
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127894
  - New netgroup management module
    Resolves: RHBZ#2127908
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127912
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2128460
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134530
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132729


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125591
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150332
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144724


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125591
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165951


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170371
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127901
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175762
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127904
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183820
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175766
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#1759785
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175755


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170371
  - Multiple service management
    Resolves: RHBZ#2175769
  - New ipacert module
    Resolves: RHBZ#2127906
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214295


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170371
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050158
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2168022
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215532
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215534
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215539
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215543
  - Update authtypes authind
    Resolves: RHBZ#2215540


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13746
  - New idoverridegroup management module.
    Resolves: RHEL-16935
  - New idoverrideuser management module.
    Resolves: RHEL-16941
  - New idview management module.
    Resolves: RHEL-16933
  - New idp management module.
    Resolves: RHEL-16938
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16682


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13746
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4963
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13759
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17955
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17958
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-4934
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19129
  - Idempotency fixes
    Resolves: RHEL-13755
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19133
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19135
  - ipa-server installation failing
    Resolves: RHEL-23633


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-2mdk
changelog:
  - new spec file
  - discarded ugly non-free Sun jaxp library from sources, and used pretty open-source xerces instead


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-4mdk
changelog:
  - merged with Henri Gomez <hgomez@users.sourceforge.net> specs:
  - changed name to ant
  - changed javadir to /usr/share/java
  - dropped jdk and jre requirement
  - corrected require to jaxp
  - added Jikes support
  - used our own bash script
  - dropped perl script
  - dropped ant home directory


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-7mdk
changelog:
  - launch script improvments (Christian Zoffoli <czoffoli@linux-mandrake.com>)
  - added french in spec
  - more macros


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4-2jpp
changelog:
  - first unified release
  - dropped explicit xalan-j2 requirement, as stylebook-1.0b3 already requires it
  - added missing xalan-j1 compatibility classes
  - s/jPackage/JPackage


author: Christian Zoffoli <czoffoli@littlepenguin.org> 1.4.1-2jpp
changelog:
  - conditional build
  - removed packager tag
  - new jpp extension
  - added xalan 2.2.D13 support
  - added BuildRequires: xalan-j2 >= 2.2.D13
  - removed Requires: oro junit stylebook-1.0b3 bsf rhino antlr


author: Christian Zoffoli <czoffoli@littlepenguin.org> 1.4.1-3jpp
changelog:
  - readded Requires: oro junit stylebook-1.0b3 bsf rhino antlr to the main package
  - corrected changelog release 1jpp-> 2jpp


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-4jpp
changelog:
  - removed conditional build
  - removed redundant BuildRequires
  - ant-optional.jar in ant-optional package
  - javadoc into javadoc package
  - new launch script using functions library


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-5jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for optional package
  - additional sources in individual archives
  - upgraded launch script
  - no more javadoc cross-linking
  - additional requirement for optional package: xml-commons-apis, xalan-j2, xalan-j2-compat, jaf, javamail, & log4j


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-7jpp
changelog:
  - adaptation to new stylebook1.0b3 package
  - stylebook is a dependency of optional package
  - removed redundant dependencies
  - launch script correction


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-11jpp
changelog:
  - no more jikes specific support in launch script
  - source user prefs before configuration in launch script
  - distribution tag
  - group tag
  - provided original script as documentation


author: Henri Gomez <hgomez@users.sourceforge.net> 1.4.1-13jpp
changelog:
  - added optional-full which include all ant tasks, even those without
    matching package
  - added jdepend 2.2
  - remove require oro, since ant could works without it
  - ant lib is now in %{_javadir}/%{name}, put external jars here


author: Ville Skyttä <ville.skytta@iki.fi> 1.5-2jpp
changelog:
  - Requires jaxp_parser_impl, no longer jaxp_parser2
    (jaxp_parser_impl already requires xml-commons-apis).
  - Use sed instead of bash 2 extension when symlinking.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5-4jpp
changelog:
  - fix a problem in xerces-j2 build by changing the way CLASSPATH is constructed:
    first add jars found in CLASSPATH, then add xml-commons-apis, jaxp_parser_impl,
    ant, ant-optional and finish with jars found in ant/lib.
  - jpackage-utils is no more required (but recommanded :)
  - ant-optional-full provides ant-optional
  - fix link between manual and api (javadoc)


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5-5jpp
changelog:
  - ant script standard behaviour restored, ie ant/lib jars are taken
    before CLASSPATH. You should define CLASSPATH_OVERRIDE env var to have
    CLASSPATH before ant/lib jars
  - applied ant script patch for cygwin (cygwin rpm users around ?)
  - remove conflict in ant-optional-full, just put provides


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.1-3jpp
changelog:
  - new post script for optional-full since rpm didn't works as
    expected and didn't set correct symlink for ant-optional.jar


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.1-4jpp
changelog:
  - Patched to allow easier use with Jikes and IBM's 1.4.0, see
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15289> for details.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.5.1-5jpp
changelog:
  - scripts subpackages
  - file-based manual dependencies, as packages doesn't have the same name on RedHat and Mandrake


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.1-8jpp
changelog:
  - Symlink a transformer into ANT_LIB for smoother experience on Java 1.3.
  - Requires jaxp_transform_impl.
  - Don't remove optional.jar symlinks on optional-full upgrade.
  - Include Sun's 1.4 JSSE and JCE jars in runtime path, see
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16242>.
  - Use jpackage-utils for setting JAVA_HOME when building.
  - Built with Sun 1.4.1_01 javac.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-1jp
changelog:
  - 1.5.2
  - remove JDK 1.4 related patchs which are now included in ant 1.5.2
  - fix ant-optional-full pre/post install script (now remove correctly all
    ant optional jars)
  - Built with jikes 1.18 and IBM SDK 1.4


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-3jp
changelog:
  - rebuilt with IBM SDK 1.3.1 since there was zip corruption when built
    with jikes 1.18 and IBM SDK 1.4.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-4jp
changelog:
  - changed provided /etc/ant.conf so that if usejikes is allready provided
    it didn't set it. Which such modification if you want to disable
    ant to use jikes even if jikes is set in /etc/ant.conf you'll just have
    to do usejikes=false ant build.xml.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.2-5jpp
changelog:
  - Move ANT_HOME to /usr/share/ant.
  - Don't special-case the lib dir for RPM layout any more, use ANT_HOME/lib.
  - Install XSLs into ANT_HOME/etc.
  - Call set_jvm by default in ant.conf.
  - Provide ant-optional-clean (versioned) in ant-optional.
  - Make ant-optional-full conflict with ant-optional-clean.
  - Add version info to ant-optional provision in ant-optional-full.
  - Built with Sun 1.4.1_02 javac (to get JDK 1.4 regex).


author: Nicolas Mailhot <Nicolas.Mailhot at JPackage.org> - 1.5.2-13jpp
changelog:
  - ant-optional is optional (silly me)
  - jaxp_transform is optional , do not require it
  - epoch, correct jpackage-utils requires...


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.5.3-1jpp
changelog:
  - Update to 1.5.3.
  - Remove runtime java-devel dependency.
  - Add Epochs in all Provides and Requires.
  - Include non-versioned javadoc symlink.
  - Build without dependencies that are partially or completely missing from
    JPackage 1.5 (oldbsf, xalan-j1, stylebook1.0b3).
  - Add netcomponents to optional jar list in ant.conf.


author: Randy Watler <rwatler at finali.com> - 0:1.6.0-1jpp
changelog:
  - Update to Ant 1.6.0
  - Break out optional/optional-full components
  - Revise ant launch scripts and support ~/.ant/ant.conf configuration file
  - Use --noconfig flag to bootstrap ant build and override existing jpp config
  - Modify ant launcher to use ant.library.dir property to find extra jars
  - Port changes made in ant launch script for 1.6.2 back into patches


author: Randy Watler <rwatler at finali.com> - 0:1.6.1-1jpp
changelog:
  - Update to Ant 1.6.1
  - Change ant launch script to source instead of patch
  - Move optional components to ant subdirectory: %{_javadir}/%{name}
  - Remove os/2 scripts and set JAVA_HOME for build


author: Fernando Nasser <fnasser at redhat.com> - 0:1.6.1-2jpp
changelog:
  - Remove incorrect noreplace option for ant.conf; it can't be used anymore
    because the sub-packages update that file.
  - Add patch to fix temp directory used for file containing large
    command strings (> 4k)


author: Fernando Nasser <fnasser at redhat.com> - 0:1.6.5-1jpp
changelog:
  - Upgrade to 1.6.5
  - Incorporate the following changes:
    From Gary Benson <gbenson at redhat.com>:
  - Allow subpackages not in Fedora to be installed from JPackage
  - Add NOTICE file as per Apache License version 2.0
  - Own /usr/share/java/ant
    From Vadim Nasardinov <vadimn@redhat.com>
  - Removed apache-ant-1.6.2.patch.  Incorporated upstream.
    From David Walluck <david@jpackage.org>
  - Add manifest-only package (mainly for eclipse)
  - Add conflicts on j2sdk for Mandriva


author: Deepak Bhole <dbhole@redhat.com> - 0:1.6.5-2jpp
changelog:
  - Added conditional native compilation
  - Added patch to fix jvm version detection
  - Add missing requirements
  - Synch with Fedora spec


author: Ralph Apel <r.apel at r-apel.de> - 0:1.7.0-2.jpp5
changelog:
  - Add poms and depmap frags
  - (B)R jpackage-utils >= 0:1.7.5
  - BR java-devel = 0:1.5.0
  - R java >= 0:1.5.0


author: David Walluck <dwalluck@redhat.com> 0:1.7.0-3
changelog:
  - add bootstrap mode
  - replace some alternatives/virtual requires by explicit requires
  - remove javadoc scriptlets
  - fix GCJ support
  - add workaround for xalan-j2 in %{_sysconfdir}/%{name}.d/trax
  - version Obsoletes and add Provides
  - remove Conflicts
  - mark files in %{_sysconfdir} as %config(noreplace)


author: David Walluck <dwalluck@redhat.com> 0:1.7.1-1
changelog:
  - 1.7.1
  - update maven pom files
  - rediff apache-ant-jars.patch
  - rediff apache-ant-bz163689.patch
  - add apache-ant-gnu-classpath.patch
  - set rpm_mode=true in conf since the ant script handles the rest


author: David Walluck <dwalluck@redhat.com> 0:1.7.1-6
changelog:
  - add ant-bootstrap jar if bootstrap is enabled
  - enable jmf, swing, trax if bootstrap is enabled
  - BuildRequires: jaxp_transform_impl
  - BuildRequires: junit for non-bootstrap


author: Orion Poplawski <orion@cora.nwra.com> 0:1.8.1-1
changelog:
  - Update to ant 1.8.1
  - Update no-test-jar patch
  - Update class-path-in-manifest patch
  - Drop gnu-classpath patch
  - Retire trax subpackage no longer shipped
  - Add xalan2 subpackage and support for junitreport task
  - Drop old jakarta jar aliases


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.8.2-3
changelog:
  - Add backward compatible maven depmap for nodeps jar
  - Revert define->global change (different semantic in rpm 4.9.X)


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.8.3-2
changelog:
  - Use apache-commons-* instead of jakarta-commons-*.
  - Drop xml-commons-apis-13 BR/R since it's no longer needed.


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.9.0-2
changelog:
  - Drop a pile of old provider/requires/obsoletes that are no longer usable
    and cause only problem if ant is scl-ized.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.9.1-3
changelog:
  - Remove arch-specific patch as ant is noarch now
  - Remove bcond macro definitions (provided by rpm itself)
  - Remove Group tags
  - Update to current packaging guidelines
  - Run tests in %check instead of %build
  - Remove dependencies on xerces-j2 and xml-commons-apis, resolves: rhbz#838711
  - Convert %global build_javadoc to conditional
  - Remove bootstrap code, resolves: rhbz#915437
  - Fail the build if any of JARs is empty
  - Skip running tests that fail on Koji, resolves: rhbz#979496
  - Merge scripts into main package, resolves: rhbz#798975


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.9.4-1
changelog:
  - Update to upstream 1.9.4.
  - Disable tests as they use new junit tas attribute added in this release.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Chris Spike <chris.spike@arcor.de> 1.2-3
changelog:
  - Removed maven* BRs in favour of apache-commons-parent
  - Added deprecated groupId to depmap for compatibility reasons


author: Mat Booth <fedora@matbooth.co.uk> - 1.4-1
changelog:
  - Update to 1.4
  - Rewrite spec file to build using upstream-preferred maven instead of ant
  - Drop patch to add OSGi manifest (done automatically in the maven build)
  - Install pom and add to maven dep-map
  - Re-enable all tests


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.6-4
changelog:
  - Enable tests
  - Install NOTICE with javadoc package
  - Fix file permissions
  - Remove versioned symlinks


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.7-4
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Carl Green <carlgreen at gmail.com> - 3.2.1-4
changelog:
  - Renamed from jakarta-commons-collections
  - Updated to use maven2
  - Replaced saxon:group instruction with xsl:for-each-group in pom-maven2jpp-newdepmap.xsl


author: Carl Green <carlgreen at gmail.com> - 3.2.1-5
changelog:
  - Remove source and patches no longer needed for Maven
  - Fix non-standard groups and remove empty sections
  - Fix file permissions


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1:2.0.1-1
changelog:
  - Update to 2.0.1
  - Versionless jars & javadocs
  - Use maven 3 to build
  - Use apache-commons-parent for BR


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.3-1
changelog:
  - Rename package (jakarta-commons-jxpath->apache-commons-jxpath)
  - Cleanup spec file
  - Build using maven, drop old pom file from sources
  - Update to upstream version


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-2
changelog:
  - Fix EOLs on docs
  - Create javadoc symlinks during install
  - Use version macro in Source0 URL, use _mavenpomdir macro


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-12
changelog:
  - Add depmaps for api and adapters subpackages
  - Use apache-commons-parent BR instead of maven-*
  - Replace tomcat5 BR with tomcat6
  - Reenable tests


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-13
changelog:
  - Replace tomcat6 BR with servlet25 only
  - Cleanups according to new packaging guidelines
  - Install maven metadata for -api jar
  - Versionless jars/javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.0-3
changelog:
  - Rename jakarta-commons-net to apache-commons-net and drop EPOCH
  - Build with maven
  - Clean up whole spec


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2-1
changelog:
  - Replace maven plugins with apache-commons-parent for BR
  - Versionless jars and javadocs
  - Rebase to latest upstream version


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - add patch to help autoconf clean after itself and not leave /tmp clobbered
    with acin.* and acout.* files (can you say annoying?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up interoperability with glibc 2.2 and gcc 2.96:
    AC_TRY_RUN_NATIVE in C++ mode added a prototype for exit() to
    the test code without throwing an exception, causing a conflict
    with stdlib.h --> AC_TRY_RUN_NATIVE for C++ code including stdlib.h
    always failed, returning wrong results


author: Jens Petersen <petersen@redhat.com>
changelog:
  - Add a back-port of _AC_PROG_CXX_EXIT_DECLARATION
    from version 2.50 to make detection of C++ exit()
    declaration prototype platform independent.  The check is
    done in AC_PROG_CXX with the result stored in "confdefs.h".
    The exit() prototype in AC_TRY_RUN_NATIVE is no longer needed.
    (fixes #18829)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - add patch to include various standard C headers as needed
    by various autoconf tests (#19114)
  - add patch to autoscan.pl to get a better choice of init
    file (#42071), to test for CPP after CC (#42072) and to
    detect C++ source and g++ (#42073).


author: Jens Petersen <petersen@redhat.com> 2.52-5
changelog:
  - update to 2.52f
  - add URL
  - minor description improvements
  - define relversion to carry version number
  - mawk.patch no longer needed


author: Jens Petersen <petersen@redhat.com> 2.53-1
changelog:
  - update to autoconf-2.53
  - drop mawk patch again
  - version suffix bindir files and add symlinks to unversioned names


author: Jens Petersen <petersen@redhat.com> 2.56-1
changelog:
  - update to 2.56
  - obsolete autoheader-warn patch
  - no longer provide autoconf253
  - include site-lisp and man files
  - remove info dir which is not in the manifest
  - do not version suffix bin files for now


author: Jens Petersen <petersen@redhat.com> 2.56-2
changelog:
  - add --without check build option to control whether "make check" run
  - don't gzip info files explicitly
  - use exclude for unwanted info files


author: Jens Petersen <petersen@redhat.com> - 2.58-2
changelog:
  - fix problem with ac_abs_{build,src}dir (#109267) [reported by Joe Orton,
    patch by Alexandre Duret-Lutz]


author: Karsten Hopp <karsten@redhat.com> 2.61-4
changelog:
  - add disttag
  - replace  tabs with spaces
  - fix buildroot
  - use Requires(post), Requires(preun)
  - use make install DESTDIR=....
  - drop perl requirement as it gets pulled it automatically


author: Stepan Kasal <skasal@redhat.com> 2.62-4
changelog:
  - add a quick fix for #449944
  - remove Requires: mktemp, imake, grep; these are required by the generated
    configure, but not by Autoconf.
  - switch on make check


author: Karsten Hopp <karsten@redhat.com> 2.69-2
changelog:
  - spec file changes by Ralf Corsépius:
  - Use %bcond_without for --with/out=check.
  - Add BR: perl(Data::Dumper).
  - Remove BR: automake (Testsuite doesn't need automake).
  - Add BR: gcc-gfortran, erlang (Extend testsuite).
  - Remove TESTSUITEFLAGS (Was referring to autoconf < 2.69).
  - Add rpm-4.9 perl-filters %__provides_exclude, %__requires_exclude.
    Remove rpm-4.8 perl-filters (Address RHBZ 823770).
  - Reflect autoconf being GPLv3'ed.
  - Add BR: perl-macros, Remove BR: perl-devel


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-11
changelog:
  - config.site installation should be safe as long as the CONFIG_SITE=NONE is
    exported by the rpmbuild environment (#772999)


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-17
changelog:
  - config.site: take AC_PREFIX_DEFAULT([/usr]) into account, by
    agruen at kernel.org (rhbz#1196340)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Pavel Raiskup <praiskup@redhat.com> - 1.16.1-3
changelog:
  - update config.{guess,sub} to gnuconfig git HEAD
  - drop ppc64p7 hack in config.sub, it's not needed - per:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't BR python2-* packages; switching BRs to python3 would make no sense
    since the upstream testsuite is not yet python3 ready


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 3.28.0-4.inferit
changelog:
  - Fixed the translation paths for Meson build system
  - Updated Russian help translation
  - Rebuilt for MSVSphere 8.9


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.10-3
changelog:
  - Add explicit javapackages-tools requirement for sub-packages using
    jpackage_script-based scripts. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 1.11-1
changelog:
  - Update to latest upstream release
  - Drop ancient obsoletes
  - Drop eclipse-specific hacks that are no longer needed
  - Allow conditional building without scripting engines for smaller dep chain
  - Break out some low-level modules into separate sub-package for smaller install
    size


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Rafael Fonseca <rdossant@redhat.com> - 0.4.0-1
changelog:
  - Resolves #1460482 - rebase to new release
  - Resolves #1505506 - add support for LLVM 5.0
  - Resolves #1460482 - BPF module compilation issue
  - Partially address #1479990 - location of man pages
  - Enable ppc64(le) support without lua
  - Soname versioning for libbpf by ignatenkobrain


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.0-6
changelog:
  - llcstat: print a nicer error message on virtual machine
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase to bcc-0.10.0
  - Drop criticalstat
  - Fix regression on vfscount and runqslower
  - Rebuild on LLVM 9


author: Jerome Marchand <jmarchan@redhat.com> - 0.14.0-2
changelog:
  - Remove criticalstat manpage
  - Remove compactsnoop on non x86_64
  - Suggest to use --binary in deadlock
  - Remove non-existent argument from tcpconnect man page
  - Suggest to install the proper kernel-devel version
  - Fix dbstat and dbslower


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Martin Nagy <mnagy@redhat.com> - 0.1.0-0.6.a1.20091210git
changelog:
  - update to the latest git snapshot
  - change upstream URL, project moved to fedorahosted
  - change license to GPL version 2 or later
  - add epoch to versioned requires
  - add krb5-devel to the list of build requires


author: Adam Tkac <atkac redhat com> - 0.2.0-1
changelog:
  - update to 0.2.0
  - patches merged
    - 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch
    - 0004-Bugfix-Fix-loading-of-child-zones-from-LDAP.patch


author: Petr Spacek <pspacek@redhat.com> - 6.0-3
changelog:
  - replace dependency on bind with dependency on bind-pkcs11 >= 32:9.9.6-2
    to help with freeipa-server upgrade


author: Petr Spacek <pspacek@redhat.com> - 10.1-1
changelog:
  - Update to 10.1.
  - Fix deletion of DNS root zone not to break global forwarding.
    https://fedorahosted.org/bind-dyndb-ldap/ticket/167


author: Petr Menšík <pemensik@redhat.com> - 10.1-2
changelog:
  - Patched to alfa 11.0 with support for BIND 9.11
  - Configuration format in named.conf is different
      and incompatible with all previous versions. Please see README.md.
  - Minimal BIND version is now 9.11.0rc1. Please see NEWS.


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - Update to 11.1
  - Bumped required version of BIND to 9.11.0-6.P2
    (required since bind-dyndb-ldap 11.0-1 release)
  - Updated source URL links to pagure


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.16.1
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
  - Added session-keyfile statement into default named.conf since we use /run/named


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#997030)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
changelog:
  - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
  - Fix race condition when freeing fetch object (ISC-Bugs #35385)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
changelog:
  - Update to 9.9.6
  - drop merged patches and rebase some of existing patches
  - Add architecture specific dependencies.
  - Fix assert in dig when using +sigchase (#985918)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
changelog:
  - Added native PKCS#11 functionality (#1097752)
  - bind-sdb now requires bind due to configuration and other utilities
  - bind-pkcs11 now requires bind due to configuration and other utilities


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
changelog:
  - Fixed systemctl path in logrotate configuration (#1148360)
  - drop engine_pkcs11 dependency, since we use native PKCS#11 implementation


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
changelog:
  - update to 9.10.2rc1
  - fix nsupdate server auto-detection (#1184151)
  - drop merged patch bind99-rh985918.patch


author: Till Maas <opensource@till.name> - 32:9.10.2-0.2.rc1
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
changelog:
  - update to 9.10.2 stable
  - remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
changelog:
  - enable tuning for large systems - increases hardcoded internal limits
  - enable GeoIP access control feature


author: Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
changelog:
  - Remove unrecognized build options for %configure
  - Own %{_includedir}/bind9 directory in -lite-devel
  - Fixed building without (optional) PKCS#11 support


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
changelog:
  - Commented out bindkeys-file statement in default configuration (#1223365#c3)
  - Removed unrecognized configure option --enable-developer
  - Added configure option --enable-full-report to get report on enabled features


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
changelog:
  - Remove NM dispatcher script, since it is not needed any more (#1277257)
  - Replaced After=network-online.target with After=network.target in all unit files


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
changelog:
  - RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
  - Fix some rpm warnings


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
changelog:
  - Update to 9.11.2
  - Add recursing and secroots file into default and sample config
  - Fix nsupdate GSSAPI auth against AD server (#1484451)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
changelog:
  - Build against mariadb-connector-c-devel (#1493615)
  - Include DNSKEY 20326 also in trusted-key.key (#1505476)
  - Fix dynamic symbols conflict with ldap (#1205168)
  - Use hmac-sha256 for new RNDC keys (#1508003)
  - Include protocols and services in chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
changelog:
  - Enable unit tests with kyua tool (#1532694)
  - Provide internal tool to prepare softhsm token storage
  - Proper fix for python3-bind subpackage directory ownership (#1522944)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
changelog:
  - Use versioned provides
  - Fix starting of unit tests
  - Forward export libs path to isc-config
  - Rename export devel subpackage to bind-export-devel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
changelog:
  - Require openssl-devel and libcap-devel from bind-export-devel
  - Conflict with bind99-devel
  - Change spec globals to rpmbuild --with feature


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
changelog:
  - Use new config file named-chroot.files for chroot setup (#1429656)
  - Fix chroot devices file verification (#1592873)
  - Prevent errors on bind-chroot uninstall when running (#1600583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
changelog:
  - Update to 9.11.4-P1
  - Adds root key sentinel support
  - Large IXFR zone transfers are rejected to prevent journal corruption


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-6.P1
changelog:
  - Fix sdb-chroot devices upgrade (#1592873)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-8.P1
changelog:
  - Replace unoptimized code by OpenSSL counterparts
  - Fix multilib conflicts of devel package
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.5-2
changelog:
  - Add optional support for JSON statistics
  - Add optional DNSTAP support (#1564776), new dnstap-read tool


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.5-9.P1
changelog:
  - dig prints ASCII name instead of failure (#1647829)
  - disable IDN output from scripts
  - Update project URL
  - Removed revoked KSK 19164 from trusted keys


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.5-12.P1
changelog:
  - Enable DNSTAP support (#1564776)
  - Enable LMDB support for rndc addzone
  - Enable json format in statistics-channel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.10-2
changelog:
  - Move some administration utilities back to bind-utils (#1720380)
  - Add GeoIP to bind-chroot (#1497646)
  - Recommend bind-dnssec-utils from bind-pkcs11-utils


author: Fedora Release Engineering <releng@fedoraproject.org> - 32:9.11.14-5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

   * Wed Jan 08 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.14-4
  - Remove libmaxminddb-devel from devel package dependencies


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.13-1
changelog:
  - Update to 9.16.13
  - Changed displayed version just to include -RH suffix, not release
  - Version is now part of library names, soname versions are no longer provided
  - Removed bind-libs-lite subpackage


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.15-3
changelog:
  - Disable building of DLZ and PKCS11
  - Build HTML documentation into separate bind-doc subpackage
  - Enable DNSTAP feature (#1975268)
  - Enable LMDB support (#1975775)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Jerome Marchand <jmarchan@redhat.com> - 0.9-2
changelog:
  - Fixes gethostlatency
  - Fixes a struct definition issue that made several tools fail
  - Add CI gating


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-3
changelog:
  - Fix ENOMEM issue on arm64 machine with many cpus
  - Fix statsnoop and opensnoop on aarch64
  - Drop tcpdrop on ppc64


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Dan Walsh <dwalsh@redhat.com> 0.2.0-1.gitac2aad6
changelog:
  -   buildah run: Add support for -- ending options parsing
  -   buildah Add/Copy support for glob syntax
  -   buildah commit: Add flag to remove containers on commit
  -   buildah push: Improve man page and help information
  -   buildah run: add a way to disable PTY allocation
  -   Buildah docs: clarify --runtime-flag of run command
  -   Update to match newer storage and image-spec APIs
  -   Update containers/storage and containers/image versions
  -   buildah export: add support
  -   buildah images: update commands
  -   buildah images: Add JSON output option
  -   buildah rmi: update commands
  -   buildah containers: Add JSON output option
  -   buildah version: add command
  -   buildah run: Handle run without an explicit command correctly
  -   Ensure volume points get created, and with perms
  -   buildah containers: Add a -a/--all option


author: Dan Walsh <dwalsh@redhat.com> 0.4-1.git9cbccf88c
changelog:
  -   Add default transport to push if not provided
  -   Avoid trying to print a nil ImageReference
  -   Add authentication to commit and push
  -   Add information on buildah from man page on transports
  -   Remove --transport flag
  -   Run: do not complain about missing volume locations
  -   Add credentials to buildah from
  -   Remove export command
  -   Run(): create the right working directory
  -   Improve "from" behavior with unnamed references
  -   Avoid parsing image metadata for dates and layers
  -   Read the image's creation date from public API
  -   Bump containers/storage and containers/image
  -   Don't panic if an image's ID can't be parsed
  -   Turn on --enable-gc when running gometalinter
  -   rmi: handle truncated image IDs


author: Dan Walsh <dwalsh@redhat.com> 0.5-1
changelog:
  -  Add secrets patch to buildah
  -  Add proper SELinux labeling to buildah run
  -  Add tls-verify to bud command
  -  Make filtering by date use the image's date
  -  images: don't list unnamed images twice
  -  Fix timeout issue
  -  Add further tty verbiage to buildah run
  -  Make inspect try an image on failure if type not specified
  -  Add support for `buildah run --hostname`
  -  Tons of bug fixes and code cleanup


author: Dan Walsh <dwalsh@redhat.com> 0.7-1
changelog:
  - Ignore errors when trying to read containers buildah.json for loading SELinux reservations
  -     Use credentials from kpod login for buildah
  - Adds support for converting manifest types when using the dir transport
  - Rework how we do UID resolution in images
  - Bump github.com/vbatts/tar-split
  - Set option.terminal appropriately in run


author: Dan Walsh <dwalsh@redhat.com> 0.8-1
changelog:
  - Buildah bud was failing on SELinux machines, this fixes this
  - Block access to certain kernel file systems inside of the container


author: Dan Walsh <dwalsh@redhat.com> 0.10-1
changelog:
  - Display Config and Manifest as strings
  - Bump containers/image
  - Use configured registries to resolve image names
  - Update to work with newer image library
  - Add --chown option to add/copy commands


author: Dan Walsh <dwalsh@redhat.com> 0.11-1
changelog:
  - Add --all to remove containers
  - Add --all functionality to rmi
  - Show ctrid when doing rm -all
  - Ignore sequential duplicate layers when reading v2s1
  - Lots of minor bug fixes
  - Vendor in latest containers/image and containers/storage


author: Dan Walsh <dwalsh@redhat.com> 0.12-1
changelog:
  - Added handing for simpler error message for Unknown Dockerfile instructions.
  - Change default certs directory to /etc/containers/certs.dir
  - Vendor in latest containers/image
  - Vendor in latest containers/storage
  - build-using-dockerfile: set the 'author' field for MAINTAINER
  - Return exit code 1 when buildah-rmi fails
  - Trim the image reference to just its name before calling getImageName
  - Touch up rmi -f usage statement
  - Add --format and --filter to buildah containers
  - Add --prune,-p option to rmi command
  - Add authfile param to commit
  - Fix --runtime-flag for buildah run and bud
  - format should override quiet for images
  - Allow all auth params to work with bud
  - Do not overwrite directory permissions on --chown
  - Unescape HTML characters output into the terminal
  - Fix: setting the container name to the image
  - Prompt for un/pwd if not supplied with --creds
  - Make bud be really quiet
  - Return a better error message when failed to resolve an image
  - Update auth tests and fix bud man page


author: Dan Walsh <dwalsh@redhat.com> 0.14-1
changelog:
  - If commonOpts do not exist, we should return rather then segfault
  - Display full error string instead of just status
  - Implement --volume and --shm-size for bud and from
  - Fix secrets patch for buildah bud
  - Fixes the naming issue of blobs and config for the dir transport by removing the .tar extension


author: Dan Walsh <dwalsh@redhat.com> 0.16-1
changelog:
  -   Add support for shell
  -   Vendor in latest containers/image
  -    	 docker-archive generates docker legacy compatible images
  -	 Do not create $DiffID subdirectories for layers with no configs
  - 	 Ensure the layer IDs in legacy docker/tarfile metadata are unique
  -	 docker-archive: repeated layers are symlinked in the tar file
  -	 sysregistries: remove all trailing slashes
  -	 Improve docker/* error messages
  -	 Fix failure to make auth directory
  -	 Create a new slice in Schema1.UpdateLayerInfos
  -	 Drop unused storageImageDestination.{image,systemContext}
  -	 Load a *storage.Image only once in storageImageSource
  -	 Support gzip for docker-archive files
  -	 Remove .tar extension from blob and config file names
  -	 ostree, src: support copy of compressed layers
  -	 ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
  -	 image: fix docker schema v1 -> OCI conversion
  -	 Add /etc/containers/certs.d as default certs directory
  -  Change image time to locale, add troubleshooting.md, add logo to other mds
  -   Allow --cmd parameter to have commands as values
  -   Document the mounts.conf file
  -   Fix man pages to format correctly
  -   buildah from now supports pulling images using the following transports:
  -   docker-archive, oci-archive, and dir.
  -   If the user overrides the storage driver, the options should be dropped
  -   Show Config/Manifest as JSON string in inspect when format is not set
  -   Adds feature to pull compressed docker-archive files


author: Dan Walsh <dwalsh@redhat.com> 1.0-1
changelog:
  - Remove buildah run cmd and entrypoint execution
  - Add Files section with registries.conf to pertinent man pages
  - Force "localhost" as a default registry
  - Add --compress, --rm, --squash flags as a noop for bud
  - Add FIPS mode secret to buildah run and bud
  - Add config --comment/--domainname/--history-comment/--hostname
  - Add support for --iidfile to bud and commit
  - Add /bin/sh -c to entrypoint in config
  - buildah images and podman images are listing different sizes
  - Remove tarball as an option from buildah push --help
  - Update entrypoint behaviour to match docker
  - Display imageId after commit
  - config: add support for StopSignal
  - Allow referencing stages as index and names
  - Add multi-stage builds support
  - Vendor in latest imagebuilder, to get mixed case AS support
  - Allow umount to have multi-containers
  - Update buildah push doc
  - buildah bud walks symlinks
  - Imagename is required for commit atm, update manpage


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Drop capabilities if running container processes as non root
  - Print Warning message if cmd will not be used based on entrypoint
  - Update 01-intro.md
  - Shouldn't add insecure registries to list of search registries
  - Report errors on bad transports specification when pushing images
  - Move parsing code out of common for namespaces and into pkg/parse.go
  - Add disable-content-trust noop flag to bud
  - Change freenode chan to buildah
  - runCopyStdio(): don't close stdin unless we saw POLLHUP
  - Add registry errors for pull
  - runCollectOutput(): just read until the pipes are closed on us
  - Run(): provide redirection for stdio
  - rmi, rm: add test
  - add mount test
  - Add parameter judgment for commands that do not require parameters
  - Add context dir to bud command in baseline test
  - run.bats: check that we can run with symlinks in the bundle path
  - Give better messages to users when image can not be found
  - use absolute path for bundlePath
  - Add environment variable to buildah --format
  - rm: add validation to args and all option
  - Accept json array input for config entrypoint
  - Run(): process RunOptions.Mounts, and its flags
  - Run(): only collect error output from stdio pipes if we created some
  - Add OnBuild support for Dockerfiles
  - Quick fix on demo readme
  - run: fix validate flags
  - buildah bud should require a context directory or URL
  - Touchup tutorial for run changes
  - Validate common bud and from flags
  - images: Error if the specified imagename does not exist
  - inspect: Increase err judgments to avoid panic
  - add test to inspect
  - buildah bud picks up ENV from base image
  - Extend the amount of time travis_wait should wait
  - Add a make target for Installing CNI plugins
  - Add tests for namespace control flags
  - copy.bats: check ownerships in the container
  - Fix SELinux test errors when SELinux is enabled
  - Add example CNI configurations
  - Run: set supplemental group IDs
  - Run: use a temporary mount namespace
  - Use CNI to configure container networks
  - add/secrets/commit: Use mappings when setting permissions on added content
  - Add CLI options for specifying namespace and cgroup setup
  - Always set mappings when using user namespaces
  - Run(): break out creation of stdio pipe descriptors
  - Read UID/GID mapping information from containers and images
  - Additional bud CI tests
  - Run integration tests under travis_wait in Travis
  - build-using-dockerfile: add --annotation
  - Implement --squash for build-using-dockerfile and commit
  - Vendor in latest container/storage for devicemapper support
  - add test to inspect
  - Vendor github.com/onsi/ginkgo and github.com/onsi/gomega
  - Test with Go 1.10, too
  - Add console syntax highlighting to troubleshooting page
  - bud.bats: print "$output" before checking its contents
  - Manage "Run" containers more closely
  - Break Builder.Run()'s "run runc" bits out
  - util.ResolveName(): handle completion for tagged/digested image names
  - Handle /etc/hosts and /etc/resolv.conf properly in container
  - Documentation fixes
  - Make it easier to parse our temporary directory as an image name
  - Makefile: list new pkg/ subdirectoris as dependencies for buildah
  - containerImageSource: return more-correct errors
  - API cleanup: PullPolicy and TerminalPolicy should be types
  - Make "run --terminal" and "run -t" aliases for "run --tty"
  - Vendor github.com/containernetworking/cni v0.6.0
  - Update github.com/containers/storage
  - Update github.com/projectatomic/libpod
  - Add support for buildah bud --label
  - buildah push/from can push and pull images with no reference
  - Vendor in latest containers/image
  - Update gometalinter to fix install.tools error
  - Update troubleshooting with new run workaround
  - Added a bud demo and tidied up
  - Attempt to download file from url, if fails assume Dockerfile
  - Add buildah bud CI tests for ENV variables
  - Re-enable rpm .spec version check and new commit test
  - Update buildah scratch demo to support el7
  - Added Docker compatibility demo
  - Update to F28 and new run format in baseline test
  - Touchup man page short options across man pages
  - Added demo dir and a demo. chged distrorlease
  - builder-inspect: fix format option
  - Add cpu-shares short flag (-c) and cpu-shares CI tests
  - Minor fixes to formatting in rpm spec changelog
  - Fix rpm .spec changelog formatting
  - CI tests and minor fix for cache related noop flags
  - buildah-from: add effective value to mount propagation


author: Dan Walsh <dwalsh@redhat.com> 1.2-1
changelog:
  - Vendor in latest containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Add registries.conf link to a few man pages


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.4-2
changelog:
  - use the mainline 1.16.4 buildah release as starting point for 8.4.0
    not the content from upstream branch yet
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/06e091b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/af31e45)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.1-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.20.1
  - sync tests with Fedora
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/a0853c3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5119393)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/162fbaf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f30b420)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/c3a3fe8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f629ded)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/2a83637)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/19d3065)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/df14b1c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d677bf0)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8a6d840)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/4fa566e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/bbbe10a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d08dbe7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/9c7f50b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8d08247)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d99221f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/30c07b7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/db16262)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5181b9c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/802a904)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/6d5d1ae)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3a0b52f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/6bc611d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c7d828f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3ed5d8e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/30a10f3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/9c83683)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.23.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/a5aba5c)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.23.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/e9bc224)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/69b3e56)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/753716a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f3f3c55)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/fb84638)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/b8757e9)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/a72aad4)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/9a49348)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8548885)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/455f2f1)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/d2ef199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/954c481)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/0cd9445)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/7807a0e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c044ad6)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/211972a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/50869a7)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/982717a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/9c456a3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/d29224c)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/c1bdaba)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/63813ef)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/e99286b)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
    (https://github.com/containers/buildah/commit/7e4d9dd)
  - Resolves: #2136319


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f01e5f9)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175070
  - Resolves: #2179948
  - Resolves: #2187317
  - Resolves: #2187364
  - Resolves: #2203680
  - Resolves: #2207510


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61835


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/fe85f0d)
  - Resolves: RHEL-61853


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)
  - Resolves: RHEL-67612


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/cf49e7c)
  - fixes "CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]"
  - Resolves: RHEL-89239


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: gil cattaneo <puntogil@libero.it> 1.1-10
changelog:
  - rebuilt for upgrade el apis gid:aid (rhbz#1223468)
  - adapt to current guideline
  - use mvn()-like BRs
  - fix rpmlint problem in changelog entries


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: Alexander Larsson <alexl@redhat.com> - 1:2.91.93-3
changelog:
  - Move gsettings schema to cheese-libs, fixes control-center crash (#691667)
  - Move typelib to cheese-libs


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.1-2
changelog:
  - Fix missing images on buttons, also fixes the "Gtk-WARNING **: Attempting to
    add a widget with type GtkImage to a GtkButton ..." warnings (gnome#677543)
  - Fix cheese crashing when started on machines with v4l2 radio or vbi devices
    (rhbz#810429, gnome#677544)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.4.2-3
changelog:
  - Reduce camerabin pipeline creation time (rhbz#797188, gnome#677731)
  - Don't add 0 byte sized files to the thumb-view (rhbz#830166, gnome#677735)
  - Fix sizing of horizontal thumbnail list (rhbz#829957)
  - Optimize encoding parameters (rhbz#572169)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.5-1
changelog:
  - New upstream release 3.5.5
  - Fix cheese crashing on tvcards which report they can capture 0x0 as
    minimum resolution (rhbz#850505)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.2-2
changelog:
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.91-3
changelog:
  - In F-19 we had a long list of bugfix patches, most of these have been merged
    into gnome-3.10 but not all have been merged yet, re-add the non merged ones
  - Fix video recording not working
  - Allow changing effects while recording
  - Disallow changing camera settings while recording
  - Fix cheese misbehavior when going from 0 -> 1 or 1 -> 0 camera devices


author: David King <amigadave@amigadave.com> - 2:3.13.92-1
changelog:
  - Update to 3.13.92
  - Split camera service out to a subpackage
  - Use pkgconfig for BuildRequires
  - Tidy spec file


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Tomas Orsava <torsava@redhat.com> - 6.0.1-6
changelog:
  - Change Requires from python3 to platform-python
  - The python3 package was renamed to platform-python
  - Related: rhbz#1619153


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.5
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40418]
  - Resolves: RHEL-40418
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.6
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46013]
  - Resolves: RHEL-46013
    ([RHEL-8] cloud-init fails to configure DNS search domains [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.7
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49742]
  - Resolves: RHEL-49742
    ([Cloud-init] [RHEL-8.10] Password reset feature broken with CloudstackDataSource)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.8
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54155]
  - Resolves: RHEL-54155
    ([RHEL 8.10] cloud-init schema validation fails.)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.9
changelog:
  - ci-fix-rh_subscription-add-string-type-to-org-5453.patch [RHEL-81169]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-81169]
  - Resolves: RHEL-81169
    (Cloud-init fails to subscribe system if activation key 'org' is not an integer [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8.10
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100606]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100606]
  - Resolves: RHEL-100606
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-8.10.z])


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-2
changelog:
  - Rebased RHEL version to Fedora rawhide
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1246485
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1411829


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-3
changelog:
  - added dependency on python-jinja2 [RH:1215913]
  - added rhn_subscription plugin [RH:1227393]
  - require pyserial to support smartos data source [RH:1226187]


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-8
changelog:
  - make rh_subscription plugin do nothing in the absence of a valid
    configuration [RH:1295953]
  - move rh_subscription module to cloud_config stage


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-6
changelog:
  - add power-state-change module to cloud_final_modules (rhbz#1252477)
  - remove 'tee' command from logging configuration (rhbz#1424612)
  - limit permissions on def_log_file (rhbz#1424612)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-7
changelog:
  - Add missing sysconfig unit test data (rhbz#1438082)
  - Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
  - sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-9
changelog:
  - RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
  - azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
  - Fix ipv6 subnet detection (rhbz#1438082)


author: Ryan McCabe <rmccabe@redhat.com> 0-7.9-13
changelog:
  - Do proper cleanup of systemd units when upgrading from versions
    0.7.9-3 through 0.7.9-8.
    Resolves: rhbz#1465730


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - Revert "remove 'tee' command from logging configuration" [bz#1626117]
  - Resolves: rhbz#1626117]
    (cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el8
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
  - Resolves: bz#1615599
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el8
changelog:
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
  - Resolves: bz#1644335
    ([ESXi][RHEL8.0]Enable cloud-init by default on VMware)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el8
changelog:
  - ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
  - Resolves: bz#1664227
    ([Azure]String missmatch causes the /dev/sdb1 mounting failed after stop&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-6.el8
changelog:
  - ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
  - Resolves: bz#1602784
    (cloud-init: Sometimes image boots fingerprints is configured, there's a network device present but it's not configured)


author: Danilo de Paula <ddepaula@redhat.com: - 18.5-1.el8
changelog:
  - Rebase to cloud-init 18.5
  - Resolves: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 18.5-2
changelog:
  - Adding gating.yaml file
  - Resolves: rhbz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 18.5-3.el8
changelog:
  - ci-Adding-gating-tests-for-Azure-ESXi-and-AWS.patch [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el8
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1691986]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1691986]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1691986]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1691986]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el8
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1692914]
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)
  - Resolves: bz#1692914
    ([8.1] [WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-8.el8
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1706482]
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744718]
  - Resolves: bz#1706482
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 8.2.0])
  - Resolves: bz#1744718
    ([cloud-init][RHEL8][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-9.el8
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1785648]
  - Resolves: bz#1785648
    ([RHEL8]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-10.el8
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802140]
  - Resolves: bz#1802140
    ([cloud-init][RHEL8.2]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-11.el8
changelog:
  - ci-azure-avoid-re-running-cloud-init-when-instance-id-i.patch [bz#1788684]
  - ci-net-skip-bond-interfaces-in-get_interfaces.patch [bz#1768770]
  - ci-net-add-is_master-check-for-filtering-device-list.patch [bz#1768770]
  - Resolves: bz#1768770
    (cloud-init complaining about enslaved mac)
  - Resolves: bz#1788684
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1807797]
  - Resolves: bz#1807797
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.coM> - 19.4-1.el8.1
changelog:
  - Rebase to cloud-init 19.4 [bz#1811912]
  - Resolves: bz#1811912
    ([RHEL-8.2.1] cloud-init rebase to 19.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el8
changelog:
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812171]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812174]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1814152]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1840648]
  - Resolves: bz#1812171
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-8])
  - Resolves: bz#1812174
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-8])
  - Resolves: bz#1814152
    (CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys [rhel-8])
  - Resolves: bz#1840648
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el8
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
  - Resolves: bz#1803928
    ([RHEL8.3] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el8
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el8
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el8
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el8
changelog:
  - Fixing cloud-init-generator permissions [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-8.el8
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
  - ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
  - Resolves: bz#1833874
    ([rhel-8.3]using root user error should cause a non-zero exit code)
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-9.el8
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
  - ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-10.el8
changelog:
  - ci-Changing-notation-of-subp-call.patch [bz#1839662]
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8
changelog:
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Eduardo Otubo <otubo@redhat.com> - 20.3-1.el8
changelog:
  - Rebase to cloud-init 20.3 [bz#1885185]
  - Resolves: bz#1885185
    ([RHEL-8.4.0] cloud-init rebase to 20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-2.el8
changelog:
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1889635]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1886430]
  - Resolves: bz#1886430
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init)
  - Resolves: bz#1889635
    (Add support for ipv6_autoconf on cloud-init-20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.1
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.3
changelog:
  - ci-get_interfaces-don-t-exclude-Open-vSwitch-bridge-bon.patch [bz#1957135]
  - ci-net-exclude-OVS-internal-interfaces-in-get_interface.patch [bz#1957135]
  - Resolves: bz#1957135
    (Intermittent failure to start cloud-init due to failure to detect macs [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-8
changelog:
  - ci-ssh_utils.py-ignore-when-sshd_config-options-are-not.patch [bz#1862933]
  - Resolves: bz#1862933
    (cloud-init fails with ValueError: need more than 1 value to unpack[rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-9
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2013644]
  - Resolves: bz#2013644
    (cloud-init fails to set host key permissions correctly)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-10
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2021538]
  - Resolves: bz#2021538
    (cloud-init.service fails to start after package update)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-11
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028028]
  - Resolves: bz#2028028
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-12
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2039697]
  - ci-Datasource-for-VMware-953.patch [bz#2026587]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2026587]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2026587]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2026587]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2026587]
  - Resolves: bz#2039697
    ([RHEL8] [Azure] cloud-init fails to configure the system)
  - Resolves: bz#2026587
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Jon Maloy <jmaloy@redhat.com> - 21.1-13
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2023940]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2023940]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2023940]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2023940]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2023940]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2023940]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2023940]
  - Resolves: bz#2023940
    ([RHEL-8] Support for provisioning Azure VM with userdata)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-14
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2046540]
  - Resolves: bz#2046540
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]
  - Resolves: bz#1935826
    ([rhel-8] Cloud-init init stage fails after upgrade from RHEL7 to RHEL8.)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2059872]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2059872]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2082071]
  - ci-Remove-rhel-specific-files.patch [bz#2082071]
  - Resolves: bz#2059872
    ([RHEL-8]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2082071
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2082686]
  - Resolves: bz#2082686
    ([cloud][init] Add support for reading tags from instance metadata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-4
changelog:
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096269]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096269]
  - Resolves: bz#2096269
    (Adjust udev/rules default path[RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - Resolves: bz#2107464
    ([RHEL-8.7] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2110066
    (DNS integration with OpenStack/cloud-init/NetworkManager is not working)
  - Resolves: bz#2117526
    ([RHEL8.7] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2104393
    ([RHEL-8.7]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2098624
    ([RHEL-8.7] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115576]
  - Resolves: bz#2115576
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Camilla Conte <cconte@redhat.com> - 22.1-7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2151861]
  - Resolves: bz#2151861
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL)


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2162258]
  - Resolves: bz#2162258
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-1
changelog:
  - limit-permissions-on-def_log_file.patch
  - Resolves bz#1424612
  - include-NOZEROCONF-yes-in-etc-sysconfig-network.patch
  - Resolves bz#1653131
  - Rebase to 23.1.1 [bz#2172821]
  - Resolves: bz#2172821


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-2
changelog:
  - ci-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2182407]
  - Resolves: bz#2182407
    (cloud-init strips new line from "/etc/hostname" when processing "/var/lib/cloud/data/previous-hostname")


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-3
changelog:
  - ci-Don-t-change-permissions-of-netrules-target-2076.patch [bz#2182947]
  - ci-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190081]
  - Resolves: bz#2182947
    (Request to backport "Don't change permissions of netrules target (#2076)")
  - Resolves: bz#2190081
    (CVE-2023-1786 cloud-init: sensitive data could be exposed in logs [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-4
changelog:
  - ci-Add-warning-during-upgrade-from-an-old-version-with-.patch [bz#2210012]
  - Resolves: bz#2210012
    ([cloud-init] System didn't generate ssh host keys and lost ssh connection after cloud-init removed them with updated cloud-init package.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-6
changelog:
  - ci-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch [bz#2219528]
  - ci-Revert-Revert-Add-native-NetworkManager-support-1224.patch [bz#2219528]
  - ci-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2219528]
  - ci-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2219528]
  - ci-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2219528]
  - ci-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2219528]
  - ci-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2219528]
  - Resolves: bz#2219528
    ([RHEL8] Support configuring network by NM keyfiles)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - ci-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222501]
  - Resolves: bz#2222501
    (Don't change log permissions if they are already more restrictive [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - ci-DS-VMware-modify-a-few-log-level-4284.patch [bz#2223810]
  - Resolves: bz#2223810
    ([cloud-init] [RHEL8.9]There are warning logs if dev has more than one IPV6 address on ESXi)


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-9
changelog:
  - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460]
  - Resolves: bz#2229460
    ([rhel-8.9] [RFE] Configure "ipv6.addr-gen-mode=eui64' as default in NetworkManager)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10
changelog:
  - Resolves: bz#2233047
    ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16572]
  - Resolves: RHEL-16572
    ([cloud-init][rhel-8] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-2
changelog:
  - ci-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-7277]
  - ci-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-7277]
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17610]
  - Resolves: RHEL-7277
    ([RFE] [Azure][RHEL8][Network][cloud-init] Can not acquire IPv6 address)
  - Resolves: RHEL-17610
    ([RHEL-8] NetworkManagerActivator brings up interface failed when using sysconfig renderer)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-3
changelog:
  - ci-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21530]
  - ci-test-jsonschema-Pin-jsonschema-version-4781.patch [RHEL-21530]
  - Resolves: RHEL-21530
    ([RHEL-8.10]subp.py[WARNING]: skipping /etc/cloud/clean.d/README when do cloud-init clean)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-4
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22248]
  - Resolves: RHEL-22248
    ([Azure][RHEL-8] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-ci-Pin-pytest-8.0.0.-4816.patch [RHEL-21323]
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21323]
  - Resolves: RHEL-21323
    ([rhel-8] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-Revert-systemd-Standardize-cloud-init-systemd-enable.patch [RHEL-21290]
  - Resolves: RHEL-21290
    (Unknown lvalue 'ConditionEnvironment' in section 'Unit' for /usr/lib/systemd/system/cloud-init.target,cloud-init.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28817]
  - Resolves: RHEL-28817
    ([RHEL 8.10] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.1
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-4637.patch [RHEL-27134]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-manag.patch [RHEL-27134]
  - ci-fix-Undeprecate-network-in-schema-route-definition-5.patch [RHEL-29710]
  - Resolves: RHEL-27134
    ([rhel-8]cloud-init fails to configure DNS/search domains for network-config v1)
  - Resolves: RHEL-29710
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition [rhel-8.10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.2
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32841]
  - Resolves: RHEL-32841
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.3
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36701]
  - Resolves: RHEL-36701
    (DataSourceNoCloudNet not configurable via config files [rhel-8.10.z])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10.el8_9.1
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16444]
  - Resolves: RHEL-16444
    ([cloud-init][rhel-8.9.0.z] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Stef Walter <stefw@redhat.com> - 0.73-1
changelog:
  - * Kubernetes UI can connect to non-local API server
  - * Automate Web Service container build on Docker Hub
  - * Add validation options to TLS client connections
  - * PAM pam_ssh_add.so module for loading SSH keys based on login password
  - * Build, testing and other fixes


author: Stef Walter <stefw@redhat.com> - 0.74-1
changelog:
  - * Display an intelligent message when password auth is not possible
  - * Correctly start terminal in home directory
  - * NetworkManager code is in a separate package
  - * PCP is an optional build dependency
  - * Lots of bugs, build and testing fixes


author: petervo <petervo@redhat.com> - 0.75-1
changelog:
  - New design for kubernetes listing pages
  - Namespace filter for kubernetes
  - Pretty http error pages
  - Lots of bugs, build and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.76-1
changelog:
  - * Fix displaying of network bonds
  - * Better Kubernetes filter bar, shell access
  - * Show some Openshift related objects
  - * Use patternfly v2.2


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - * Work better with multipath storage
  - * Deletion of kubernetes objects
  - * Cleaner URLs in the bookmark bar
  - * Show a warning when adding too many machines
  - * Make authentication work when embedding Cockpit
  - * Complete componentizing Cockpit


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 0.77-1.1
changelog:
  - disable FMA support to get it pass all tests on secondary architectures
  - removed duplicated "global rel 1"


author: Stef Walter <stefw@redhat.com> - 0.78-1
changelog:
  - * Fix extreme CPU usage issue in 0.77 release
  - * Fix compatibility with older releases
  - * Offer to activate multipathd for multipath disks
  - * Guide now contains insight into feature internals
  - * Lots of other minor bug fixes


author: Stef Walter <stefw@redhat.com> - 0.79-1
changelog:
  - * Vagrant file for Cockpit development
  - * Use libvirt for testing
  - * Display only last lines of Kubernetes container logs


author: Stef Walter <stefw@redhat.com> - 0.80-1
changelog:
  - * UI for loading, viewing, changing Private SSH Keys
  - * Always start an ssh-agent in the cockpit login session
  - * New listing panel designs
  - * Lots of testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.81-1
changelog:
  - * Allow configuring NTP servers when used with timesyncd
  - * Fix regression in network configuration switches
  - * Make the various graphs look better
  - * Openshift Routes and Deployment Configs can be removed
  - * Run integration tests using TAP "test anything protocol"
  - * Lots of other bug fixes and cleanup


author: Stef Walter <stefw@redhat.com> - 0.82-1
changelog:
  - * Support certificate chains properly in cockpit-ws
  - * Rename the default self-signed certificate
  - * Implement distributed integration testing


author: Stef Walter <stefw@redhat.com> - 0.83-1
changelog:
  - * Fix NTP server configuration bugs
  - * Kubernetes dashboard topology icons don't leave the view
  - * Kubernetes dashboard uses shared container-terminal component
  - * Fix race when adding machine to Cockpit dashboard
  - * Updated documentation for running new distributed tests
  - * Lots of other bug and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.84-1
changelog:
  - * Add a cockpit manual page
  - * Set correct SELinux context for certificates
  - * Remove custom SELinux policy
  - * Testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.86-1
changelog:
  - * SOS report UI page
  - * Simpler way for contributors to build cockpit RPMs
  - * Infrastructure for implementing downloads


author: Stef Walter <stefw@redhat.com> - 0.87-1
changelog:
  - * Fix login on Windows, don't prompt for additional auth
  - * Use the machine host name in the default self-signed certificate
  - * Cockpit release tarballs are now distributed in tar-ustar format
  - * Allow overriding package manifests
  - * Testing and build fixes


author: Stef Walter <stefw@redhat.com> - 0.88-1
changelog:
  - * User interface for OSTree upgrades and rollbacks
  - * General reusable purpose angular kubernetes client code
  - * Allow custom login scripts for handling authentication
  - * A specific dashboards can now be the default destination after login
  - * Kill ssh-agent correctly when launched by cockpit-bridge
  - * Add a new cockpit-stub bridge for non-local access


author: Stef Walter <stefw@redhat.com> - 0.89-1
changelog:
  - * Start routine testing of Cockpit on Debian Unstable
  - * Make the config file case insensitive
  - * Reorder graphs on server summary page
  - * Don't suggest syncing users when adding a machine to dashboard
  - * Enable weak dependencies for F24+
  - * Show correct data in per interface network graphs
  - * Fix the Vagrantfile to pull in latest Cockpit
  - * Add Content-Security-Policy header support


author: Stef Walter <stefw@redhat.com> - 0.90-1
changelog:
  - * Fix Content-Security-Policy which broke loading in certain situations
  - * Deal correctly with failures trying to join unsupported domains
  - * Add documentation about Cockpit startup
  - * Better data in storage usage graphs
  - * Start creating debian source packages


author: Stef Walter <stefw@redhat.com> - 0.91-1
changelog:
  - * Fix computing of graph samples on 32-bit OS
  - * Distribute licenses of included components
  - * Distribute development dependencies
  - * Support 'make clean' properly in the tarball


author: Stef Walter <stefw@redhat.com> - 0.92-1
changelog:
  - * OAuth login support
  - * Update Patternfly
  - * Log to stderr when no journal
  - * Make sosreport work on RHEL and Atomic


author: Stef Walter <stefw@redhat.com> - 0.93-1
changelog:
  - * Set system performance profile via tuned
  - * Support for WebSocket client in cockpit-bridge
  - * Support using Nulecule with Openshift
  - * Actually exit cockpit-ws when it's idle


author: Stef Walter <stefw@redhat.com> - 0.94-1
changelog:
  - * Handle interruptions during cockpit-ws start while reading from /dev/urandom
  - * Remove BIOS display from Server Summary page
  - * Support tuned descriptions
  - * Fix Content-Security-Policy in example manifest.json files


author: Stef Walter <stefw@redhat.com> - 0.95-1
changelog:
  - * iSCSI initiator support on the storage page
  - * Page browser title now uses on operating system name
  - * Better look when Cockpit disconnects from the server
  - * Avoid use of NFS in the Vagrantfile
  - * Expand 'Tools' menu when navigating to one of its items
  - * Set a default $PATH in cockpit-bridge


author: Stef Walter <stefw@redhat.com> - 0.102-1
changelog:
  - * Can configure Docker restart policy for new containers
  - * Use a single dialog for creating logical volumes
  - * Package and test the storage UI on Debian
  - * Don't offer 'Computer OU' when joining IPA domains
  - * Don't distribute jshint build dependency due to its non-free license


author: Stef Walter <stefw@redhat.com> - 0.103-1
changelog:
  - * Strict Content-Security-Policy for subscriptions component
  - * New dialog for Kubernetes connection configuration
  - * Release to a cockpit-project Ubuntu PPA
  - * Remove jQuery usage from cockpit.js
  - * New styling for cluster dashboard
  - * Fix build issue on MIPS


author: Stef Walter <stefw@redhat.com> - 0.104-1
changelog:
  - * Show errors correctly when deleting or modifying user accounts
  - * Add support for iSCSI cluster volumes
  - * Strict Content-Security-Policy in the dashboard, sosreport and realmd code
  - * Better list expansion and navigation behavior across Cockpit
  - * Don't show 'Computer OU' field when leaving a domain
  - * Remove usage of bootstrap-select
  - * Show errors properly in performance profile dialog
  - * Fix Cluster sidebar to react to window size
  - * Allow specifying specific tags in registry image streams
  - * Make registry project access policy more visible


author: Stef Walter <stefw@redhat.com> - 0.105-1
changelog:
  - * Strict Content-Security-Policy in all shipped components of Cockpit
  - * Can now add and remove Openshift users to and from groups
  - * Add timeout setting for Cockpit authentication
  - * Registry interface now has checkbox for mirroring from insecure registries
  - * Kubernetes dashboard now allows deletion of Nodes


author: Stef Walter <stefw@redhat.com> - 0.106-1
changelog:
  - * Add namespaces to cockpit CSS classes
  - * Display container image layers in a simpler graph
  - * Hide actions in Cluster projects listing that are not accessible


author: Stef Walter <stefw@redhat.com> - 0.107-1
changelog:
  - * Display image stream import errors
  - * Add GlusterFS persistent volumes in Cluster dashboard
  - * Show a list of pending persistent volume claims
  - * jQuery Flot library is no longer part of the base1 package
  - * Fix Content-Security-Policy issues with jQuery Flot


author: Stef Walter <stefw@redhat.com> - 0.108-1
changelog:
  - * SELinux troubleshooting alerts can now be dismissed
  - * Show SELinux icon for critical alerts
  - * SELinux enforcing mode can be turned off and on with a switch
  - * Kubernetes Nodes are now include charts about usage data
  - * Fix Debian dependency on Docker
  - * Update the look and feel of the toggle switch
  - * Update ListenStream documentation to include address info


author: Dominik Perpeet <dperpeet@redhat.com> - 0.109-1
changelog:
  - * API stabilization, structural cleanup
  - * SELinux Troubleshooting: documentation, support latest API
  - * Update Patternfly
  - * Use CockpitLang cookie and Accept-Language for localization
  - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard
  - * Cockpit terminal now supports shells like fish


author: Stef Walter <stefw@redhat.com> - 0.111-1
changelog:
  - * Tarball build issue in 0.110 is now fixed
  - * The Containers page layouts have been tweaked
  - * Make the Containers resource limits work again
  - * Registry image now have layers displayed correctly


author: Stef Walter <stefw@redhat.com> - 0.112-1
changelog:
  - * Don't show network interfaces where NM_CONTROLLED=no is set
  - * Add textual fields to container memory and CPU sliders
  - * Display contianer memory and CPU resources on Debian
  - * Disable tuned correctly when clearing a performance profile
  - * Fix SELinux enforcing toggle switch and status


author: Stef Walter <stefw@redhat.com> - 0.113-1
changelog:
  - * Show timer information for systemd timer jobs
  - * Use 'active-backup' as the default for new network bonds
  - * When changing system time check formats properly
  - * Hide the machine asset tag when no asset exists
  - * Disable the network on/off switch for unknown or unmanaged interfaces
  - * Show full string for system hardware info and operating system name


author: Stef Walter <stefw@redhat.com> - 0.114-1
changelog:
  - .104
  - * Network configuration of the Ethernet MTU
  - * Red Hat Subscriptions can now specify activation keys and orgs
  - * Start integration testing on CentOS
  - * SSH Host keys are show on system page
  - * Machine ID is shown on system page
  - * Show intelligent password score error messages


author: Stef Walter <stefw@redhat.com> - 0.115-1
changelog:
  - * Setup Docker container and image storage through the UI
  - * Use Webpack to build Cockpit UI packages
  - * Update the Cockpit Vagrant development box to use Fedora 24


author: Stef Walter <stefw@redhat.com> - 0.116-1
changelog:
  - * Support for volumes when starting a docker container
  - * Support for setting environment variables in a docker container
  - * Fix regressions that broke display of localized text


author: Stef Walter <stefw@redhat.com> - 0.117-1
changelog:
  - * Add support for network teams
  - * Select translations for complex language names
  - * Don't allow formating extended partitions
  - * Can configure Openshift Registry so anonymous users can pull images


author: Stef Walter <stefw@redhat.com> - 118-1
changelog:
  - Support PAM conversations on the Login screen
  - Users can create systemd timer jobs
  - Provide default names for volume groups and logical volumes
  - Make Docker graphs work on Debian
  - Only offer to format disks with supported file systems
  - Show all managed NetworkManager devices
  - Use webpack for building Cockpit javascript
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Allow Cockpit packages to require a minimum version of Cockpit
  - Translations fixes


author: petervo <petervo@redhat.com> - 119-1
changelog:
  - Adds basic VM Management and Monitoring
  - MDRaid job improvements
  - Show unmanaged network devices
  - Better errors when formating storage devices
  - Updated VNC example
  - Port subscriptions package to react
  - Allow branding.css to overide shell css


author: Stef Walter <stefw@redhat.com> - 120-1
changelog:
  - New containers page layout
  - Quick filtering of containers and images on the container page
  - Added sidebar for phisical volumes in a volume group
  - Run a separate cockpit-ssh process when making SSH connections
  - Allow connecting to remote machines from the login page
  - Only connect to remote machines already known to Cockpit
  - Fix bugs preventing journal page from working on Firefox 49
  - Add tooltip describing group name in Roles list


author: Stef Walter <stefw@redhat.com> - 121-1
changelog:
  - Network Manager Checkpoints
  - Add Debian Branding
  - Fix GSSAPI login on Debian and Ubuntu
  - Generate map files for debugging Javascript and CSS


author: Stef Walter <stefw@redhat.com> - 122-1
changelog:
  - Works with UDisks in addition to storaged
  - Allow logging into other systems from login page
  - Explicitly specify javascript dependency versions


author: Stef Walter <<stefw@redhat.com>> - 123-1
changelog:
  - Release a second tarball with cached javascript dependencies
  - Start verifying that Cockpit works on Ubuntu 16.04
  - Enable and verify the network functionality on Debian
  - Integration tests now log core dumps for diagnosis


author: Stef Walter <<stefw@redhat.com>> - 124-1
changelog:
  - Build and test on Debian Jessie
  - Deprecate older javascript files
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers
  - Fix regression where Date Picker was not shown in System Time dialog


author: Stef Walter <<stefw@redhat.com>> - 125-1
changelog:
  - Cockpit is now properly translatable
  - Display OSTree signatures
  - New expandable views for storage devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - Start testing on RHEL 7.3
  - More strict about transport channels a bridge accepts
  - System shutdown can be scheduled by date


author: Stef Walter <<stefw@redhat.com>> - 126-1
changelog:
  - Show security scan information about containers
  - Choose whether password is cached and reused on login screen
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - The remotectl command can now combine certificate and key files
  - Support Openshift's certificate autogeneration when used as a pod
  - The remotectl tool now checks for keys in certificate files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - Javascript code can now export DBus interfaces
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <<stefw@redhat.com>> - 129-1
changelog:
  - Diagnostic sosreport feature now works on RHEL Atomic again
  - The configure script has a --disable-ssh option to toggle libssh dep
  - The configure --disable-ws option has been replaced with above.
  - Unit tests have been fixed on recent GLib versions
  - Several Fedora and Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 130-1
changelog:
  - cockpit.file() can read non-memory-mappable file
  - Add kdump configuration user interface
  - Allow container Registry Console user names with '@' sign


author: Stef Walter <<stefw@redhat.com>> - 131-1
changelog:
  - Show session virtual machines on Machines page
  - Fix use of the TAB key on login page
  - Robust naming and detection of network bond master
  - Debian packaging fixes


author: Martin Pitt <<mpitt@redhat.com>> - 132-1
changelog:
  - Make basic SELinux functionality available without setroubleshootd
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - Hide "autoconnect" checkbox for network devices without settings
  - Support for external providers other than libvirt on Machines page
  - Some tooltip fixes
  - Add option to restrict max read size to the Cockpit file API
  - Relax dependencies on cockpit-bridge package on Debian/Ubuntu
  - Rename cockpit-test-assets package to cockpit-tests
  - When touching patched files handle case of only one file
  - Always build the cockpit-tests subpackage


author: Martin Pitt <<mpitt@redhat.com>> - 133-1
changelog:
  - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json
  - Fix NetworkManager's "MTU" dialog layout
  - Build the cockpit-tests package for releases too
  - Split translations into individual packages
  - Packages now configure alternate cockpit-bridge's to interact with the system


author: Martin Pitt <<mpitt@redhat.com>> - 134-1
changelog:
  - Show /etc/motd in the "System" task page
  - Drop "System" service actions which are intended for scripts
  - Make login page translatable
  - NetworkManager now activates slave interfaces by itself
  - Add call timeout option to the cockpit.dbus() API
  - The Debian packaging is now able to apply binary patches


author: Martin Pitt <<mpitt@redhat.com>> - 137-1
changelog:
  - Read ~/.ssh/known_hosts for connecting to remote machines with ssh
  - The Storage LVM setup can add unpartitioned free space as a physical volume
  - NetworkManager's Team plugin can be used on architectures other than x86_64
  - Cockpit's web server understands and properly responds to HTTP HEAD requests
  - Allow parameter substitution in manifest when spawning peer bridges


author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <<mpitt@redhat.com>> - 139-1
changelog:
  - Show more information about virtual machines, such as boot order
  - Fix enablement of timer systemd units created on Services page
  - Fix Storage crash on multiple iSCSI sessions
  - cockpit-docker is now installable with docker-ce or other alternatives
  - Hide docker push commands on Registry image pages for  "pull" roles


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Martin Pitt <martin@piware.de> - 152-1
changelog:
  - Add Applications page
  - Add automatic update configuration for dnf to Software Updates
  - Fix cockpit-bridge crash if /etc/os-release does not exist


author: Martin Pitt <martin@piware.de> - 153-1
changelog:
  - Add cockpit-ovirt package to control oVirt virtual machine clusters
  - Clean up rpmlint/lintian errors in the packages


author: Martin Pitt <martin@piware.de> - 154-1
changelog:
  - Center the "Disconnected" message in the content area
  - Fix two layout regressions on the Cluster page
  - Remove long-obsolete "./configure --branding" option


author: Martin Pitt <martin@piware.de> - 155-1
changelog:
  - Add NFS client support to the Storage page
  - Add "Maintenance" switch for oVirt hosts
  - Fix Terminal rendering issues in Chrome
  - Prevent closing Terminal with Ctrl+W when focused
  - Support the upcoming OpenShift 3.7 release


author: Martin Pitt <martin@piware.de> - 156-1
changelog:
  - Redesign navigation and support mobile browsing
  - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs
  - Add project homepage link to Apps page
  - Maintain issue(5) file with current Cockpit status
  - Use event-driven refresh of oVirt data instead of polling


author: Martin Pitt <martin@piware.de> - 158-1
changelog:
  - Add check boxes for common NFS mount options
  - Clarify Software Update status if only security updates are available
  - Create self-signed certificates with SubjectAltName


author: Martin Pitt <martin@piware.de> - 159-1
changelog:
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <martin@piware.de> - 160-1
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata
  - Install AppStream collection metadata packages on demand on Apps page
  - Add AppStream metadata to cockpit-sosreport for showing up on Apps page
  - Change CPU graphs to use "100%" for a fully loaded multi-processor system
  - Show storage, network, and other numbers with 3 digits of precision
  - Add an example bastion container


author: Martin Pitt <martin@piware.de> - 161-1
changelog:
  - New VMs can be created on Machines page
  - VMs running in Kubernetes can now be deleted
  - Improve LVM volume resizing
  - Add new Hardware Information page
  - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu
  - Rename cockpit-ovirt package to cockpit-machines-ovirt
  - Stop advertising and supporting cockpit-bundled jQuery library


author: Martin Pitt <martin@piware.de> - 163-1
changelog:
  - Drop "Transfer data asynchronously" VDO option on Storage page
  - Hide Docker storage pool reset button when it cannot work properly
  - Update jQuery to version 3.3.1 (deprecated cockpit API!)


author: Martin Pitt <martin@piware.de> - 164-1
changelog:
  - Storage: Move NFS management into new details page
  - System: Show available package updates and missing registration
  - System: Fix inconsistent tooltips
  - Logs: Change severities to officially defined syslog levels
  - Machines: Add error notifications
  - Accessibility improvements
  - Reloading the page in the browser now reloads Cockpit package manifests


author: Martin Pitt <martin@piware.de> - 165-1
changelog:
  - Storage: Show more details of sessions and services that keep NFS busy
  - Machines: Detect if libvirtd is not running
  - Machines: Show virtual machines that are being created


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 170-1
changelog:
  - Software Updates: Layout rework
  - oVirt: Use authenticated libvirt connection by default
  - Split out optional packages into new cockpit-appstream dist-git, see
    discussion in RHELPLAN-3661; append "+as" version suffix to avoid collisions
    with cockpit revisions.
  - Temporarily disable cockpit-kubernetes rhbz#1584155


author: Martin Pitt <martin@piware.de> - 171-1
changelog:
  - Machines: Add virtual CPU configuration
  - Kubernetes: Add KubeVirt pod metrics
  - Docker: Show container volumes
  - Fix broken actions for non-administrators
  - Networking: Handle non-running NetworkManager
  - Accounts: User role improvements
  - Localize times


author: Martin Pitt <martin@piware.de> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support


author: Martin Pitt <mpitt@redhat.com> - 173-1
changelog:
  - Storage: Offer installation of VDO
  - Machines: Add disks to a virtual machine
  - Disable cockpit-docker rhbz#1602951


author: marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Fix building with platform-python rhbz#1631174
  - Machines: Fix system VMs with non-root users rhbz#1632772
  - Machines: Offer cockpit-machines as Application


author: Martin Pitt <mpitt@redhat.com> - 181-1
changelog:
  - Fix key typing in file auto complete widget rhbz#1637866
  - Use libvirt-dbus by default rhbz#1637803


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Machines: Manage storage pools
  - Machines: libvirt connection choice during VM creation
  - PackageKit page: Display registration status clearly
  - Drop .map files from -tests, should be only in debuginfo package rhbz#1648953


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Machines: Fix Dialog and tab layouts rhbz#1658490, rhbz#1657119
  - Machines: Fix information popup in vCPU dialog rhbz#1657133
  - Machines: Enforce https:// URLs for remote VM image locations rhbz#1644267
  - Storage: Filesystem labels are validated upfront rhbz#1655580
  - Storage: Some mount options are prefilled when needed
  - Storage: Fix empty tooltips rhbz#1655922


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Machines: Remove useless notifications from disk tab rhbz#1632800
  - Machines: Add deletion and deactivation of storage pools/volumes
    rhbz#1658847, rhbz#1668882, rhbz#1668877
  - Machines: Fix preparation of disk data for disks of type volume rhbz#1661897
  - Machines: Add disk format field when creating new disk xml rhbz#1662213
  - Machines: Fix storage pool state after destroy/undefine rhbz#1663793
  - Machines: Add import of existing images rhbz#1666825
  - Machines: Enable/disable VM autostart rhbz#1670491


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - Storage: Fix pre-filling of vdo fstab options rhbz#1672935
  - Machines: Add PXE boot rhbz#1680973
  - Machines: Add pause/resume rhbz#1680401
  - Machines: Configure boot device order rhbz#1672760
  - Machines: Import existing qcow2 image rhbz#1666825
  - Machines: Edit virtual memory rhbz#1676557
  - Machines: Deletion of storage volumes rhbz#1668882


author: Martin Pitt <mpitt@redhat.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Machines: Auto-detect guest operating system rhbz#1652959
  - Machines: Support https://*.iso installation source rhbz#1684422
  - Machines: Fix crash on VM creation with Edge browser rhbz#1692707
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Machines: Support ISO source from http:// rhbz#1644267
  - Machines: Select destination storage pool on creation rhbz#1658852
  - Machines: Hide iscsi-direct type from create new pool dialog when not
    available rhbz#1709708
  - Machines: Fix handling of storage pools that failed to get active
    rhbz#1715388
  - Machines: Fix OS detection while changing installation source rhbz#1715409


author: Martin Pitt <mpitt@redhat.com> - 197-1
changelog:
  - Machines: Support all storage pool types for new disks
  - Machines: Show available space on host at VM creation
  - Machines: Fix regression on network tab rhbz#1720267


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - New upstream release 219
  - Send key functionality for the virtual machines (rhbz#1693487)
  - Fix dnf-automatic timer parsing (rhbz#1829685)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - machines: Remove --noreboot parameter to virt-install for VM installation
    (rhbz#1750637)
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 224-1
changelog:
  - Translation updates
  - Machines: Remove creation of user account (rhbz#1853918)
  - Machines: Fix reboot after PXE installation (rhbz#1853408, rhbz#1859045)
  - Machines: Fix notification for transient VMs (rhbz#1853649)
  - Machines: Make Storage/Network lists consistent with VM list (rhbz#1854257)
  - Machines: Fix close button on NIC Edit modal dialog header (rhbz#1857044)


author: Matej Marusak <mmarusak@redhat.com> - 224.1-1
changelog:
  - machines: add padding to storage pools list cells (rhbz#1857500)
  - machines: Fix OS autodetection in create VM dialog (rhbz#1862333)
  - machines: Fix TypeError for OSRow in VM creation dialog (rhbz#1862106)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Martin Pitt <mpitt@redhat.com> - 242-1
changelog:
  - Updates: Show subscription status on cloud images (rhbz#1931429)
  - Machines: Allow creation of non-root user for unattended installations (rhbz#1940287)


author: Martin Pitt <mpitt@redhat.com> - 246-1
changelog:
  - Polish of the Storage page
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 248-1
changelog:
  - Machines: Share host files with the guest using virtiofs
  - Machines: Show list of pass-through devices


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - Machines: Fix input for "Target Path" when Creating storage pool (rhbz#1866225)
  - Machines: Don't round or floor memory and storage size unnecessarily (rhbz#1979152)
  - Machines: Use cockpit's proxy API for monitoring libvirt service changes (rhbz#1974223)
  - Machines: Fix ooops when press the down arrow several times when inputting custom path (rhbz#1977554)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Software Updates: Introduce basic kpatch support
  - Software Updates: Handle unregistered RHEL systems with non-CDN OS repository
    (rhbz#1970057)
  - Machines: Read qemu.conf to get spice/vnc address (rhbz#1963701)


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Machines: Parse supported disk bus types from domcapabities (rhbz#1862779)
  - Machines: Stop exposing unattended installation option for ISO installation
    media (rhbz#1868594)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Machines: Now officially supported on Arch Linux (https://archlinux.org/)
  - Machines: Support selecting between consoles of the same type


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 269-1
changelog:
  - Show base-10 units by default (rhbz#1970119)
  - Apps: Fix i18n (rhbz#2018389)
  - Software Updates: Install kpatches only (rhbz#2039989)
  - Machines: Fix deleting net interfaces with non-unique MAC address (rhbz#1867478)
  - Machines: Create disks with random/customizable serial number (rhbz#2036330)
  - Machines: Fix network interface source icon (rhbz#2063680)


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Software Updates: Optionally reboot after updating
   - Machines: Show toast notication if VM's storage deletion fails (rhbz#2105984)


author: Matej Marusak <mmarusak@redhat.com> - 278-1
changelog:
  - Machines: Allow TRIM/UNMAP requests by default for newly added disks
  - Machines: Insert and eject CD & DVD media


author: Katerina Koukiou <kkoukiou@redhat.com> - 283-1
changelog:
  - Machines: Summarize system and user session differences
  - Machines: Virtual watchdog device support


author: Martin Pitt <mpitt@redhat.com> - 284-1
changelog:
  - Storage: Set up a system to use NBDE
  - Machines: Option to forcefully revert a snapshot
  - Fix tabular numbers font


author: Katerina Koukiou <kkoukiou@redhat.com> - 289-1
changelog:
  - Machines: Show an alert when virtualization is disabled in BIOS/EFI
  - Storage: Mounting filesystems at boot time
  - Machines: Create VM based on cloud image and start it later (rhbz#1913548)


author: Martin Pitt <mpitt@redhat.com> - 291-1
changelog:
  - Update to PatternFly 5 Alpha
  - Machines: Option to use RAW volume during VM creation
  - Machines: Redesign VM’s CPU configuration


author: Martin Pitt <mpitt@redhat.com> - 292-1
changelog:
  - Metrics: Add disk IO per service
  - Several right-to-left language fixes
  - Machines: Apply watchdog changes on next boot if hotplug fails


author: Martin Pitt <mpitt@redhat.com> - 295-1
changelog:
  - Machines: Vsock device support
  - Machines: Confirm shutdown actions
  - Machines: Show virtual interface's TAP device


author: Martin Pitt <mpitt@redhat.com> - 296-1
changelog:
  - Machines: Fix "Edit" button CSS for transient VMs (rhbz#2215597)
   - Machines: Fix format detection for CD/DVD images (rhbz#2215599)


author: Martin Pitt <mpitt@redhat.com> - 299-1
changelog:
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Martin Pitt <mpitt@redhat.com> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Dominik Rehak <drehak@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Fix showing remediations when leapp is killed
    Resolves: #1873184
  - Add support of dialog related report entries
    Resolves: #1873608


author: Dominik Rehak <drehak@redhat.com> - 0.1.3-1
changelog:
  - Update to 0.1.3
  - Fix running remediation commands
    Resolves: #1877313
  - Fix showing report when not logged in as superuser
    Resolves: #1859779


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-2
changelog:
  - Updated dependencies regarding rename of binary packages
    in leapp-repository
    Resolves: #2017115


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-3
changelog:
  - Updated dependencies to make possible the upgrade of the package
    during IPU 7 -> 8
  - Resolves: #2037743


author: Bob Mader <bob@redhat.com> - 0.1.7-1
changelog:
  - Update to 0.1.7
  - Make report UI compatible with report-schema 1.2.0
    Resolves: RHEL-55438
  - Fix remediation plan back button behavior
    Resolves: RHEL-30012


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 15-1
changelog:
  - Drop obsolete functionality for Fedora Atomic
  - Localize dates and times
  - Make tests non-destructive, to support gating
  - Fix crash on filtering anonymous images
  - Translation updates
  - Show historical logs


author: Jindrich Novy <jnovy@redhat.com> - 25-3
changelog:
  - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 25-4
changelog:
  - replace docker.io with quay.io for gating tests due do
    docker.io new pull rate limit requirements
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 79-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 80-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 81-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 82-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 83-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: Jira:RHEL-25557


author: Jindrich Novy <jnovy@redhat.com> - 69-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/69
  - use unified spec file
  - Related: #2176055


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077418


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-4
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/3161452)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-5
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/b033cb5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-6
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/75e067e)
  - Related: #1934415


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.0-1
changelog:
  - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a
  standalone package)
  - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.3-1
changelog:
  - Fix labeling on /usr/bin/runc.*
  - Add sandbox_net_domain access to container.te
  - Remove containers ability to look at /etc content


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.4-1
changelog:
  - Add typebounds statement for container_t from container_runtime_t
  - We should only label runc not runc*


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.10-1
changelog:
  - Update to the latest container-selinux patch from upstream
  - Label files under /usr/libexec/lxc as container_runtime_exec_t
  - Give container_t access to XFRM sockets
  - Allow spc_t to dbus chat with init system
  - Allow containers to read cgroup configuration mounted into a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.19-1
changelog:
  - Fix mcs transition problem on stdin/stdout/stderr
  - Add labels for CRI-O
  - Allow containers to use tunnel sockets


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.27-1
changelog:
  -  Allow container runtimes to work with the netfilter sockets
  -  Allow container_file_t to be an entrypoint for VM's
  -  Allow spc_t domains to transition to svirt_t


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.31-1
changelog:
  - Allow the container runtime to dbus chat with dnsmasq
  - add dontaudit rules for container trying to write to /proc


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.37-1
changelog:
  - Allow containers to use inherited ttys
  - Allow ostree to handle labels under /var/lib/containers/ostree


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.39-1
changelog:
  - Allow container runtimes to use interited terminals.  This helps
  satisfy the bounds check of container_t versus container_runtime_t.


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.48-1
changelog:
  - Update policy to match master branch
  - Remove typebounds and replace with nnp_transition and nosuid_transition calls


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.49-1
changelog:
  - Add support for MLS running container runtimes
  - Add missing allow rules for running systemd in a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.55-1
changelog:
  Allow iptables to read container state
      Dontaudit attempts from containers to write to /proc/self
      Allow spc_t to change attributes on container_runtime_t fifo files


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.60-1
changelog:
  - Allow containers to list cgroup directories
  - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.


author: Jindrich Novy <jnovy@redhat.com> - 2:2.134.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.134.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.135.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.135.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.137.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.137.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.138.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.138.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.139.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.139.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.142.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.142.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.143.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.143.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.144.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.144.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.159.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.159.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.160.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.1-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.160.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.160.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.163.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.163.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.165.1-2
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.165.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.168.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.168.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.169.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.169.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.170.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.170.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.171.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.171.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <lsm5@redhat.com> - 2:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - remove dependency on policycoreutils-python-utils as it pulls in python
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.193.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.193.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.211.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.211.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.213.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.213.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.215.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.5.2-2
changelog:
  - upstream moved to github.com/containernetworking/plugins
  - built commit dcf7368
  - provides: containernetworking-plugins
  - use vendored deps because they're a lot less of a PITA
  - excludearch: s390x for now (rhbz#1466865)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179944
  - Resolves: #2187342
  - Resolves: #2187360
  - Resolves: #2203693
  - Resolves: #2207506


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1-8
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-19
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1-36
changelog:
  - remove aardvark-dns and netavark - packaged separately
  - update vendored components and configuration files
  - Related: #2061390


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-5
changelog:
  - Update to the latest upstream commit 47216437e79a
  - ("Fix "net" command on kernel configured with CONFIG_IPV6=m")


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-8
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  - Fix invalid structure size error during crash startup on ppc64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Lianbo Jiang <lijiang@redhat.com> - 1.0.7-2
changelog:
  - Fix for "current buffer not found"
  - Fix for "invalid kernel virtual address: 0  type: struct topa_entry"
  - Fix for "invalid ring_buffer"
    Resolves: rhbz#1838927


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.130-6
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove owneship of %{_fontdir} in -common
  - Remove group tag


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-6
changelog:
  - Set cost for text filters to 200 so that the paps filter gets
    preference for the time being (bug #988909).


author: Tim Waugh <twaugh@redhat.com> - 1.0.36-3
changelog:
  - Upstream patch to re-work filter costs (bug #998977). No longer need
    text filter costs patch as paps gets used by default now if
    installed.


author: Tim Waugh <twaugh@redhat.com> - 1.0.41-4
changelog:
  - Adjust filter costs so application/vnd.adobe-read-postscript input
    doesn't go via pstotiff (bug #1008166).


author: Tim Waugh <twaugh@redhat.com> - 1.0.54-2
changelog:
  - Fix build issue (bug #1106101).
  - Don't use grep's -P switch in pstopdf as it needs execmem (bug #1079534).
  - Return work-around patch for bug #768811.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-3
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Christian Heimes <cheimes@redhat.com> - 0.2.0-4
changelog:
  - Add missing runtime requirement on python[23]-systemd.
  - Drop unnecesary build dependency on python%{python3_pkgversion}-configparser.
  - Fix tests, don't try to download dnspython3.


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Run tests with global site packages
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-2
changelog:
  - Run Custodia daemon with Python 3
  - Resolves: Bug 1426737 - custodia: Provide a Python 3 subpackage


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-2
changelog:
  - Skip etcd store on PPC64
  - Add missing pre/post install hooks for systemd service
  - Custodia 0.5 is compatible with FreeIPA 4.4.5 and newer
  - Drop custodia user from tmpfiles.d conf


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.5.10-1
changelog:
  - Initial update to the 2.5 series.
  - Significant spec cleanups.
  - Add sscg dep and follow
    https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup for initial
    cert generation.
  - Change default conf to use the system crypto policy.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-1
changelog:
  - Initial attempt at importing 3.0.  Many new dependencies.
  - Use a stock sample imapd.conf file instead of a Fedora-provided one.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-2
changelog:
  - Add patch to fix up some endianness issues.
  - Enable both test suites on all architectures.
  - Add arch-specific excludes for a few Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-3
changelog:
  - Remove clamav from build requirements.
  - Add --cleanup to Cassandane call to hopefully reduce build disk usage.
  - Disable maxforkrate test on s390x; our builders are too slow to run it.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-5
changelog:
  - Use proper path to ctl_mboxlist in cron file.
  - Add patch to increase individual test timeout.  Sometimes armv7hl can't
    complete a single test in 20 seconds.
  - Disable the Metronome tests; upstream says that they just won't reliably on
    shared hardware.
  - Don't bother running Cassandane on s390x for now.  The machines are simply
    too slow.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-6
changelog:
  - Rename two commands: quota -> cyr_quota, restore -> cyr_restore.
  - Fix Cassandane to handle those renames.
  - Fix location of cyr_fetchnews.
  - Fix Perl 5.26-related module linking issue which caused a test failure.
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1461669


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-7
changelog:
  - Add old /usr/lib/cyrus-imapd directory to the utils package and add a symlink
    there to the deliver binary.  This should help a bit with migrations.
  - Add upstream patch to fix reconstruct failures on 32-bit architectures.
    Re-enable those five Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-2
changelog:
  - Exclude one more test from 32-bit arches.  Looks like this failure crept in
    with the Cassandane update.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-3
changelog:
  - Patch the provided imapd.conf and cyrus.conf to more closely match previous
    Fedora defaults and directories included in this package and to enable
    features which are supported by the Fedora build.
  - Add tmpfiles.d configuration file for directories in /run.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-5
changelog:
  - Add two patches from upstream which fix JMAPCalendars issues on 32-bit and
    big-endian architectures.
  - Clean up test invocation and exclusion list.  More tests pass now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.3-1
changelog:
  - Update to 3.0.3, which contains an important security fix.  The fix is not
    embargoed but no CVE has been assigned yet.
  - Drop patches merged upstream.
  - An update of imaptest has resulted in three additional cassandane failures,
    reported upstream as https://github.com/cyrusimap/cyrus-imapd/issues/2087.
    In order to get the security fix out without delay, those three tests have been
    disabled.


author: Pavel Zhukov <landgraf@fedoraproject.org> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Patched cassandane for new behaviour. It should be updated idealy.
  - Disable ImapTest.urlauth2 test; it seems to fail randomly regardless of
    architecture.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.4-3
changelog:
  - Rebuild for new libical.
  - Add patch to fix compilation error with new libical.
  - Disable two tests which fail due to the new libical.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-3
changelog:
  - Re-enable clamav and mariadb support as those are now built with openssl 1.1.
  - But no clamav on ppc64 because of
    https://bugzilla.redhat.com/show_bug.cgi?id=1534071


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-5
changelog:
  - Add patch to fix segfaults in squatter.
  - Exclude one test on all releases instead of just F28+.
  - Remove --cleanup from cassandane invocation.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-6
changelog:
  - Update cassandane checkout.
  - Add two new build dependencies.
  - Remove all JMAP-related tests from the exclusion lists, since cassandane no
    longer runs any JMAP tests on cyrus 3.0.
  - Collapse unused test skip lists.
  - Add ten additional skipped tests, after consultation with upstream.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-10
changelog:
  - Update cassandane checkout to fix a test that was broken by DST.
  - Add patch to fix sieve scripts for usernames containing a dot.
  - Disable imaptest in cassandane until
    https://bugzilla.redhat.com/show_bug.cgi?id=1562970 is fixed.
  - Re-enable tests on s390; it seems to be better now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-11
changelog:
  - Re-enable imaptest on >= F29.
  - F29's imaptest fixes several bugs, allowing all tests to be run there.
  - Relocate cassandane base port to hopefully work better in koji.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-12
changelog:
  - Update list of excluded tests.
  - Update Cassandane snapshot; use new base_port config setting.  No need to
    patch that in now.
  - Add four new expected-to-fail tests from new Cassandane snapshot.
  - Add patch to collect extra Cassandane logging in case we hit some of those
    sporadic failures again.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.6-1
changelog:
  - Update to 3.0.6.
  - Remove upstreamed patches and renumber the rest.
  - Disable one new failing test:
    https://github.com/cyrusimap/cyrus-imapd/issues/2332


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-3
changelog:
  - Skip an additional test as it's breaking in the CI system.
  - Modify the name of the patch.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: David Benoit <dbenoit@redhat.com> - 1.21.2-4
changelog:
  - Skip tests in %check due to incompatible Go version in buildroot (temporary).
  - Resolves: RHEL-59518


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 3.0.103-1.inferit
changelog:
  - Fix re-declarations of builtin functions with clang 10
  - Add missing constructor (fix build)
  - Fix runtime_id


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-1
changelog:
  - Fixed debuginfo going to separate package (Patch1)
  - Added F25/F26 RIL and fixed the version info (Patch2)
  - Added F25/F26 RIL in Microsoft.NETCore.App suported runtime graph (Patch3)
  - SPEC file cleanup


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-2
changelog:
  - SPEC cleanup
  - git removal (using all tarballs for reproducible builds)
  - more reasonable versioning


author: Omair Majid <omajid@redhat.com> - 2.0.0-2
changelog:
  - Move libicu/libcurl/libunwind requires to runtime package
  - Make sdk depend on the exact version of the runtime package


author: Omair Majid <omajid@redhat.com> - 2.0.3-4
changelog:
  - Add a test script to sanity check debug and symbol info.
  - Build with clang 5.0
  - Make main package real instead of using a virtual provides (see RHBZ 1519325)


author: Omair Majid <omajid@redhat.com> - 2.1.403-2
changelog:
  - Disable telemetry by default
  - Users have to manually export DOTNET_CLI_TELEMETRY_OPTOUT=0 to enable


author: Omair Majid <omajid@redhat.com> - 3.0.0-0.6.preview6
changelog:
  - Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
  - Set dotnet installation location in /etc/dotnet/install_location
  - Update targeting packs
  - Install managed symbols
  - Completely conditionalize libunwind bundling


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.16.preview9
changelog:
  - Fix files duplicated between dotnet-apphost-pack-3.0 and dotnet-targeting-pack-3.0
  - Fix dependencies between .NET SDK and the targeting packs


author: Omair Majid <omajid@redhat.com> - 5.0.104-2
changelog:
  - Mark files under /etc/ as config(noreplace)
  - Add an rpm-inspect configuration file
  - Add an rpmlintrc file
  - Enable gating for release branches and ELN too


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.3
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-2958


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: - John W. Linville <linville@redhat.com> - 1.7.0-2
changelog:
  - Use EXTRA_CFLAGS to include standard Fedora compiler flags in build
  - Set CONFIG_RTE_MACHINE=default to build for least-common-denominator machines
  - Turn-off build of librte_acl, since it does not build on default machines
  - Turn-off build of physical device PMDs that require kernel support
  - Clean-up the install rules to match current packaging
  - Correct changelog versions 1.0.7 -> 1.7.0
  - Remove ix86 from ExclusiveArch -- it does not build with above changes


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-4
changelog:
  - Copy the headers instead of broken symlinks into -devel package
  - Force sane mode on the headers
  - Avoid unnecessary %exclude by not copying unpackaged content to buildroot
  - Clean up summaries and descriptions
  - Drop unnecessary kernel-devel BR, we are not building kernel modules


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-5
changelog:
  - Avoid unnecessary use of %global, lazy expansion is normally better
  - Drop unused destdir macro while at it
  - Arrange for RTE_SDK environment + directory layout expected by DPDK apps
  - Drop config from main package, it shouldn't be needed at runtime


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-6
changelog:
  - Avoid variable expansion in the spec here-documents during build
  - Drop now unnecessary debug flags patch
  - Add a spec option to build a combined library


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-7
changelog:
  - Policy compliance: move static libraries to -devel, provide dpdk-static
  - Add a spec option to build as shared libraries


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-2
changelog:
  - Enable librte_vhost, which buildrequires fuse-devel
  - Enable physical NIC drivers that build (e1000, ixgbe) for VFIO use


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-3
changelog:
  - Fix -Wformat clash preventing i40e driver build, enable it
  - Fix -Wall clash preventing enic driver build, enable it


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-5
changelog:
  - Add DT_NEEDED for external dependencies (pcap, fuse, dl, pthread)
  - Enable combined library creation, needed for OVS
  - Enable shared library creation, needed for sanity


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-10
changelog:
  - Drop symbol versioning patches, always do library version for shared
  - Add comment on the combined library thing


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1695.gitc2ce3924.1
changelog:
  - Add spec magic to easily switch between stable and snapshot versions
  - Add tarball snapshot script for reference
  - Update to pre-2.0 git snapshot


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.2
changelog:
  - Move config changes from spec after "make config" to simplify things
  - Move config changes from dpdk-config patch to the spec


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.3
changelog:
  - Add spec option to build kernel modules too
  - Build eventfd-link module too if kernel modules enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1906.git00c68563.1
changelog:
  - New snapshot
  - Remove bogus devname module alias from eventfd-link module
  - Whack evenfd-link to honor RTE_KERNELDIR too


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1911.gitffc468ff.1
changelog:
  - New snapshot
  - Disable kernel module build by default
  - Add patch to fix missing defines/includes for external applications


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2049.git2f95a470.1
changelog:
  - New snapshot
  - Add spec option for enabling vhost-user instead of vhost-cuse
  - Build requires fuse-devel only with vhost-cuse
  - Add virtual provide for vhost user/cuse tracking


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2086.git263333bb.2
changelog:
  - Switch (back) to vhost-user, thus disabling vhost-cuse support
  - Build requires fuse-devel for now even when fuse is unused


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-2
changelog:
  - Remove the broken kmod stuff
  - Add a new dkms-based eventfd_link subpackage if vhost-cuse is enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-3
changelog:
  - Dont depend on fuse when built for vhost-user support
  - Drop version from testpmd binary, we wont be parallel-installing that


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-4
changelog:
  - Drop unused pre-2.0 era patches
  - Handle vhost-user/cuse selection automatically based on the copr repo name


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-7
changelog:
  - Drop pointless build conditional, the linker script is here to stay
  - Drop vhost-cuse build conditional, vhost-user is here to stay
  - Cleanup comments a bit
  - Enable parallel build again
  - Dont build examples by default


author: Panu Matilainen <pmatilai@redhat.com> - 2.1.0-1
changelog:
  - Update to dpdk 2.1.0 final
    - Disable ABI_NEXT
    - Rebase patches as necessary
    - Fix build of ip_pipeline example
    - Drop no longer needed -Wno-error=array-bounds
    - Rename libintel_dpdk to libdpdk


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-1
changelog:
  - Update DPDK to 2.2.0 final
  - Add README and MAINTAINERS docs
  - Adopt new upstream standard installation layout, including
    dpdk_nic_bind.py renamed to dpdk_nic_bind
  - Move the unversioned pmd symlinks from libdir -devel
  - Establish a driver directory for automatic driver loading
  - Disable CONFIG_RTE_SCHED_VECTOR, it conflicts with CONFIG_RTE_MACHINE default
  - Disable experimental cryptodev library
  - More complete dtneeded patch
  - Make option matching stricter in spec setconf
  - Update driverctl to 0.59


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-2
changelog:
  - Use a different quoting method to avoid messing up vim syntax highlighting
  - A string is expected as CONFIG_RTE_MACHINE value, quote it too
  - Enable librte_vhost NUMA-awareness


author: Panu Matilainen <pmatilai@redhat.com> - 16.07-1
changelog:
  - Update to DPDK 16.07 (#1383195)
  - Disable unstable bnx2x driver (#1330589)
  - Enable librte_vhost NUMA support again (#1279525)
  - Enable librte_cryptodev, its no longer considered experimental
  - Change example prefix to dpdk- for consistency with other utilities
  - Update driverctl to 0.89


author: John W. Linville <linville@redhat.com> - 16.11.2-3
changelog:
  - Enable i40e driver in PowerPC along with its altivec intrinsic support
  - Add PCI probing support for vfio-pci devices in Power8


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Jens Freimann <jfreimann@redhat.com> - 18.11.2-3
changelog:
  - Add fix for wrong pointer calculation to fix Covscan issue
  - https://cov01.lab.eng.brq.redhat.com/covscanhub/task/135452/log/added.html


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Coty Sutherland <csutherl@redhat.com> - 1:4.20-10
changelog:
  - Drop unnecessary javax16.api.jar (again)
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Laszlo Ersek <lersek@redhat.com> - 20140723-1.git3facc08.el7
changelog:
  - rebase from upstream a618eaa to 3facc08
  - update to openssl-0.9.8za
  - drop downstream-only split varstore patch, rely on upstream's


author: Laszlo Ersek <lersek@redhat.com> - 20140822-1.git9ece15a.el7
changelog:
  - rebase from upstream 3facc08 to 9ece15a
  - update to openssl-0.9.8zb
  - update to FatPkg SVN r86 (git 2355ea2c)
  - the following patches of Paolo Bonzini have been merged in upstream; drop the
    downstream-only copies:
    7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH
    d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2
            checkout
    1c023eb BuildEnv: remove useless check before setting $WORKSPACE
  - include the following patches that have been pending review on the upstream
    list for a long time:
    [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369
    [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515
  - nasm is a build-time dependency now because upstream BuildTools has started
    to call it directly


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-2.git9ece15a
changelog:
  - ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784]
  - ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784]
  - ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784]
  - ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592]
  - ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592]
  - ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592]
  - ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296]
  - ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296]
  - ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294]
  - ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294]
  - Resolves: bz#1145784
    (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce)
  - Resolves: bz#1147592
    (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary)
  - Resolves: bz#1148294
    (drop OvmfPkg's stale fork of SecureBootConfigDxe)
  - Resolves: bz#1148296
    (provide a non-interactive way to auto-enroll important SecureBoot certificates)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-3.git9ece15a.el7
changelog:
  - ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927]
  - ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927]
  - ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927]
  - Resolves: bz#1153927
    (set NEXTBOOT to uefi setting failed from Windows Recovery console)


author: Laszlo Ersek <lersek@redhat.com> - AAVMF-20141113-1.git77d5dac
changelog:
  - rebased to upstream 77d5dac
    <https://bugzilla.redhat.com/show_bug.cgi?id=1162314#c1>
  - patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION"
    is now upstream (SVN r16219, git edb5073)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-4.git9ece15a.el7
changelog:
  - ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314]
  - ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314]
  - Resolves: bz#1162314
   (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-6.git9ece15a.el7
changelog:
  - ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027]
  - Resolves: bz#1166027
    (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit")


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-7.git9ece15a.el7
changelog:
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971]
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971]
  - Resolves: bz#1166971
    (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20151104-1.gitb9ffeab.el7
changelog:
  - rebase to upstream b9ffeab
  - Resolves: bz#1207554
    ([AAVMF] AArch64: populate SMBIOS)
  - Resolves: bz#1270279
    (AAVMF: output improvements)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160202-1.gitd7c0dfa.el7
changelog:
  - rebase to upstream d7c0dfa
  - update OpenSSL to 1.0.2e (upstream)
  - update FatPkg to SVN r97 (upstream)
  - drive NVMe devices (upstream)
  - resize xterm on serial console mode change, when requested with
    -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y
    (downstream)
  - Resolves: bz#1259395
    (revert / roll back AAVMF fix for BZ 1188054)
  - Resolves: bz#1202819
    (OVMF: secure boot limitations)
  - Resolves: bz#1182495
    (OVMF rejects iPXE oprom when Secure Boot is enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160202-2.gitd7c0dfa.el7
changelog:
  - ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678]
  - ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678]
  - ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678]
  - ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678]
  - ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


