# changelog

author: Dan Walsh <dwalsh@redhat.com> 1.2-1
changelog:
  - Vendor in latest containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Add registries.conf link to a few man pages


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.4-2
changelog:
  - use the mainline 1.16.4 buildah release as starting point for 8.4.0
    not the content from upstream branch yet
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/06e091b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/af31e45)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/d1e9240)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.1-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.20.1
  - sync tests with Fedora
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/a0853c3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5119393)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/162fbaf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f30b420)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/c3a3fe8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f629ded)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/2a83637)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/19d3065)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/df14b1c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d677bf0)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8a6d840)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/4fa566e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/bbbe10a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d08dbe7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/9c7f50b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8d08247)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d99221f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/30c07b7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/db16262)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5181b9c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/802a904)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/6d5d1ae)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3a0b52f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/6bc611d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c7d828f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3ed5d8e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/30a10f3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/9c83683)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Dan Walsh <dwalsh@redhat.com> 0.2.0-1.gitac2aad6
changelog:
  -   buildah run: Add support for -- ending options parsing 
  -   buildah Add/Copy support for glob syntax
  -   buildah commit: Add flag to remove containers on commit
  -   buildah push: Improve man page and help information
  -   buildah run: add a way to disable PTY allocation
  -   Buildah docs: clarify --runtime-flag of run command
  -   Update to match newer storage and image-spec APIs
  -   Update containers/storage and containers/image versions
  -   buildah export: add support
  -   buildah images: update commands
  -   buildah images: Add JSON output option
  -   buildah rmi: update commands
  -   buildah containers: Add JSON output option
  -   buildah version: add command
  -   buildah run: Handle run without an explicit command correctly
  -   Ensure volume points get created, and with perms
  -   buildah containers: Add a -a/--all option


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to the version in FreeBSD CVS - it's actively maintained, unlike
    the 1993 4BSD version we used to have


author: Petr Machata <pmachata@redhat.com> - 1.9.20050813-1
changelog:
  - Thomas Dickey's 20050813 version of byacc:
    - own build system (linux patch reverted)
    - use tmpfile (security patch reverted)
  - Tidy up the specfile per rpmlint comments


author: Matthias Saou <http://freshrpms.net/> 1.9.20050813-2
changelog:
  - Update summary.
  - Remove useless doc copying in install section.
  - Add NOTES and NO_WARRANTY docs.


author: Petr Machata <pmachata@redhat.com> - 1.9.20100610-1
changelog:
  - Rebase to 20100610
  - Update the description in accordance with upstream spec template
  - Resolves: #643598


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.4-2
changelog:
  - Enable some tests during build
  - Fix generated requires by filtering requires for bundled libs.
  - Split maven plugin into separate package.


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kristian Høgsberg <krh@redhat.com> - 0.2.0-1
changelog:
  - Incorporate changes suggested by katzj: Require: ldconfig and run it
    in %post and %postun, don't pass CFLAGS to make.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-1
changelog:
  - Update to cairo 0.5.1.
  - Remove gtk-doc files, since --disable-gtk-doc doesn't work.
  - Disable gtk-doc and add freetype and fontconfig BuildRequires.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-2
changelog:
  - Package gtk docs as part of devel package.
  - Nuke static library.
  - Update devel files so /usr/include/cairo is owned by devel package.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-4
changelog:
  - Add more missing devel package requires (libpng-devel and
    xorg-x11-devel) (#161688)
  - Add Owens patch (cairo-0.5.1-bitmap-fonts.patch) to make bitmap
    fonts work with cairo (#161653).


author: Kristian Høgsberg <krh@redhat.com> - 0.6.0-2
changelog:
  - Add cairo-0.6.0-font-options-to-scaled-font.patch to make sure font
    cache eviction works correctly (#164664).


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Update to cairo 0.9.2.  Add Obsoletes: for libpixman <= 0.1.6.
  - Drop cairo-0.6.0-font-options-to-scaled-font.patch.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Also obsolete libpixman-debuginfo.
  - Add cairo-0.9.2-cache-eviction-fix.patch to fix ft font cache eviction.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-3
changelog:
  - Add cairo-0.9.2-dont-hash-null-string.patch to avoid crash when
    creating a cairo font from a FT_Face.


author: Kristian Høgsberg <krh@redhat.com> - 1.0.0-1
changelog:
  - Update to cairo-1.0.0.
  - Drop cairo-0.9.2-cache-eviction-fix.patch and
    cairo-0.9.2-dont-hash-null-string.patch.


author: Carl Worth <cworth@redhat.com> - 1.1.2-1
changelog:
  - Update to new upstream 1.1.2
  - Port forward the embedded bitmaps patch (now committed upstream to
    1.1.3)
  - Drop build-fix and chunk-glyphs patches which now come from upstream


author: Carl Worth <cworth@redhat.com> - 1.1.2-2
changelog:
  - Add suggested patch for XRenderAddGlyphs crash of bug #4705
    https://bugs.freedesktop.org/show_bug.cgi?id=4705


author: Carl Worth <cworth@redhat.com> - 1.1.4-1
changelog:
  - Update to new upstream 1.1.4
  - Drop both embedded-bitmaps and XRenderAddGlyphs patches as both now
    have upstream versions


author: Carl Worth <cworth@redhat.com> - 1.1.4-2
changelog:
  - Revert upstream commit that introduced a dependency on a newer
    poppler version for the PDF tests.


author: Ray Strode <rstrode@redhat.com> - 1.2.2-2
changelog:
  - add lame libXt-devel BuildReq to get things building again.
  - small spec tweaks to follow conventions


author: Behdad Esfahbod <besfahbo@redhat.com> 1.2.2-3
changelog:
  - Remove unnecessary --disable-* arguments to configure, add --enable-*
    for those backends we really want to make sure are enabled.


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: Adam Jackson <ajax@redhat.com> 1.12.6-2
changelog:
  - *-x{c,li}b-Don-t-crash-when-swapping-a-0-sized-glyph.patch: Fix some
    crashes when client and server endian don't match.


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 0.6.0-1
changelog:
  - New upstream version should fix the upstream issues like AUTHORS and README
  - Added pkgconfig to cairomm BuildRequires and cairomm-devel Requires
  - Replaced makeinstall
  - Fixed devel package description
  - Modified includedir syntax
  - docs included via the mv in install and in the devel files as html dir


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.1.10-1
changelog:
  - First release for cairo 1.2
  - Adjusted cairo dependencies for new version
  - Docs were in html, moved to reference/html


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.4.2-1
changelog:
  - New upstream release
  - Changed install to preserve timestamps
  - Removed mv of docs/reference and include files directly


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.9.1-1
changelog:
  - New upstream release
  - Removed html docs from -devel package
  - Seperated requires into one per line
  - Fixed devhelp docs


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.9.8-1
changelog:
  - upstream 1.9.8
  - fix issues with f15/rawhide (RHBZ #676878)
  - drop gtk-doc dependency (RHBZ #604169)


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: gil cattaneo <puntogil@libero.it> 1.1-10
changelog:
  - rebuilt for upgrade el apis gid:aid (rhbz#1223468)
  - adapt to current guideline
  - use mvn()-like BRs
  - fix rpmlint problem in changelog entries


author: Peter Jones <pjones@redhat.com>
changelog:
  - updated package for alpha9.7, based on input from:
    Monty <xiphmont@xiph.org> 
    David Philippi <david@torangan.saar.de>


author: Peter Jones <pjones@redhat.com>
changelog:
  - update package to provide cdparanoia-alpha9.7-2.*.rpm and 
    cdparanoia-devel-alpha9.7-2.*.rpm.  Also, URLs point at xiph.org
    like they should.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Switched spec file from the one used in Red Hat Linux 6.2, which
    also changes the name
  - gzip man page


author: Peter Jones <pjones@redhat.com> alpha9.8-5
changelog:
  - make a -libs package which contains the .so files
  - make the cdparanoia dependancy towards that, not -devel


author: Peter Jones <pjones@redhat.com> alpha9.8-23
changelog:
  - "This time, with a meaningful changelog" release.  Just like -22.
  - new SG_IO code in rawhide.  This means ripping will no longer use the 
    "cooked ioctl" mode that it has since we moved to 2.6, instead utilizing
    the real scsi-based command set to talk to most drives.  This should
    result in better error correction handling, and usage of much more
    commonly used kernel features.
  - environment variable "CDDA_TRANSPORT" added.  If you set this to "cooked",
    cdparanoia will try to use the "cooked ioctl" mode instead of SCSI/SG_IO
    based modes first, and then fall back to SG_IO.
  - It'd be good if this got some testing.  A prior version of the SG_IO code
    was known to fail on some USB drives.  This version should mitigate that
    quite a bit, but I lack the hardware to test it for sure.


author: Adam Jackson <ajax@redhat.com> alpha9.8-29
changelog:
  - cdparanoia-III-alpha9.8.scsi-setspeed.patch: Allow setting the speed of
    SCSI CD drives. (#431178)


author: Adam Jackson <ajax@redhat.com> alpha9.8-30
changelog:
  - Add -Werror-implicit-function-declarations.
  - cdparanoia-III-alpha9.8-headers.patch: Fix the resulting errors.


author: Adam Jackson <ajax@redhat.com> 10.2-3
changelog:
  - cdparanoia-10.2-endian.patch: Backport a crash fix for host/drive
    endianness mismatch. (#466659)


author: Matthias Saou <http://freshrpms.net/> 10.2-6
changelog:
  - Fix all of the problems detected during the review which aren't acceptable
    according to the current policies and guidelines (part of #225638).
  - Don't prefix summaries with "A" nor suffix them with a dot.
  - Move .so symlink to the devel sub-package (#203620).
  - Add highest known version to the cdparanoia-III obsoletes.
  - Remove incorrect buildroot removal from %build.
  - Use acceptable %clean section.
  - Provide cdparanoia-static in the devel sub-package since the *.a is there.
  - Use single-command scriplet syntax for /sbin/ldconfig calls.
  - Escape all macros in changelog.
  - Include license file since it is present with the sources.


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - gtk-- does not wokr on the alpha, so we have no xcdrdao for it.
  - cheesy workaround for the broken tar archive


author: Tim Powers <timp@redhat.com>
changelog:
  - removed all references to xcdrdao, we don't ship it. So no applnk, no gtkmm
    requirements either.


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated to 1.1.5
  - Updated endianness patch for ia64
  - s/Copyright/License/ in specfile
  - Changed to bz2 compression for smaller sources
  - Fixed BuildRoot line (was hard coded)


author: Mike A. Harris <mharris@redhat.com> 1.1.5-2
changelog:
  - Bumped release and rebuilt so rawhide package doesn't release number
    conflict with previous 1.1.5-1 package built against 7.2


author: Denis Leroy <denis@poolshark.org> - 1.2.3-0.rc2.1
changelog:
  - Update to latest 1.2.3 release candidate
  - Merged with gcdmaster spec file
  - Added scripts to manage gcdmaster new schemas file
  - Moved desktop file fix into patch
  - Added patch to fix gcc 4.4 compile


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.2.3-4
changelog:
  - Merge review #225639
  - no need option --with-mp3-support. it needs libmad(don't ship)
  - change license to GPLv2+


author: Harald Hoyer <harald@redhat.com> - 1.1.6-4
changelog:
  - play stupid tricks, to let alternatives make the links and
    rpm not removing them afterwards
  - removed bogus warning for "." and ".."


author: Roman Rakus <rrakus@redhat.com> - 1.1.8-1
changelog:
  - Version 1.1.8 - old patches included
                  - added bzip2-devel to build requirements
  - fixed #171510 - preserve directory permissions


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Honza Horak <hhorak@redhat.com> 1.1.11-2
changelog:
  - fixed man page missing arguments (Resolves: #647024)
    https://bugzilla.redhat.com/show_bug.cgi?id=647024
  - fixed erroneous "Unknown file type (unallocated)" warning 
    (Resolves: #174667)
    https://bugzilla.redhat.com/show_bug.cgi?id=174667


author: Honza Horak <hhorak@redhat.com> - 1.1.11-4
changelog:
  - Library libusal is installed in order to be used by other apps
    (Resolves: #588508)
    https://bugzilla.redhat.com/show_bug.cgi?id=588508


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-28
changelog:
  - libusal: added /dev/srN next to /dev/scdN path when scanning for devices
    added cdrkit-1.1.11-devname.patch
    bz#1053056


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Jonathan Dieter <jdieter@lesbg.com> 0.19.1-2
changelog:
  - Add missing libhadoopcephfs.so* to file list
  - Add COPYING to all subpackages
  - Fix ownership of /usr/lib[64]/ceph
  - Enhance description of fuse client


author: Sage Weil <sage@newdream.net> 0.19.1-5
changelog:
  - Remove java deps (no need to build hadoop by default)
  - Include all required librados helpers
  - Include fetch_config sample
  - Include rbdtool
  - Remove misc debugging, test binaries


author: Steven Pritchard <steve@kspei.com> 0.21.1-1
changelog:
  - Update to 0.21.1.
  - Sample configs moved to /usr/share/doc/ceph/.
  - Added cclass, rbd, and cclsinfo.
  - Dropped mkmonfs and rbdtool.
  - mkcephfs moved to /sbin.
  - Add libcls_rbd.so.


author: David Nalley <david@gnsa.us> 0.37-1
changelog:
  - create /etc/ceph - bug 745462
  - upgrading to 0.37, fixing 745460, 691033
  - fixing various logrotate bugs 748930, 747101


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.61.7-3
changelog:
  - let base package include all its documentation files via %doc magic,
    so for Fedora 20 Unversioned Docdirs no files are included accidentally
  - include the sample config files again (instead of just an empty docdir
    that has been added for #846735)
  - don't include librbd.so.1 also in -devel package (#1003202)
  - move one misplaced rados plugin from -devel into -libs package (#891993)
  - include missing directories in -devel and -libs packages
  - move librados-config into the -devel pkg where its manual page is, too
  - add %_isa to subpackage dependencies
  - don't use %defattr anymore
  - add V=1 to make invocation for verbose build output


author: Ken Dreyer <ken.dreyer@inktank.com> 0.72.2-1
changelog:
  - Update to latest stable upstream release
  - Use HTTPS for URLs
  - Submit Automake 1.12 patch upstream
  - Move unversioned shared libs from ceph-libs into ceph-devel


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-1
changelog:
  - Bump the Epoch, we need to keep the latest stable, not development, ceph version in fedora
  - Use the upstream spec file with the ceph-libs split
  - Add libs-compat subpackage [1116546]
  - use fedora in rhel 7 checks
  - obsolete libcephfs [1116614]
  - depend on redhat-lsb-core for the initscript [1108696]


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-5
changelog:
  - Do not require xfsprogs/xfsprogs-devel for el6
  - Require gperftools-devel for non-ppc*/s390* architectures only
  - Do not require junit -- no need to build libcephfs-test.jar
  - Build without libxfs for el6
  - Build without tcmalloc for ppc*/s390* architectures
  - Location of mkcephfs must depend on a rhel release
  - Use epoch in the Requires fields [1130700]


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-8
changelog:
  - Revert the previous change
  - Fix bz 1118504, second attempt (yasm appears to be the package that caused this
  - Fix bogus dates


author: Petr Machata <pmachata@redhat.com> - 1:0.87-2
changelog:
  - Rebuild for boost 1.57.0
  - Include <boost/optional/optional_io.hpp> instead of
    <boost/optional.hpp>.  Keep the old dumping behavior in
    osd/ECBackend.cc (ceph-0.87-boost157.patch)


author: Boris Ranto <branto@redhat.com> - 1:0.87.1-1
changelog:
  - Rebase to latest upstream
  - Remove boost patch, it is in upstream tarball
  - Build with yasm, tarball contains fix for the SELinux issue


author: Boris Ranto <branto@redhat.com> - 1:0.87.1-2
changelog:
  - Perform a hardened build
  - Use git-formatted patches
  - Add patch for pthreads rwlock unlock problem
  - Do not remove conf files on uninstall
  - Remove the cleanup function, it is only necessary for f20 and f21


author: Boris Ranto <branto@redhat.com> - 1:0.94.3-1
changelog:
  - Rebase to latest upstream version
  - The boost patch got merged upstream and is already present in the release


author: Boris Ranto <branto@redhat.com> - 1:0.94.4-1
changelog:
  - Rebase to latest upstream version
  - The rtdsc patch got merged upstream and is already present in the release


author: Richard W.M. Jones <rjones@redhat.com> - 1:9.2.0-5
changelog:
  - Fix large startup times of processes linking to -lrbd.
    Backport upstream commit 1c2831a2, fixes RHBZ#1319483.
  - Add workaround for XFS header brokenness.


author: Boris Ranto <branto@redhat.com> - 1:10.2.1-1
changelog:
  - New version (1:10.2.1-1)
  - Disable erasure_codelib neon build
  - Do not use -momit-leaf-frame-pointer flag


author: Boris Ranto <branto@redhat.com> - 1:10.2.2-1
changelog:
  - New version (1:10.2.2-1)
  - Disable erasure_codelib neon build
  - Do not use -momit-leaf-frame-pointer flag


author: Boris Ranto <branto@redhat.com> - 1:10.2.4-1
changelog:
  - New version (1:10.2.4-1)
  - Disable erasure_codelib neon build
  - Use newer -devel package format
  - Sync up the spec file


author: Boris Ranto <branto@redhat.com> - 1:10.2.4-2
changelog:
  - New version (1:10.2.4-2)
  - This syncs up with the upstream 10.2.5
  - Doing it this way because of broken lookaside cache
  - Fix the -devel obsoletes


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 1:12.1.1-4
changelog:
  - 12.1.1 w/ hacks for armv7hl: low mem, no java jni
  - WTIH_BABELTRACE -> WITH_BABELTRACE for all archs
  - still no fix for ppc64


author: Nalin Dahyabhai <nalin@redhat.com> 0.5-1
changelog:
  - update to 0.5
    - packaging fixes
    - add a selfsign-getcert client
    - self-signed certs now get basic constraints and their own serial numbers
    - accept id-ms-kp-sc-logon as a named EKU value in a request


author: Nalin Dahyabhai <nalin@redhat.com> 0.6-1
changelog:
  - update to 0.6
    - man pages
    - 'getcert stop-tracking' actually makes the server forget now
    - 'getcert request -e' was redundant, dropped the -e option
    - 'getcert request -i' now sets the request nickname
    - 'getcert start-tracking -i' now sets the request nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.7-1
changelog:
  - update to 0.7
    - first cut at a getting-started document
    - refactor some internal key handling with NSS
    - check for duplicate request nicknames at add-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.8-1
changelog:
  - update to 0.8
    - encode windows UPN values in requests correctly
    - watch for netlink routing changes and restart stalled submission requests
    - 'getcert resubmit' can force a regeneration of the CSR and submission


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-1
changelog:
  - update to 0.9
    - run external submission helpers correctly
    - fix signing of signing requests generated for keys stored in files
    - only care about new interface and route notifications from netlink,
      and ignore notifications that don't come from pid 0
    - fix logic for determining expiration status
    - correct the version number in self-signed certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.11-1
changelog:
  - update to 0.11
    - add XML-RPC submission for certmaster and IPA
    - prune entries with duplicate names from the data store


author: Nalin Dahyabhai <nalin@redhat.com> 0.12-1
changelog:
  - update to 0.12
    - add a crucial bit of error reporting when CAs reject our requests
    - count the number of configured CAs correctly


author: Nalin Dahyabhai <nalin@redhat.com> 0.13-1
changelog:
  - update to 0.13
    - change the default so that we default to trying to auto-refresh
      certificates unless told otherwise
    - preemptively enforce limitations on request nicknames so that they
      make valid D-Bus object path components


author: Nalin Dahyabhai <nalin@redhat.com> 0.14-1
changelog:
  - update to 0.14
    - check key and certificate location at add-time to make sure they're
      absolute paths to files or directories, as appropriate
    - IPA: dig into the 'result' item if the named result value we're looking
      for isn't in the result struct


author: Nalin Dahyabhai <nalin@redhat.com> 0.15-1
changelog:
  - update to 0.15
    - notice that a directory with a trailing '/' is the same location as the
      directory without it
    - fix handling of the pid file when we write one (by actually giving it
      contents)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-1
changelog:
  - update to 0.17
    - fix a hang in the daemon (Rob Crittenden)
    - documentation updates
    - fix parsing of submission results from IPA (Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-2
changelog:
  - make the D-Bus configuration file (noreplace) (#541072)
  - make the %check section and the deps we have just for it conditional on
    the same macro (#541072)


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - update to 0.18
    - add support for using encrypted storage for keys, using PIN values
      supplied directly or read from files whose names are supplied
    - don't choke on NSS database locations that use the "sql:" or "dbm:"
      prefix


author: Nalin Dahyabhai <nalin@redhat.com> 0.19-1
changelog:
  - update to 0.19
    - correctly initialize NSS databases that need to be using a PIN
    - add certmonger.conf, for customizing notification timings and settings,
      and use of digests other than the previously-hard-coded SHA256, and
      drop those settings from individual requests
    - up the default self-sign validity interval from 30 days to 365 days
    - drop the first default notification interval from 30 days to 28 days
      (these two combined to create a fun always-reissuing loop earlier)
    - record the token which contains the key or certificate when we're
      storing them in an NSS database, and report it
    - improve handling of cases where we're supposed to use a PIN but we
      either don't have one or we have the wrong one
    - teach getcert to accept a PIN file's name or a PIN value when adding
      a new entry
    - update the IPA submission helper to use the new 'request_cert' signature
      that's landing soon
    - more tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
    - correctly parse certificate validity periods given in years (spotted by
      Stephen Gallagher)
    - setup for translation
      - es by Héctor Daniel Cabrera!
      - ru by Yulia Poyarkova!
      - uk by Yuri Chornoivan!
    - fix unpreprocessed defaults in certmonger.conf's man page
    - tweak the IPA-specific message that indicates a principal name also needs
      to be specified if we're not using the default subject name (#579542)
    - make the validity period of self-signed certificates into a configuration
      setting and not a piece of the state information we track about the signer
    - init script: exit with status 2 instead of 1 when invoked with an
      unrecognized argument (#584517)


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - update to 0.21
    - getcert/*-getcert: relay the desired CA to the local service, whether
      specified on the command line (in getcert) or as a built-in hard-wired
      default (in *-getcert) (#584983)
    - flesh out the default certmonger.conf so that people can get a feel for
      the expected formatting (Jenny Galipeau)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - update to 0.22
    - new translations
      - de by Fabian Affolter!
    - certmaster-submit: don't fall over when we can't find a certmaster.conf
      or a minion.conf (i.e., certmaster isn't installed) (#588932)
    - when reading extension values from certificates, prune out duplicate
      principal names, email addresses, and hostnames


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - update to 0.23
    - new translations
      - pl by Piotr Drąg!
    - cancel daemon startup if we can't gain ownership of our well-known
      service name on the DBus (#596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24
    - keep the lock on the pid file, if we have one, when we fork, and cancel
      daemon startup if we can't gain ownership of the lock (the rest of #596719)
    - make the man pages note which external configuration files we consult when
      submitting requests to certmaster and ipa CAs


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-2
changelog:
  - don't create the daemon pidfile until after we've connected to the D-Bus
    (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - more gracefully handle manual daemon startups and cleaning up of unexpected
    crashes (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-4
changelog:
  - init script: ensure that the subsys lock is created whenever we're called to
    "start" when we're already running (even more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25
    - new translations
      - in by Okta Purnama Rahadian!
    - fix detection of cases where we can't access a private key in an NSS
      database because we don't have the PIN
    - teach '*getcert start-tracking' about the -p and -P options which the
      '*getcert request' commands already understand (#621670), and also
      the -U, -K, -E, and -D flags
    - double-check that the nicknames of keys we get back from
      PK11_ListPrivKeysInSlot() match the desired nickname before accepting
      them as matches, so that our tests won't all blow up on EL5
    - fix dynamic addition and removal of CAs implemented through helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26
    - when canceling a submission request that's being handled by a helper,
      reap the child process's status after killing it (#624120)


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - update to 0.28
    - fix self-signing certificate notBefore and notAfter values on 32-bit
      machines


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - update to 0.29
    - fix 64-bit cleanliness issue using libdbus
    - actually include the full set of tests in tarballs


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - update to 0.30
    - fix errors computing the time at the end of an interval that were
      caught by self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (#636876)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - explicitly require "dbus" to try to ensure we have a running system bus
    when we get started (#639126)


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - oops, rfc5280 says we shouldn't be populating unique identifiers, so
    make it a configuration option and default the behavior to off


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-2
changelog:
  - depend on the e2fsprogs libuuid on Fedora and RHEL releases where it's
    not part of util-linux-ng


author: Nalin Dahyabhai <nalin@redhat.com> 0.33-1
changelog:
  - update to 0.33
    - new translations
      - id by Okta Purnama Rahadian!
    - updated translations
      - pl, uk
    - roll up assorted fixes for defects


author: Nalin Dahyabhai <nalin@redhat.com> 0.34-1
changelog:
  - update to 0.34
    - explicitly note the number of requests we're tracking in the output of
      "getcert list" (#652049)
    - try to offer some suggestions when we get certain specific errors back
      in "getcert" (#652047)
    - updated translations
      - es


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690886)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766)
  - when handling "getcert resubmit" requests, if we don't have a key yet,
    make sure we go all the way back to generating one (#694184)
  - getcert: try to clean up tests for NSS and PEM file locations (#699059)
  - don't try to set reconnect-on-exit policy unless we managed to connect
    to the bus (#712500)
  - handle cases where we specify a token but the storage token isn't
    known (#699552)
  - getcert: recognize -i and storage options to narrow down which requests
    the user wants to know about (#698772)
  - output hints when the daemon has startup problems, too (#712075)
  - add flags to specify whether we're bus-activated or not, so that we can
    exit if we have nothing to do after handling a request received over
    the bus if some specified amount of time has passed
  - explicitly disallow non-root access in the D-Bus configuration (#712072)
  - migrate to systemd on releases newer than Fedora 15 or RHEL 6 (#718172)
  - fix a couple of incorrect calls to talloc_asprintf() (#721392)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if xmlrpc-c's struct xmlrpc_curl_xportparms has a gss_delegate field, set
    it to TRUE when we're doing Negotiate auth (#727864, #727863, #727866)


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - api: lift restrictions on characters used in request and CA nicknames by
    making their object names not incorporate their nicknames
  - api: add find_request_by_nickname and find_ca_by_nickname
  - certmonger-ipa-submit.8: list -k, -K, -t in the summary, document -K
  - getcert: print "invalid option" error messages ourselves (#756291)
  - ipa-submit: supply a Referer: header when submitting requests to IPA
    (#750617, needed for #747710)


author: Nalin Dahyabhai <nalin@redhat.com> 0.52-1
changelog:
  - note that SELinux usually confines us to writing only to cert_t in
    doc/getting-started.txt (#765599)
  - fix crashes when we add a request during our first run when we're
    populating the hard-coded CA list
  - properly deal with cases where a path is passed to us is "./XXX"
  - in session mode, create our data directories as we go


author: Nalin Dahyabhai <nalin@redhat.com> 0.53-1
changelog:
  - large changes to the D-Bus glue, exposing a lot of data which we were
    providing via D-Bus getter methods as properties, and providing more
    accurate introspection data
  - emit a signal when the daemon saves a certificate to the destination
    location, and provide an option to have the daemon spawn an arbitrary
    command at that point, too (#766167)
  - enable starting the service by default on RHEL (#765600)


author: Nalin Dahyabhai <nalin@redhat.com> 0.55-1
changelog:
  - allow root to use our implementation of org.freedesktop.DBus.Properties
  - take more care to not emit useless PropertiesChanged signals


author: Nalin Dahyabhai <nalin@redhat.com> 0.56-1
changelog:
  - when a caller sets the is-default flag on a CA, and another CA is no longer
    the default, emit the PropertiesChanged signal on the CA which is not the
    default, instead on the new default a second time
  - drop some dead code from the D-Bus message handlers (static analysis,
    - cache public keys when we read private keys
  - go back to printing an error indicating that we're missing a required
    argument when we're missing a required argument, not that the option is
    invalid (broken since 0.51, #796542)


author: Nalin Dahyabhai <nalin@redhat.com> 0.57-1
changelog:
  - clarify that the command passed to getcert -C is a "post"-save command
  - add a "pre"-save command option to getcert, specified with the -B flag (#9)
  - after we notify of an impending not-valid-after approaching, don't do it
    again immediately


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a command option (-T) to getcert for specifying which enrollment
    profile to tell a CA that we're using, in case it cares (#10)


author: Nalin Dahyabhai <nalin@redhat.com> 0.58-1
changelog:
  - add a "dogtag-ipa-renew-agent" CA so that we can renew certificates using
    an IPA server's internal Dogtag instance
  - export the requested profile and old certificate to enrollment helpers
  - make libxml and libcurl into hard build-time requirements
  - serialize all pre/save/post sequences to make sure that stop/save/start
    doesn't become stop1/save1/stop2/start1/save2/start2 when we're stopping
    a service while we muck with more than one of its certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.60-1
changelog:
  - adjust internals of logic for talking to dogtag to at least have a
    concept of non-agent cases
  - when talking to an IPA server's internal Dogtag instance, infer which
    ports the CA is listening on from the "dogtag_version" setting in the
    IPA configuration (Ade Lee)
  - send a notification (or log a message, whatever) when we save a new
    certificate (#766167)


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport change from git to not choke if X509_REQ_to_X509() fails when we're
    self-signing using OpenSSL
  - backport another change from git to represent this as a CA-rejected error


author: Nalin Dahyabhai <nalin@redhat.com> 0.62-1
changelog:
  - add a -u flag to getcert to enable requesting a keyUsage extension value
  - request subjectKeyIdentifier extensions from CAs, and include them in
    self-signed certificates
  - request basicConstraints from CAs, defaulting to requests for end-entity
    certificates
  - when requesting CA certificates, also request authorityKeyIdentifier
  - add support for requesting CRL distribution point and authorityInfoAccess
    extensions that specify OCSP responder locations
  - don't crash when OpenSSL can't build a template certificate from a request
    when we're in FIPS mode
  - put NSS in FIPS mode, when the system booted that way, except when we're
    trying to write certificates to a database
  - fix CSR generation and self-signing in FIPS mode with NSS
  - fix self-signing in FIPS mode with OpenSSL
  - new languages from the translation team: mai, ml, nn, ga


author: Nalin Dahyabhai <nalin@redhat.com> 0.63-1
changelog:
  - serialize access to NSS databases and the running of pre- and post-save
    commands which might also access them (possibly fixing part of #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64-1
changelog:
  - at startup, if we resume the state machine for a given certificate to a state
    which expects to have the newly-added lock already acquired, acquire it
    before moving on with the certificate's work (still aimed at fixing #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.66-1
changelog:
  - build as position-independent executables with early binding (#883966)
  - also don't tag the unit file as a configuration file (internal tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-1
changelog:
  - when saving certificates to NSS databases, try to preserve the trust
    value assigned to a previously-present certificate with the same nickname
    and subject, if one is found
  - when saving certificates to NSS databases, also prune certificates from
    the database which have both the same nickname and subject as the one
    we're adding, to avoid tripping up tools that only fetch one certificate
    by nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-3
changelog:
  - pull up a patch from master to adapt self-tests to certutil's diagnostic
    output having changed (#992050)


author: Nalin Dahyabhai <nalin@redhat.com> 0.68-1
changelog:
  - notice when the OpenSSL RNG isn't seeded
  - notice when saving certificates or keys fails due to filesystem-related
    permission denial (#996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.69-1
changelog:
  - tweak how we decide whether we're on the master or a minion when we're
    told to use certmaster as a CA
  - clean up one of the tests so that it doesn't have to work around internal
    logging producing duplicate messages
  - when logging errors while setting up to contact xmlrpc servers, explicitly
    note that the error is client-side
  - don't abort() due to incorrect locking when an attempt to save an issued
    certificate to the designated location fails (part of #1032760/#1033333,
    ticket #22)
  - when reading an issued certificate from an enrollment helper, ignore
    noise before or after the certificate itself (more of #1032760/1033333,
    ticket #22)
  - run subprocesses in a cleaned-up environment (more of #1032760/1033333,
    ticket #22)
  - clear the ca-error that we saved when we had an error talking to the CA if we
    subsequently succeed in talking to the CA
  - various other static-analysis fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.70-1
changelog:
  - add a --with-homedir option to configure, and use it, since subprocesses
    which we run and which use NSS may attempt to write to $HOME/.pki, and
    0.69's strategy of setting that to "/" was rightly hitting SELinux policy
    denials (#1047798)


author: Nalin Dahyabhai <nalin@redhat.com> 0.71-1
changelog:
  - check for cases where we fail to allocate memory while reading a request
    or CA entry from disk (John Haxby)
  - only handle one watch at a time, which should avoid abort() during
    attempts to reconnect to the message bus after losing our connection
    to it (#1055521)


author: Nalin Dahyabhai <nalin@redhat.com> 0.72-1
changelog:
  - update to 0.72
    - support generating DSA parameters and keys on sufficiently-new OpenSSL
      and NSS
    - support generating EC keys when OpenSSL and NSS support it, using key
      size to select the curve to use from among secp256r1, secp384r1,
      secp521r1 (which are the ones that are usually available, though
      secp521r1 isn't always, even if the other two are)
    - stop trying to cache public key parameters at all and instead cache public
      key info properly
    - encode the friendlyName attribute in signing requests as a BMPString,
      not as a PrintableString
    - catch more filesystem permissions problems earlier (more of #996581)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates for 0.73
    - set the flag to encode EC public key parameters using named curves
      instead of the default of all-the-details when using OpenSSL
    - don't break when NSS supports secp521r1 but OpenSSL doesn't
    - also pass the CA nickname to enrollment helpers in the environment as
      a text value in "CERTMONGER_CA_NICKNAME", so they can use that value
      when reading configuration settings
    - also pass the SPKAC value to enrollment helpers in the environment as
      a base64 value in "CERTMONGER_SPKAC"
    - also pass the request's SubjectPublicKeyInfo value to enrollment helpers
      in the environment as a base64 value in "CERTMONGER_SPKI" (part of #16)
    - when generating signing requests using NSS, be more accommodating of
      requested subject names that don't parse properly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates to 0.73
    - also pass the key type to enrollment helpers in the environment as
      a the value of "CERTMONGER_KEY_TYPE"


author: Nalin Dahyabhai <nalin@redhat.com> 0.73-1
changelog:
  - updates to 0.73
    - getcert no longer claims to be stuck when a CA is unreachable,
      because the daemon isn't actually stuck


author: Nalin Dahyabhai <nalin@redhat.com> 0.74-1
changelog:
  - also save state when we exit due to SIGHUP
  - don't get tripped up when enrollment helpers hand us certificates which
    include CRLF line terminators (ticket #25)
  - be tolerant of certificate issuer names, subject names, DNS, email, and
    Kerberos principal namem subjectAltNames, and crl distribution point URLs
    that contain newlines
  - read and cache the certificate template extension in certificates
  - enforce different minimum key sizes depending on the type of key we're
    trying to generate
  - store DER versions of subject, issuer and template subject, if we have
    them (Jan Cholasta, ticket #26)
  - when generating signing requests with subject names that don't quite parse
    as subject names, encode what we're given as PrintableString rather than
    as a UTF8String
  - always chdir() to a known location at startup, even if we're not becoming
    a daemon
  - fix a couple of memory leaks (static analysis)
  - add missing buildrequires: on which


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.92-1
changelog:
  - retrieve CA information from CAs, if the helpers can do so, and
    add a command to explicitly refresh that data: "getcert refresh-ca"
  - offer to save CA certificates to files and databases, when specified with
    new -a and -F flags to getcert request/resubmit/start-tracking (#1098208,
    trac #31)
  - add IP address subject alternate names when getcert request/resubmit
    is passed the -A option (trac #35)
  - read and cache the freshestCRL extension in certificates
  - properly interpret KDC-unreachable errors encountered in the IPA
    submission error as a server-unreachable error that we will retry,
    rather than a misconfiguration error which we won't
  - don't let tests get tripped up by new formatting used in dos2unix status
    messages (#1099080)
  - updated translations
  - be explicit that we are going to use bashisms in test scripts by calling
    the shell interpreter as 'bash' rather than 'sh' (trac #27)


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.93-1
changelog:
  - add some self-tests
  - simplify the internal submit-to-CA logic
  - fixes for more problems found through static analysis


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.94-1
changelog:
  - fix self-test errors that we trigger with new OpenSSL
  - fix a build error that would sometimes happen when we're told to
    build PIE binaries
  - quiet a compile warning


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.96-1
changelog:
  - make the trust settings we apply to CA-supplied certificates while
    saving them to NSS databases run-time configurable
  - fix compiling against EL5-era OpenSSL
  - when saving CA certificates we pull from an IPA server, nickname
    it using the realm name with " IPA CA" appended rather than just
    naming it "IPA CA"
  - fix the local signer so that when it issues itself a new certificate,
    it uses the same subject name
  - add a -w flag to getcert's request, resubmit, and start-tracking
    commands, telling it to wait until either the certificate is issued,
    we get to a state where we know that we won't be able to get one, or
    we are waiting for a CA


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-1
changelog:
  - add a -w (wait) flag to the getcert's request/resubmit/start-tracking
    commands, and add a non-waiting status command


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.2-1
changelog:
  - when generating keys using OpenSSL, if key generation fails, try
    again with the default key size, in case we're in FIPS mode
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.3-1
changelog:
  - read and cache whether or not we saw a noOCSPcheck extension in certificates
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.4-2
changelog:
  - add a %trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
    when we detect certmonger versions prior to 0.58 being installed, to
    avoid cases where some older versions choke on CAs with nicknames that
    contain characters that can't legally be part of a D-Bus name (#948993)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76-1
changelog:
  - require a single certificate to be specified to 'getcert status' (#1148001,
    - shorten the default help message which getcert prints when it's not given
    a specific command (#1131704)
  - add private listener (-l, -L, -P) mode to certmonger, to allow it to listen
    for connections directly from clients running under the same UID
  - add a command mode (-c) to certmonger, in which once it's started, it
    launches a specified command, and after that command exits, the daemon exits
  - when getcert is invoked with no bus running, if it's running as root, run
    certmonger in private listener mode with the same invocation of getcert as
    the command to start and wait for (#1134497)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.2-1
changelog:
  - ipa-submit: when we fail to locate/contact LDAP or XML-RPC servers,
    use discovery to find them (#1136900)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rework the state machine so that we save an issued certificate's associated
    CA certificates, then re-read the certificate, then run the post hook and
    issue notifications, in that order, instead of saving CA certificates after
    running the post hook, which was always a surprising order (#1131700)
  - add a generic dogtag-submit helper that doesn't include any IPA defaults,
    to make it easier to know the difference between paramenters it requires
    and parameters which are optional (#12)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.3-1
changelog:
  - fixes for bugs found by static analysis
  - handle IDN correctly when doing service location using SRV records
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.5-1
changelog:
  - avoid premature exit on CA data analysis failures (should fix an issue
    reported by Natxo Asenjo)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.7-1
changelog:
  - correctly read CA not-valid-after dates on 32-bit machines (also reported by
    Natxo Asenjo), so that we don't spin on polling them (#1163023)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.8-1
changelog:
  - dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155, patch by Jan Cholasta)
  - getcert: print help output when 'status' isn't given any args (#1163541)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.1-1
changelog:
  - update to 0.77
    - add initial, still rough, SCEP support (#1140241,#1161768)
      - add an scep-submit helper to handle part of it
    - getcert: add add-ca/add-scep-ca/modify-ca/remove-ca commands
    - getcert: add -l, -L flags to request/resubmit/start-tracking commands
      to provide a way to set a ChallengePassword in signing requests
    - lay some groundwork for rekeying support
    - bundled dogtag enrollment helpers now output debugging info to stderr (#)
    - ipa-getcert: fix a crash when using DNS discovery to locate servers (#39)
    - getcert: fix displaying of pre-request pre-/post-save commands (#1178190,
        - use Zanata for translations
    - getcert list: list the certificate's profile name, if it contains one


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.2-1
changelog:
  - expose the certificate's not-valid-before and not-valid-after dates as a
    property over D-Bus (ticket #41)
  - give the local signer its own configuration option to set the lifetime
    of its signing certificate, falling back to the lifetime configured for
    the self-signer as a default to match the previous behavior
  - fix a potential read segfault parsing the output of an enrollment helper,
    introduced in 0.77 (thanks to Steve Neuharth)
  - read the ns-certtype extension value in certificates
  - request an enrollment certtype extension to CSRs if we have a profile name
    that we want to use (ticket #17, possibly part of IPA ticket #57)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.3-1
changelog:
  - fix a data loss bug when saving renewed certificates to NSS databases - the
    private key could be removed in error since 0.77
  - fixes for bugs found by static analysis
  - fix self-tests when built with OpenSSL 1.0.2


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
changelog:
  - don't display PINs in "getcert list" output (#42)
  - clean up launching of a private instance in "getcert"
  - expand on the don't-delete-private-key fix from 0.77.3 by letting NSS's
    own safety checks have an effect
  - backport record-keeping of key generation dates and counts of how many
    times we've gotten certificates using a given key pair


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
changelog:
  - pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
    includes IP address subjectAltName values
  - correctly verify signatures on SCEP server replies when the signer is neither
    the top-level CA nor the RA (feedback in #1161768)
  - correctly verify signatures on SCEP server replies when there is more than
    one certificate in the chain between the RA and the top-level CA (feedback in


author: Nalin Dahyabhai <nalin@redhat.com> 0.78-1
changelog:
  - switch to using popt for parsing command line arguments, continuing to
    use old help text for now so that we can catch up with translations (print
    old text for --help, new text (with longopts!) for -H)
  - add some plumbing for eventually receiving per-certificate roots in
    addition to issued certificates and chain certificates
  - add a "rekey" command to getcert, for triggering enrollment using a new
    key pair (#1087932)
  - scep-submit: check for the Renewal capability, and default to taking
    advantage of it during rekeying, unless the new -n flag is specified to it
  - dogtag-submit: add flags for passing user names, UDNs, passwords, and PINs
    to the helper (part of ticket #12)
  - dogtag-submit: add a flag for using the agent creds to do TLS client auth
    while submitting enrollment requests (more of ticket #12)
  - dogtag-submit: handle cases where we submit a request and the server
    returns a success code rather than just queuing the request (#12 again)
  - ipa-submit: pass requested profile names to the server as an argument
    named "profile_id"; if the server gives us an "unrecognized argument"
    error, retry without it for compatibility's sake (part of IPA ticket #57)
  - keygen: fix a possible crash if keygen fails to return a key from NSS
  - correct the certmonger(8) man page's description of the -c flag, which it
    used to call the -C flag
  - add logic for setting ownership and permissions on certificates and keys
    when saving them to disk
  - add configuration options "max_key_lifetime" and "max_key_use_count" for
    making automatic renewal prefer rekeying


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.1-1
changelog:
  - self-tests: assume that certutil won't generate DSA keys with more than 1024
    bits, and will often short us by a few


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.2-1
changelog:
  - tweak initialization so that we set up for providing our D-Bus API before we
    register our name with the bus, so that we can handle any requests that
    arrive before the acknowledgement of that registration
  - on systems that run systemd, add the right data file so that the service gets
    started when someone tries to talk to the daemon (ticket #38)
  - correctly check for error responses when sending GetCAChain requests to SCEP
    servers


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.3-1
changelog:
  - call poptGetOptArg() correctly, to fix parsing of the -R flag to scep-submit
    and the -O and -o flags to dogtag-submit (#1244914)


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.4-1
changelog:
  - fix the "getcert start-tracking" -L and -l options (#1249753)
  - output diagnostics about the second request when scep-submit encounters an
    error during a second request to the SCEP server


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.5-1
changelog:
  - fix a possible uninitialized memory read (possibly #1260871)
  - log a diagnostic error when we fail to initialize libkrb5


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-1
changelog:
  - document the -R, -N, -o, and -t flags for dogtag-ipa-renew-agent-submit
  - stop checking that we can generate 512 bit keys during self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-3
changelog:
  - instead of using killall to send a SIGHUP to the system bus daemon in %post
    to get it to reload its configuration, use dbus-send to send a ReloadConfig
    request over the bus (should fix #1277573)


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-4
changelog:
  - add backported fix to wait a reasonable amount of time after calling the
    'resubmit' method for a new certificate to be issued when we're exercising
    the D-Bus API during tests (Jan Cholasta, #1351052)


author: Nalin Dahyabhai <nalin@redhat.com> 0.79-1
changelog:
  - update to 0.79:
    - getcert now offers an option (-X) for requesting processing by a particular
      CA if the server we're contacting is running more than one
    - getcert also offers options (--for-ca, --not-for-ca, --ca-path-length) for
      requesting BasicConstraints values
    - getcert now displays times in local time instead of UTC, which was
      previously the only way they were displayed; the --utc option can often be
      used to switch back to its previous behavior
    - the SCEP enrollment helper now correctly issues GetCACertChain requests to
      SCEP servers, instead of issuing a GetCAChain request, which isn't part of
      the protocol; from report by Jason Garland
    - when issuing SCEP requests, the ID of the CA included in the HTTP request
      is now URL-encoded, as it should be
    - renewal or notification-of-impending-expiration logic is now triggered
      closer to TTL thresholds rather than waiting for a periodic check to pass a
      threshold
    - properly builds with OpenSSL 1.1, thanks to Lukas Slebodnik and Tomas Mraz
      for a lot of the legwork
  - resync .spec file with Fedora
  - upstream project migrated from fedorahosted.org to pagure.io


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-1
changelog:
  - update to 0.79.4
    - fix CA option name for ipa cert-request
    - fix minor memory leak
    - fix build warnings
    - fix an incorrect date in the .spec changelog
    - bump gettext version to avoid warning


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-2
changelog:
  - Reformat certificates returned by Dogtag. Dogtag was including
    a spurious newline before -----END CERTIFICATE-----


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-1
changelog:
  - update to 0.79.5:
     - getcert start-tracking: use issuer option when specified
     - add support for specifying the MS certificate template
     - Reformat certificates returned by Dogtag to strip extra newline


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-3
changelog:
  - Remove BR on mktemp. It is now provided by coreutils.
  - Patch to fix NSS handling of keys in sqlite databases
  - Patches to fix tests now that sqlite is the NSS default.


author: Rob Crittenden <rcritten@redhat.com> - 0.79.6-4
changelog:
  - Improve handling of NSS tokens (#1624930)
  - Pull in upstream fixes discovered in coverity and clang (#1632449)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-4
changelog:
  - Optimize closing of file descriptors on fork (#1763745)
  - Remove NOMODDB flag flag from context init, look for full tokens (#1746543)
  - Retrieve full IPA CA chain (#1710632)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-8
changelog:
  - Move systemd tmpfiles from /var/run to /run (#1804928)
  - Improve logging in the SCEP helper (#1807691)
  - Fix sort order of certificates passed into PKCS7_verify (#1808052)
  - Add -N option to SCEP helper to separate web server chain from
    SCEP issuer chain (#1808613)
  - Add template profile, MS v2 template and issuer to getcert list
    output (#1734451)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-9
changelog:
  - Call the secport equivalent of PR_ErrorToString
  - Remove a couple of unused varaibles found by coverity


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Jerry James <loganjerry@gmail.com> - 0.9.5-3
changelog:
  - Fix unowned directory (bz 473635)
  - Drop unnecessary BuildRequires
  - Replace patches with addition of -fPIC to CFLAGS in the spec file
  - Add some more documentation files


author: Jerry James <loganjerry@gmail.com> - 0.9.10-3
changelog:
  - Drop -format patch, upstreamed
  - Fix detection of more time-related functions
  - Give checkmk its own subpackage for licensing reasons
  - Add a check script


author: Jerry James <loganjerry@gmail.com> - 0.9.14-1
changelog:
  - New upstream version
  - Drop -volatile patch, no longer needed
  - Update time-related configure fix again


author: Alexander Larsson <alexl@redhat.com> - 1:2.91.93-3
changelog:
  - Move gsettings schema to cheese-libs, fixes control-center crash (#691667)
  - Move typelib to cheese-libs


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.1-2
changelog:
  - Fix missing images on buttons, also fixes the "Gtk-WARNING **: Attempting to
    add a widget with type GtkImage to a GtkButton ..." warnings (gnome#677543)
  - Fix cheese crashing when started on machines with v4l2 radio or vbi devices
    (rhbz#810429, gnome#677544)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.4.2-3
changelog:
  - Reduce camerabin pipeline creation time (rhbz#797188, gnome#677731)
  - Don't add 0 byte sized files to the thumb-view (rhbz#830166, gnome#677735)
  - Fix sizing of horizontal thumbnail list (rhbz#829957)
  - Optimize encoding parameters (rhbz#572169)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.5-1
changelog:
  - New upstream release 3.5.5
  - Fix cheese crashing on tvcards which report they can capture 0x0 as
    minimum resolution (rhbz#850505)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.2-2
changelog:
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.91-3
changelog:
  - In F-19 we had a long list of bugfix patches, most of these have been merged
    into gnome-3.10 but not all have been merged yet, re-add the non merged ones
  - Fix video recording not working
  - Allow changing effects while recording
  - Disallow changing camera settings while recording
  - Fix cheese misbehavior when going from 0 -> 1 or 1 -> 0 camera devices


author: David King <amigadave@amigadave.com> - 2:3.13.92-1
changelog:
  - Update to 3.13.92
  - Split camera service out to a subpackage
  - Use pkgconfig for BuildRequires
  - Tidy spec file


author: Pete Walter <pwalter@fedoraproject.org> - 8.2-1
changelog:
  - Update to 8.2
  - Simplify files list
  - Build with Python 3 (#1343710)
  - Add missing python3-requests dependency (#1343710)
  - Update package description


author: Pete Walter <pwalter@fedoraproject.org> - 8.2-2
changelog:
  - Package review fixes (#1343710)
  - Validate the desktop file
  - Don't own /etc/opt directory
  - Depend on mozilla-filesystem instead of co-owning mozilla directories
  - Depend on dbus and gnome-icon-theme/hicolor-icon-theme for directory
    ownership


author: bwhiteley@suse.de
changelog:
  - Updated to cimv2.16Experimental (#341800)
    Remove carriage returns from MOF files.
    Fix broken comment blocks in 2.16 schema.


author: Matt Domsch <Matt_Domsch@dell.com> - 2.19.1-1
changelog:
  - Upgraded to cimv2.19.1Experimental
  - now meets Fedora packaging guidelines too
  - added -docs subpackage


author: Matt Domsch <Matt_Domsch@dell.com> - 2.22.0-1
changelog:
  - spec license change to MIT per Novell
  - remove BR: unzip, it's in the default buildroot already
  - add MIT license to spec file


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.37.0-1
changelog:
  - Update to CIM Schema 2.37.0, including experimental classes
  - Fix for unversioned docdir change
    Resolves: #993697


author: Tomas Orsava <torsava@redhat.com> - 6.0.1-6
changelog:
  - Change Requires from python3 to platform-python
  - The python3 package was renamed to platform-python
  - Related: rhbz#1619153


author: Nathaniel McCallum <npmccallum@redhat.com> - 6-1
changelog:
  - New upstream release
  - Specify unprivileged user/group during configuration
  - Move clevis user/group creation to base clevis package


author: Daniel Kopecek <dkopecek@redhat.com> - 11-2
changelog:
  - Check that key derivation key is available
  - Delete remaining references to the removed http pin
  - Install cryptsetup and tpm2_pcrlist in the initramfs
  - Add device TCTI library to the initramfs
    Resolves: rhbz#1648004
    Resolves: rhbz#1650246


author: Sergio Correia <scorreia@redhat.com> - 13-1
changelog:
  - Update to new upstream release, v13
    Resolves: rhbz#1827225
    Resolves: rhbz#1827665
    Resolves: rhbz#1801556
    Resolves: rhbz#1784448
    Resolves: rhbz#1826917
    Resolves: rhbz#1812014


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-2
changelog:
  - Rebased RHEL version to Fedora rawhide
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1246485
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1411829


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-3
changelog:
  - added dependency on python-jinja2 [RH:1215913]
  - added rhn_subscription plugin [RH:1227393]
  - require pyserial to support smartos data source [RH:1226187]


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-8
changelog:
  - make rh_subscription plugin do nothing in the absence of a valid
    configuration [RH:1295953]
  - move rh_subscription module to cloud_config stage


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-6
changelog:
  - add power-state-change module to cloud_final_modules (rhbz#1252477)
  - remove 'tee' command from logging configuration (rhbz#1424612)
  - limit permissions on def_log_file (rhbz#1424612)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-7
changelog:
  - Add missing sysconfig unit test data (rhbz#1438082)
  - Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
  - sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-9
changelog:
  - RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
  - azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
  - Fix ipv6 subnet detection (rhbz#1438082)


author: Ryan McCabe <rmccabe@redhat.com> 0-7.9-13
changelog:
  - Do proper cleanup of systemd units when upgrading from versions
    0.7.9-3 through 0.7.9-8.
    Resolves: rhbz#1465730


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - Revert "remove 'tee' command from logging configuration" [bz#1626117]
  - Resolves: rhbz#1626117]
    (cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el8
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
  - Resolves: bz#1615599
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el8
changelog:
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
  - Resolves: bz#1644335
    ([ESXi][RHEL8.0]Enable cloud-init by default on VMware)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el8
changelog:
  - ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
  - Resolves: bz#1664227
    ([Azure]String missmatch causes the /dev/sdb1 mounting failed after stop&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-6.el8
changelog:
  - ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
  - Resolves: bz#1602784
    (cloud-init: Sometimes image boots fingerprints is configured, there's a network device present but it's not configured)


author: Danilo de Paula <ddepaula@redhat.com: - 18.5-1.el8
changelog:
  - Rebase to cloud-init 18.5
  - Resolves: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 18.5-2
changelog:
  - Adding gating.yaml file
  - Resolves: rhbz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 18.5-3.el8
changelog:
  - ci-Adding-gating-tests-for-Azure-ESXi-and-AWS.patch [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el8
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1691986]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1691986]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1691986]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1691986]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el8
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1692914]
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)
  - Resolves: bz#1692914
    ([8.1] [WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-8.el8
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1706482]
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744718]
  - Resolves: bz#1706482
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 8.2.0])
  - Resolves: bz#1744718
    ([cloud-init][RHEL8][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-9.el8
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1785648]
  - Resolves: bz#1785648
    ([RHEL8]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-10.el8
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802140]
  - Resolves: bz#1802140
    ([cloud-init][RHEL8.2]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-11.el8
changelog:
  - ci-azure-avoid-re-running-cloud-init-when-instance-id-i.patch [bz#1788684]
  - ci-net-skip-bond-interfaces-in-get_interfaces.patch [bz#1768770]
  - ci-net-add-is_master-check-for-filtering-device-list.patch [bz#1768770]
  - Resolves: bz#1768770
    (cloud-init complaining about enslaved mac)
  - Resolves: bz#1788684
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1807797]
  - Resolves: bz#1807797
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.coM> - 19.4-1.el8.1
changelog:
  - Rebase to cloud-init 19.4 [bz#1811912]
  - Resolves: bz#1811912
    ([RHEL-8.2.1] cloud-init rebase to 19.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el8
changelog:
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812171]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812174]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1814152]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1840648]
  - Resolves: bz#1812171
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-8])
  - Resolves: bz#1812174
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-8])
  - Resolves: bz#1814152
    (CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys [rhel-8])
  - Resolves: bz#1840648
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el8
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
  - Resolves: bz#1803928
    ([RHEL8.3] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el8
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el8
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el8
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el8
changelog:
  - Fixing cloud-init-generator permissions [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-8.el8
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
  - ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
  - Resolves: bz#1833874
    ([rhel-8.3]using root user error should cause a non-zero exit code)
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-9.el8
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
  - ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-10.el8
changelog:
  - ci-Changing-notation-of-subp-call.patch [bz#1839662]
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8
changelog:
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Eduardo Otubo <otubo@redhat.com> - 20.3-1.el8
changelog:
  - Rebase to cloud-init 20.3 [bz#1885185]
  - Resolves: bz#1885185
    ([RHEL-8.4.0] cloud-init rebase to 20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-2.el8
changelog:
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1889635]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1886430]
  - Resolves: bz#1886430
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init)
  - Resolves: bz#1889635
    (Add support for ipv6_autoconf on cloud-init-20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.2
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.3
changelog:
  - ci-get_interfaces-don-t-exclude-Open-vSwitch-bridge-bon.patch [bz#1957135]
  - ci-net-exclude-OVS-internal-interfaces-in-get_interface.patch [bz#1957135]
  - Resolves: bz#1957135
    (Intermittent failure to start cloud-init due to failure to detect macs [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.4
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1963981]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1967600]
  - Resolves: bz#1963981
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image [rhel-8.4.0.z])
  - Resolves: bz#1967600
    (cloud-init brew build fails on Fedora 33 [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.5
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1979252]
  - Resolves: bz#1979252
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8] [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.6
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2017696]
  - Resolves: bz#2017696
    (cloud-init fails to set host key permissions correctly [rhel-8.4.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 20.3-10.el8_4.7
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028755]
  - Resolves: bz#2028755
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Deji Akingunola <dakingun@gmail.com> - 0.9.15-3
changelog:
  - Don't package APACHE.license since we've LGPL instead 
  - Package documentation in devel subpackage


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Bastien Nocera <bnocera@redhat.com> - 3.0.4-2
changelog:
  - Remove the GStreamer plugin, as it can cause the one in the
    clutter-gst2 package to become unavailable, breaking Cheese
    https://bugzilla.gnome.org/show_bug.cgi?id=746883


author: Allisson Azevedo <allisson@gmail.com> 0.1.0-2
changelog:
  - INSTALL removed from docs
  - fix make install for keeping timestamps
  - fix devel files section
  - changed license for LGPL


author: Colin Walters <walters@redhat.com> 0.6.1-1
changelog:
  - Update to 0.6.1 so we can make tweet go
  - Loosen files globs so we don't have to touch them every version


author: Kalev Lember <kalevlember@gmail.com> - 1.5.4-1
changelog:
  - Update to 1.5.4
  - Drop duplicate deps that rpmbuild autogenerates
  - Drop an obsolete unused patch
  - Tighten deps with %{?_isa}


author: Orion Poplawski <orion@cora.nwra.com> - 2.4.3-2
changelog:
  - vim 7.0 now ships cmake files, so don't ship ours (bug #201018)
  - Add patch to Linux.cmake for Fortran soname support for plplot


author: Orion Poplawski <orion@cora.nwra.com> - 2.4.6-4
changelog:
  - Update macros.cmake to add CMAKE_INSTALL_LIBDIR, INCLUDE_INSTALL_DIR,
    LIB_INSTALL_DIR, SYSCONF_INSTALL_DIR, and SHARE_INSTALL_PREFIX


author: Rex Dieter <rdieter@fedoraproject.org> - 2.6.2-3
changelog:
  - Add -DCMAKE_VERBOSE_MAKEFILE=ON to %cmake (#474053)
  - preserve timestamp of macros.cmake
  - cosmetics


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.5.rc4
changelog:
  - Update to 2.8.0 RC 4
  - Add FindJNI patch
  - Add test patch from cvs to fix Fedora build test build error


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.3-0.3.rc4
changelog:
  - Update to 2.8.3 RC 4
  - Drop python 2.7 patch fixed upstream
  - No need to fixup source file permissions anymore


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.5-0.3.rc3
changelog:
  - Update to 2.8.5 RC 3
  - Drop upstreamed swig patch
  - Apply upstream fix for issue 12307 (bug #723652)


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.10.2-5
changelog:
  - Add patch from upstream to fix UsrMove handling (bug #917407)
  - Drop %config from rpm macros
  - Define FCFLAGS in cmake macro


author: Orion Poplawski <orion@cora.nwra.com> - 3.0.0-0.5.rc3
changelog:
  - Update to 3.0.0-rc3
  - Add patch to fix FindwxWidgets when cross-compiling for Windows (bug #1081207)


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.0-0.1.rc1
changelog:
  - Update to 3.2.0-rc1
  - Drop ninja patch fixed upstream
  - Upstream now ships icons, add icon-cache scriptlets


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.0-0.2.rc2
changelog:
  - Update to 3.2.0-rc2
  - Drop C++11 ABI workaround, fixed in gcc
  - Drop strict_aliasing patch fixed upstream long ago
  - Drop FindLua52, FindLua should work now for 5.1-5.3


author: Björn Esser <fedora@besser82.io> - 3.5.0-0.3.rc3
changelog:
  - cleanup trailing whitespaces
  - remove el5 stuff
  - doc-subpkg should be noarch'ed
  - doc-subpkg should not require main-pkg
  - add %{?_isa} to the applicable Requires
  - replaced %define with %global
  - handle macrosdir for rpm-macros properly
  - fix ownership of directories, add needed Requires
  - conditionalize appdata
  - handle docdir properly
  - generalize glob for man-pages independent of used compression
  - generalize for use as EPEL-package, too
  - use %license instead of %doc for license-files
  - split the common data-files into a noarch'ed subpackage
  - build html-docs and put them into the doc-subpkg


author: Orion Poplawski <orion@cora.nwra.com> - 3.6.1-2
changelog:
  - Ship symlinks to binaries with major version in name
  - Provide %cmakeX macro, where X is cmake major version


author: Björn Esser <fedora@besser82.io> - 3.6.2-5
changelog:
  - Rebuilt for libjsoncpp.so.11
  - Bootstrap without gui, due inter-circular dependency in qt5-rpm-macros


author: Björn Esser <besser82@fedoraproject.org> - 3.9.0-4
changelog:
  - Temporarily disable RunCMake.CPack_RPM, because it fails for the new
    way RPM handles debug-stuff


author: Björn Esser <besser82@fedoraproject.org> - 3.16.2-1
changelog:
  - Update to 3.16.2
  - Use %_vpath_builddir for out-of-tree build
  - Use %set_build_flags to export build flags if available
  - Use %set_build_flags inside macros.cmake if available


author: Orion Poplawski <orion@nwra.com> - 3.17.0-0.2.rc1
changelog:
  - Use python3 for rpm generators
  - Use lowercase names for cmake provides in generator (in addition to old names)


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Stef Walter <stefw@redhat.com> - 0.73-1
changelog:
  - * Kubernetes UI can connect to non-local API server
  - * Automate Web Service container build on Docker Hub
  - * Add validation options to TLS client connections
  - * PAM pam_ssh_add.so module for loading SSH keys based on login password
  - * Build, testing and other fixes


author: Stef Walter <stefw@redhat.com> - 0.74-1
changelog:
  - * Display an intelligent message when password auth is not possible
  - * Correctly start terminal in home directory
  - * NetworkManager code is in a separate package
  - * PCP is an optional build dependency
  - * Lots of bugs, build and testing fixes


author: petervo <petervo@redhat.com> - 0.75-1
changelog:
  - New design for kubernetes listing pages
  - Namespace filter for kubernetes
  - Pretty http error pages
  - Lots of bugs, build and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.76-1
changelog:
  - * Fix displaying of network bonds
  - * Better Kubernetes filter bar, shell access
  - * Show some Openshift related objects
  - * Use patternfly v2.2


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - * Work better with multipath storage
  - * Deletion of kubernetes objects
  - * Cleaner URLs in the bookmark bar
  - * Show a warning when adding too many machines
  - * Make authentication work when embedding Cockpit
  - * Complete componentizing Cockpit


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 0.77-1.1
changelog:
  - disable FMA support to get it pass all tests on secondary architectures
  - removed duplicated "global rel 1"


author: Stef Walter <stefw@redhat.com> - 0.78-1
changelog:
  - * Fix extreme CPU usage issue in 0.77 release
  - * Fix compatibility with older releases
  - * Offer to activate multipathd for multipath disks
  - * Guide now contains insight into feature internals
  - * Lots of other minor bug fixes


author: Stef Walter <stefw@redhat.com> - 0.79-1
changelog:
  - * Vagrant file for Cockpit development
  - * Use libvirt for testing
  - * Display only last lines of Kubernetes container logs


author: Stef Walter <stefw@redhat.com> - 0.80-1
changelog:
  - * UI for loading, viewing, changing Private SSH Keys
  - * Always start an ssh-agent in the cockpit login session
  - * New listing panel designs
  - * Lots of testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.81-1
changelog:
  - * Allow configuring NTP servers when used with timesyncd
  - * Fix regression in network configuration switches
  - * Make the various graphs look better
  - * Openshift Routes and Deployment Configs can be removed
  - * Run integration tests using TAP "test anything protocol"
  - * Lots of other bug fixes and cleanup


author: Stef Walter <stefw@redhat.com> - 0.82-1
changelog:
  - * Support certificate chains properly in cockpit-ws
  - * Rename the default self-signed certificate
  - * Implement distributed integration testing


author: Stef Walter <stefw@redhat.com> - 0.83-1
changelog:
  - * Fix NTP server configuration bugs
  - * Kubernetes dashboard topology icons don't leave the view
  - * Kubernetes dashboard uses shared container-terminal component
  - * Fix race when adding machine to Cockpit dashboard
  - * Updated documentation for running new distributed tests
  - * Lots of other bug and testing fixes


author: Stef Walter <stefw@redhat.com> - 0.84-1
changelog:
  - * Add a cockpit manual page
  - * Set correct SELinux context for certificates
  - * Remove custom SELinux policy
  - * Testing and bug fixes


author: Stef Walter <stefw@redhat.com> - 0.86-1
changelog:
  - * SOS report UI page
  - * Simpler way for contributors to build cockpit RPMs
  - * Infrastructure for implementing downloads


author: Stef Walter <stefw@redhat.com> - 0.87-1
changelog:
  - * Fix login on Windows, don't prompt for additional auth
  - * Use the machine host name in the default self-signed certificate
  - * Cockpit release tarballs are now distributed in tar-ustar format
  - * Allow overriding package manifests
  - * Testing and build fixes


author: Stef Walter <stefw@redhat.com> - 0.88-1
changelog:
  - * User interface for OSTree upgrades and rollbacks
  - * General reusable purpose angular kubernetes client code
  - * Allow custom login scripts for handling authentication
  - * A specific dashboards can now be the default destination after login
  - * Kill ssh-agent correctly when launched by cockpit-bridge
  - * Add a new cockpit-stub bridge for non-local access


author: Stef Walter <stefw@redhat.com> - 0.89-1
changelog:
  - * Start routine testing of Cockpit on Debian Unstable
  - * Make the config file case insensitive
  - * Reorder graphs on server summary page
  - * Don't suggest syncing users when adding a machine to dashboard
  - * Enable weak dependencies for F24+
  - * Show correct data in per interface network graphs
  - * Fix the Vagrantfile to pull in latest Cockpit
  - * Add Content-Security-Policy header support


author: Stef Walter <stefw@redhat.com> - 0.90-1
changelog:
  - * Fix Content-Security-Policy which broke loading in certain situations
  - * Deal correctly with failures trying to join unsupported domains
  - * Add documentation about Cockpit startup
  - * Better data in storage usage graphs
  - * Start creating debian source packages


author: Stef Walter <stefw@redhat.com> - 0.91-1
changelog:
  - * Fix computing of graph samples on 32-bit OS
  - * Distribute licenses of included components
  - * Distribute development dependencies
  - * Support 'make clean' properly in the tarball


author: Stef Walter <stefw@redhat.com> - 0.92-1
changelog:
  - * OAuth login support
  - * Update Patternfly
  - * Log to stderr when no journal
  - * Make sosreport work on RHEL and Atomic


author: Stef Walter <stefw@redhat.com> - 0.93-1
changelog:
  - * Set system performance profile via tuned
  - * Support for WebSocket client in cockpit-bridge
  - * Support using Nulecule with Openshift
  - * Actually exit cockpit-ws when it's idle


author: Stef Walter <stefw@redhat.com> - 0.94-1
changelog:
  - * Handle interruptions during cockpit-ws start while reading from /dev/urandom
  - * Remove BIOS display from Server Summary page
  - * Support tuned descriptions
  - * Fix Content-Security-Policy in example manifest.json files


author: Stef Walter <stefw@redhat.com> - 0.95-1
changelog:
  - * iSCSI initiator support on the storage page
  - * Page browser title now uses on operating system name
  - * Better look when Cockpit disconnects from the server
  - * Avoid use of NFS in the Vagrantfile
  - * Expand 'Tools' menu when navigating to one of its items
  - * Set a default $PATH in cockpit-bridge


author: Stef Walter <stefw@redhat.com> - 0.102-1
changelog:
  - * Can configure Docker restart policy for new containers
  - * Use a single dialog for creating logical volumes
  - * Package and test the storage UI on Debian
  - * Don't offer 'Computer OU' when joining IPA domains
  - * Don't distribute jshint build dependency due to its non-free license


author: Stef Walter <stefw@redhat.com> - 0.103-1
changelog:
  - * Strict Content-Security-Policy for subscriptions component
  - * New dialog for Kubernetes connection configuration
  - * Release to a cockpit-project Ubuntu PPA
  - * Remove jQuery usage from cockpit.js
  - * New styling for cluster dashboard
  - * Fix build issue on MIPS


author: Stef Walter <stefw@redhat.com> - 0.104-1
changelog:
  - * Show errors correctly when deleting or modifying user accounts
  - * Add support for iSCSI cluster volumes
  - * Strict Content-Security-Policy in the dashboard, sosreport and realmd code
  - * Better list expansion and navigation behavior across Cockpit
  - * Don't show 'Computer OU' field when leaving a domain
  - * Remove usage of bootstrap-select
  - * Show errors properly in performance profile dialog
  - * Fix Cluster sidebar to react to window size
  - * Allow specifying specific tags in registry image streams
  - * Make registry project access policy more visible


author: Stef Walter <stefw@redhat.com> - 0.105-1
changelog:
  - * Strict Content-Security-Policy in all shipped components of Cockpit
  - * Can now add and remove Openshift users to and from groups
  - * Add timeout setting for Cockpit authentication
  - * Registry interface now has checkbox for mirroring from insecure registries
  - * Kubernetes dashboard now allows deletion of Nodes


author: Stef Walter <stefw@redhat.com> - 0.106-1
changelog:
  - * Add namespaces to cockpit CSS classes
  - * Display container image layers in a simpler graph
  - * Hide actions in Cluster projects listing that are not accessible


author: Stef Walter <stefw@redhat.com> - 0.107-1
changelog:
  - * Display image stream import errors
  - * Add GlusterFS persistent volumes in Cluster dashboard
  - * Show a list of pending persistent volume claims
  - * jQuery Flot library is no longer part of the base1 package
  - * Fix Content-Security-Policy issues with jQuery Flot


author: Stef Walter <stefw@redhat.com> - 0.108-1
changelog:
  - * SELinux troubleshooting alerts can now be dismissed
  - * Show SELinux icon for critical alerts
  - * SELinux enforcing mode can be turned off and on with a switch
  - * Kubernetes Nodes are now include charts about usage data
  - * Fix Debian dependency on Docker
  - * Update the look and feel of the toggle switch
  - * Update ListenStream documentation to include address info


author: Dominik Perpeet <dperpeet@redhat.com> - 0.109-1
changelog:
  - * API stabilization, structural cleanup
  - * SELinux Troubleshooting: documentation, support latest API
  - * Update Patternfly
  - * Use CockpitLang cookie and Accept-Language for localization
  - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard
  - * Cockpit terminal now supports shells like fish


author: Stef Walter <stefw@redhat.com> - 0.111-1
changelog:
  - * Tarball build issue in 0.110 is now fixed
  - * The Containers page layouts have been tweaked
  - * Make the Containers resource limits work again
  - * Registry image now have layers displayed correctly


author: Stef Walter <stefw@redhat.com> - 0.112-1
changelog:
  - * Don't show network interfaces where NM_CONTROLLED=no is set
  - * Add textual fields to container memory and CPU sliders
  - * Display contianer memory and CPU resources on Debian
  - * Disable tuned correctly when clearing a performance profile
  - * Fix SELinux enforcing toggle switch and status


author: Stef Walter <stefw@redhat.com> - 0.113-1
changelog:
  - * Show timer information for systemd timer jobs
  - * Use 'active-backup' as the default for new network bonds
  - * When changing system time check formats properly
  - * Hide the machine asset tag when no asset exists
  - * Disable the network on/off switch for unknown or unmanaged interfaces
  - * Show full string for system hardware info and operating system name


author: Stef Walter <stefw@redhat.com> - 0.114-1
changelog:
  - .104
  - * Network configuration of the Ethernet MTU
  - * Red Hat Subscriptions can now specify activation keys and orgs
  - * Start integration testing on CentOS
  - * SSH Host keys are show on system page
  - * Machine ID is shown on system page
  - * Show intelligent password score error messages


author: Stef Walter <stefw@redhat.com> - 0.115-1
changelog:
  - * Setup Docker container and image storage through the UI
  - * Use Webpack to build Cockpit UI packages
  - * Update the Cockpit Vagrant development box to use Fedora 24


author: Stef Walter <stefw@redhat.com> - 0.116-1
changelog:
  - * Support for volumes when starting a docker container
  - * Support for setting environment variables in a docker container
  - * Fix regressions that broke display of localized text


author: Stef Walter <stefw@redhat.com> - 0.117-1
changelog:
  - * Add support for network teams
  - * Select translations for complex language names
  - * Don't allow formating extended partitions
  - * Can configure Openshift Registry so anonymous users can pull images


author: Stef Walter <stefw@redhat.com> - 118-1
changelog:
  - Support PAM conversations on the Login screen
  - Users can create systemd timer jobs
  - Provide default names for volume groups and logical volumes
  - Make Docker graphs work on Debian
  - Only offer to format disks with supported file systems
  - Show all managed NetworkManager devices
  - Use webpack for building Cockpit javascript
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Allow Cockpit packages to require a minimum version of Cockpit
  - Translations fixes


author: petervo <petervo@redhat.com> - 119-1
changelog:
  - Adds basic VM Management and Monitoring
  - MDRaid job improvements
  - Show unmanaged network devices
  - Better errors when formating storage devices
  - Updated VNC example
  - Port subscriptions package to react
  - Allow branding.css to overide shell css


author: Stef Walter <stefw@redhat.com> - 120-1
changelog:
  - New containers page layout
  - Quick filtering of containers and images on the container page
  - Added sidebar for phisical volumes in a volume group
  - Run a separate cockpit-ssh process when making SSH connections
  - Allow connecting to remote machines from the login page
  - Only connect to remote machines already known to Cockpit
  - Fix bugs preventing journal page from working on Firefox 49
  - Add tooltip describing group name in Roles list


author: Stef Walter <stefw@redhat.com> - 121-1
changelog:
  - Network Manager Checkpoints
  - Add Debian Branding
  - Fix GSSAPI login on Debian and Ubuntu
  - Generate map files for debugging Javascript and CSS


author: Stef Walter <stefw@redhat.com> - 122-1
changelog:
  - Works with UDisks in addition to storaged
  - Allow logging into other systems from login page
  - Explicitly specify javascript dependency versions


author: Stef Walter <<stefw@redhat.com>> - 123-1
changelog:
  - Release a second tarball with cached javascript dependencies
  - Start verifying that Cockpit works on Ubuntu 16.04
  - Enable and verify the network functionality on Debian
  - Integration tests now log core dumps for diagnosis


author: Stef Walter <<stefw@redhat.com>> - 124-1
changelog:
  - Build and test on Debian Jessie
  - Deprecate older javascript files
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers
  - Fix regression where Date Picker was not shown in System Time dialog


author: Stef Walter <<stefw@redhat.com>> - 125-1
changelog:
  - Cockpit is now properly translatable
  - Display OSTree signatures
  - New expandable views for storage devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - Start testing on RHEL 7.3
  - More strict about transport channels a bridge accepts
  - System shutdown can be scheduled by date


author: Stef Walter <<stefw@redhat.com>> - 126-1
changelog:
  - Show security scan information about containers
  - Choose whether password is cached and reused on login screen
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - The remotectl command can now combine certificate and key files
  - Support Openshift's certificate autogeneration when used as a pod
  - The remotectl tool now checks for keys in certificate files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - Javascript code can now export DBus interfaces
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <<stefw@redhat.com>> - 129-1
changelog:
  - Diagnostic sosreport feature now works on RHEL Atomic again
  - The configure script has a --disable-ssh option to toggle libssh dep
  - The configure --disable-ws option has been replaced with above.
  - Unit tests have been fixed on recent GLib versions
  - Several Fedora and Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 130-1
changelog:
  - cockpit.file() can read non-memory-mappable file
  - Add kdump configuration user interface
  - Allow container Registry Console user names with '@' sign


author: Stef Walter <<stefw@redhat.com>> - 131-1
changelog:
  - Show session virtual machines on Machines page
  - Fix use of the TAB key on login page
  - Robust naming and detection of network bond master
  - Debian packaging fixes


author: Martin Pitt <<mpitt@redhat.com>> - 132-1
changelog:
  - Make basic SELinux functionality available without setroubleshootd
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - Hide "autoconnect" checkbox for network devices without settings
  - Support for external providers other than libvirt on Machines page
  - Some tooltip fixes
  - Add option to restrict max read size to the Cockpit file API
  - Relax dependencies on cockpit-bridge package on Debian/Ubuntu
  - Rename cockpit-test-assets package to cockpit-tests
  - When touching patched files handle case of only one file
  - Always build the cockpit-tests subpackage


author: Martin Pitt <<mpitt@redhat.com>> - 133-1
changelog:
  - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json
  - Fix NetworkManager's "MTU" dialog layout
  - Build the cockpit-tests package for releases too
  - Split translations into individual packages
  - Packages now configure alternate cockpit-bridge's to interact with the system


author: Martin Pitt <<mpitt@redhat.com>> - 134-1
changelog:
  - Show /etc/motd in the "System" task page
  - Drop "System" service actions which are intended for scripts
  - Make login page translatable
  - NetworkManager now activates slave interfaces by itself
  - Add call timeout option to the cockpit.dbus() API
  - The Debian packaging is now able to apply binary patches


author: Martin Pitt <<mpitt@redhat.com>> - 137-1
changelog:
  - Read ~/.ssh/known_hosts for connecting to remote machines with ssh
  - The Storage LVM setup can add unpartitioned free space as a physical volume
  - NetworkManager's Team plugin can be used on architectures other than x86_64
  - Cockpit's web server understands and properly responds to HTTP HEAD requests
  - Allow parameter substitution in manifest when spawning peer bridges


author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <<mpitt@redhat.com>> - 139-1
changelog:
  - Show more information about virtual machines, such as boot order
  - Fix enablement of timer systemd units created on Services page
  - Fix Storage crash on multiple iSCSI sessions
  - cockpit-docker is now installable with docker-ce or other alternatives
  - Hide docker push commands on Registry image pages for  "pull" roles


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Martin Pitt <martin@piware.de> - 152-1
changelog:
  - Add Applications page
  - Add automatic update configuration for dnf to Software Updates
  - Fix cockpit-bridge crash if /etc/os-release does not exist


author: Martin Pitt <martin@piware.de> - 153-1
changelog:
  - Add cockpit-ovirt package to control oVirt virtual machine clusters
  - Clean up rpmlint/lintian errors in the packages


author: Martin Pitt <martin@piware.de> - 154-1
changelog:
  - Center the "Disconnected" message in the content area
  - Fix two layout regressions on the Cluster page
  - Remove long-obsolete "./configure --branding" option


author: Martin Pitt <martin@piware.de> - 155-1
changelog:
  - Add NFS client support to the Storage page
  - Add "Maintenance" switch for oVirt hosts
  - Fix Terminal rendering issues in Chrome
  - Prevent closing Terminal with Ctrl+W when focused
  - Support the upcoming OpenShift 3.7 release


author: Martin Pitt <martin@piware.de> - 156-1
changelog:
  - Redesign navigation and support mobile browsing
  - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs
  - Add project homepage link to Apps page
  - Maintain issue(5) file with current Cockpit status
  - Use event-driven refresh of oVirt data instead of polling


author: Martin Pitt <martin@piware.de> - 158-1
changelog:
  - Add check boxes for common NFS mount options
  - Clarify Software Update status if only security updates are available
  - Create self-signed certificates with SubjectAltName


author: Martin Pitt <martin@piware.de> - 159-1
changelog:
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <martin@piware.de> - 160-1
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata
  - Install AppStream collection metadata packages on demand on Apps page
  - Add AppStream metadata to cockpit-sosreport for showing up on Apps page
  - Change CPU graphs to use "100%" for a fully loaded multi-processor system
  - Show storage, network, and other numbers with 3 digits of precision
  - Add an example bastion container


author: Martin Pitt <martin@piware.de> - 161-1
changelog:
  - New VMs can be created on Machines page
  - VMs running in Kubernetes can now be deleted
  - Improve LVM volume resizing
  - Add new Hardware Information page
  - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu
  - Rename cockpit-ovirt package to cockpit-machines-ovirt
  - Stop advertising and supporting cockpit-bundled jQuery library


author: Martin Pitt <martin@piware.de> - 163-1
changelog:
  - Drop "Transfer data asynchronously" VDO option on Storage page
  - Hide Docker storage pool reset button when it cannot work properly
  - Update jQuery to version 3.3.1 (deprecated cockpit API!)


author: Martin Pitt <martin@piware.de> - 164-1
changelog:
  - Storage: Move NFS management into new details page
  - System: Show available package updates and missing registration
  - System: Fix inconsistent tooltips
  - Logs: Change severities to officially defined syslog levels
  - Machines: Add error notifications
  - Accessibility improvements
  - Reloading the page in the browser now reloads Cockpit package manifests


author: Martin Pitt <martin@piware.de> - 165-1
changelog:
  - Storage: Show more details of sessions and services that keep NFS busy
  - Machines: Detect if libvirtd is not running
  - Machines: Show virtual machines that are being created


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 170-1
changelog:
  - Software Updates: Layout rework
  - oVirt: Use authenticated libvirt connection by default
  - Split out optional packages into new cockpit-appstream dist-git, see
    discussion in RHELPLAN-3661; append "+as" version suffix to avoid collisions
    with cockpit revisions.
  - Temporarily disable cockpit-kubernetes rhbz#1584155


author: Martin Pitt <martin@piware.de> - 171-1
changelog:
  - Machines: Add virtual CPU configuration
  - Kubernetes: Add KubeVirt pod metrics
  - Docker: Show container volumes
  - Fix broken actions for non-administrators
  - Networking: Handle non-running NetworkManager
  - Accounts: User role improvements
  - Localize times


author: Martin Pitt <martin@piware.de> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support


author: Martin Pitt <mpitt@redhat.com> - 173-1
changelog:
  - Storage: Offer installation of VDO
  - Machines: Add disks to a virtual machine
  - Disable cockpit-docker rhbz#1602951


author: marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Fix building with platform-python rhbz#1631174
  - Machines: Fix system VMs with non-root users rhbz#1632772
  - Machines: Offer cockpit-machines as Application


author: Martin Pitt <mpitt@redhat.com> - 181-1
changelog:
  - Fix key typing in file auto complete widget rhbz#1637866
  - Use libvirt-dbus by default rhbz#1637803


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Machines: Manage storage pools
  - Machines: libvirt connection choice during VM creation
  - PackageKit page: Display registration status clearly
  - Drop .map files from -tests, should be only in debuginfo package rhbz#1648953


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Machines: Fix Dialog and tab layouts rhbz#1658490, rhbz#1657119
  - Machines: Fix information popup in vCPU dialog rhbz#1657133
  - Machines: Enforce https:// URLs for remote VM image locations rhbz#1644267
  - Storage: Filesystem labels are validated upfront rhbz#1655580
  - Storage: Some mount options are prefilled when needed
  - Storage: Fix empty tooltips rhbz#1655922


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Machines: Remove useless notifications from disk tab rhbz#1632800
  - Machines: Add deletion and deactivation of storage pools/volumes
    rhbz#1658847, rhbz#1668882, rhbz#1668877
  - Machines: Fix preparation of disk data for disks of type volume rhbz#1661897
  - Machines: Add disk format field when creating new disk xml rhbz#1662213
  - Machines: Fix storage pool state after destroy/undefine rhbz#1663793
  - Machines: Add import of existing images rhbz#1666825
  - Machines: Enable/disable VM autostart rhbz#1670491


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - Storage: Fix pre-filling of vdo fstab options rhbz#1672935
  - Machines: Add PXE boot rhbz#1680973
  - Machines: Add pause/resume rhbz#1680401
  - Machines: Configure boot device order rhbz#1672760
  - Machines: Import existing qcow2 image rhbz#1666825
  - Machines: Edit virtual memory rhbz#1676557
  - Machines: Deletion of storage volumes rhbz#1668882


author: Martin Pitt <mpitt@redhat.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Machines: Auto-detect guest operating system rhbz#1652959
  - Machines: Support https://*.iso installation source rhbz#1684422
  - Machines: Fix crash on VM creation with Edge browser rhbz#1692707
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Machines: Support ISO source from http:// rhbz#1644267
  - Machines: Select destination storage pool on creation rhbz#1658852
  - Machines: Hide iscsi-direct type from create new pool dialog when not
    available rhbz#1709708
  - Machines: Fix handling of storage pools that failed to get active
    rhbz#1715388
  - Machines: Fix OS detection while changing installation source rhbz#1715409


author: Martin Pitt <mpitt@redhat.com> - 197-1
changelog:
  - Machines: Support all storage pool types for new disks
  - Machines: Show available space on host at VM creation
  - Machines: Fix regression on network tab rhbz#1720267


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - New upstream release 219
  - Send key functionality for the virtual machines (rhbz#1693487)
  - Fix dnf-automatic timer parsing (rhbz#1829685)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - machines: Remove --noreboot parameter to virt-install for VM installation
    (rhbz#1750637)
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 224-1
changelog:
  - Translation updates
  - Machines: Remove creation of user account (rhbz#1853918)
  - Machines: Fix reboot after PXE installation (rhbz#1853408, rhbz#1859045)
  - Machines: Fix notification for transient VMs (rhbz#1853649)
  - Machines: Make Storage/Network lists consistent with VM list (rhbz#1854257)
  - Machines: Fix close button on NIC Edit modal dialog header (rhbz#1857044)


author: Matej Marusak <mmarusak@redhat.com> - 224.1-1
changelog:
  - machines: add padding to storage pools list cells (rhbz#1857500)
  - machines: Fix OS autodetection in create VM dialog (rhbz#1862333)
  - machines: Fix TypeError for OSRow in VM creation dialog (rhbz#1862106)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Brian C. Lane <bcl@redhat.com> - 0.1.1-1
changelog:
  - fixes blueprints end-to-end test (jgiardin)
  - Hides Comment feature from Pending Changes modal (jgiardin)
  - Remove non-functional UI elements/components (jgiardin)
  - fixes line length in unit test (jgiardin)
  - update selector for Edit Blueprint button in test (jgiardin)
  - fixes empty state on blueprints page and tests (jgiardin)
  - fixes spacing errors (jgiardin)
  - fixes bad merges during rebase (jgiardin)
  - handles error case for fetching blueprints (jgiardin)
  - sets timeout on Loading state (jgiardin)
  - how did that 'n' get in there? (jgiardin)
  - fixes line length (jgiardin)
  - Disables actions (jgiardin)
  - Updates UI based on state, for loading and error (jgiardin)
  - Adds reducer for updating state when an error occurs (jgiardin)
  - updates state to hold values for fetch status (jgiardin)
  - components: Use consistent syntax for handlers (lars)
  - Fix two issues. (henrywangxf)
  - test/create.image: simplify shallow wrapper creation (lars)
  - CreateImage: don't call unset handlers (lars)
  - test/create.image: also conider handleStartCompose (lars)
  - correcting the initial state (jgiardin)
  - updates mockState in unit tests to match state updates for Filters (jgiardin)
  - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin)
  - Remove mock data (lars)
  - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf)
  - Domain socket support in UI testing. (henrywangxf)
  - Update queue status text, Remove cancel button (jacobdkozol)
  - Added status icons for imageListView (jacobdkozol)
  - Add start compose functionality (jacobdkozol)
  - Fix blueprint page issue loading components (jacobdkozol)
  - Remove redux persist (jacobdkozol)
  - Remove unused code (lars)
  - Merge pull request #248 from jgiardino/filter (jgiardin)
  - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin)
  - Fix style of pagination input under available components (anilsson)
  - fix issue when multiple filters are defined (jgiardin)
  - implements filtering and refactors toolbars (jgiardin)


author: Brian C. Lane <bcl@redhat.com> - 0.1.2-1
changelog:
  - New Version 0.1.2
    Related: rhbz#1613058
  - Add the .spec files to .PHONY (bcl)
  - Add welder-web and cockpit-composer release instructions (bcl)
  - Add a 'tag' target to the Makefile (bcl)
  - Adjust image list layout to improve alignment (jgiardin)
  - Fix blueprint packages getting added to history (jacobdkozol)
  - Fixed bug where startComposeApi would not return start compose response (sfondell)
  - Run `make po-push` from travis on pushes to master. (dshea)
  - Add a po-push target to the Makefile. (dshea)
  - Don't call compose API on the blueprints page (lars)
  - Support downloading images (lars)
  - Fix fetchComposes() call (lars)
  - Update text string (jgiardin)
  - add bootstrap class for large modals (jgiardin)
  - Fix issues with translated strings and add one more for "Close" (jgiardin)
  - Make strings translatable (but includes build error) (jgiardin)
  - Update layout (jgiardin)
  - Don't show custom sources section if empty (jgiardin)
  - Add modal for listing sources (jgiardin)
  - Revert "Revert "Add python and gcc to the Dockerfiles."" (dshea)
  - Include translations in the dist tarball (dshea)
  - Remove the zanata-js crud from package-lock.json (dshea)
  - Fix how fetching blueprints/composes is triggered (jacobdkozol)
  - Update API calls error messages (jacobdkozol)
  - Fix polling issue. Add error action. (jacobdkozol)
  - Add loading images from prior sessions and sort by start time. (jacobdkozol)
  - Revert "Run `npm rebuild` after `npm install`." (lars)
  - Revert "Add python and gcc to the Dockerfiles." (lars)
  - Don't update translations on every build (lars)
  - Fix yamllint errors on .travis.yml (dshea)
  - Add new requirements to the travis environment (dshea)
  - Add a script for testing translations. (dshea)
  - Run `npm rebuild` after `npm install`. (dshea)
  - Make the editBlueprint selector more specific. (dshea)
  - Add python and gcc to the Dockerfiles. (dshea)
  - Add a i18n section to the README (dshea)
  - Create cockpit translation modules. (dshea)
  - Extract cockpit manifest strings for translation. (dshea)
  - Add translated messages. (dshea)
  - Add scripts for interacting with Zanata. (dshea)
  - Internationalize strings with react-intl. (dshea)
  - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf)
  - Build srpm together with rpm (atodorov)
  - Images list UI refinements (jgiardin)
  - cockpituous-release: Use upstream release-source (martinpitt)
  - core: Use escalated privileges to access Lorax API (stefw)
  - remove utils from Layout (jgiardin)
  - Remove unused Layout components (jgiardin)
  - Submit coverage report only if present (atodorov)
  - Use default composer dir without --group option (atodorov)
  - Fix created image not being added to state (jacobdkozol)
  - package.json: Remove bootstrap-select (lars)
  - package.json: Update stylelint (lars)
  - blueprints: Show actual error message (lars)
  - core: propagate errors from cockpitFetch() (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.3-1
changelog:
  - New version 0.1.3
    Related: rhbz#1613058
  - Update Create Image notifications (#328) (jgiardin)
  - Make strings translatable in Pending Changes dialog (#341) (jgiardin)
  - Makefile: don't run po-pull on dist (lars)
  - Add the .spec files to .PHONY (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.1.4-1
changelog:
  - New version 0.1.4
    Related: rhbz#1613058
  - Adds queue status to an infotip in the Create Image modal (jgiardin)
  - Update Create Image modal to also commit unsaved changes (jgiardin)
  - Catching a couple of minor issues (jgiardin)
  - Update Create Image modal to include blueprint object instead of just name (jgiardin)
  - Update Create Image button selector in end-to-end test (jgiardin)
  - Display warning messages to the user in Create Image modal (jgiardin)
  - use updated property key from api for date created (jgiardin)
  - translations: Fail when zanata-js is not installed (lars)
  - README.md: Add missing `translations:` (lars)
  - translations: remove test target (lars)
  - po: Update from Fedora Zanata (lars)
  - translations: move po files and scripts to po/ (lars)
  - translations: Strip country code when loading react-intl's locale-data (mpitt)
  - remove redundant .then(data => data) (jgiardin)
  - Add ability to stop builds that are waiting or running (jgiardin)
  - Change text from "Delete Build" to "Delete Image" (jgiardin)
  - Update Delete Blueprint modal to match layout of Delete Build (jgiardin)
  - Fix miscellaneous propType warnings (jgiardin)
  - Include confirmation modal for deleting a finished build (jgiardin)
  - Swap order of date and type in the Image list item details (jgiardin)
  - Add Delete action for Finished composes (jgiardin)
  - Add ability to delete Failed builds (jgiardin)
  - test_blueprints: Make blueprint selection more robust (lars)
  - Use upstream patternfly-react's Tab component (lars)
  - Changes en-dash to dash and adds spaces (jgiardin)
  - Updates based on a11y review, also simplified i18n format (jgiardin)
  - minor tweaks to improve the screen reader experience (jgiardin)
  - Makes strings translatable in pagination for available components (jgiardin)
  - Update React and enzyme (lars)
  - package.json: Use ~ instead of ^ versions for dependencies (lars)
  - Drop unused dependencies (lars)
  - package.json: update dependencies (lars)
  - Remove package-lock.json (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.5-1
changelog:
  - New version 0.1.5
    Related: rhbz#1613058
  - Found a code coverage bug and fix it. (henrywangxf)
  - Update README.md to support Cockpit CI. (henrywangxf)
  - Updates Create Image modal to not have a default image type (jgiardin)
  - Add support for Modules during Add/Remove (jgiardin)
  - new test: Build mock images and verify download becomes enabled (atodorov)
  - Fix flaky issue when running test on chrome (henrywangxf)
  - Add selenium debug support. (henrywangxf)
  - Creates user-friendly labels to display for image types (jgiardin)
  - Compile with code coverage enabled, collect coverage result and upload to codecov.io. (henrywangxf)
  - new test: verify stock blueprints from backend are displayed (atodorov)
  - Simplify selenium startup again (mpitt)
  - Temporarily support selenium images with and without -debug variants (mpitt)
  - Fix python string format issue (henrywangxf)
  - Remove ugly blank except in tests (henrywangxf)
  - README: We're running tests on Cockpit's CI now (lars)
  - Fix tests to not exit with non-zero code (#362) (henrywangxf)
  - Update Discard Changes to delete workspace (jgiardin)
  - Fix test case "Then selected component icon should have border" (henrywangxf)
  - Cockpit CI Integration (henrywangxf)
  - Display modules in list of selected components (jgiardin)
  - pass blueprint data that's expected on save (jgiardin)
  - Fix /run/weldr permission issue (henrywangxf)
  - Fix end-to-end test cases (henrywangxf)
  - po: Update Japanese translations from Zanata (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.6-1
changelog:
  - New version 0.1.6
    Resolves: rhbz#1640184
  - Include spec into release tarball (mpitt)
  - Fix a bug in importSanity test. (henrywangxf)
  - Add RHEL-X in welder-web test scenarios. (henrywangxf)
  - test: Support Cockpit test scenario (mpitt)
  - Makefile: Simplify variable defaults (mpitt)
  - A big commit to fix random failure on chrome. (henrywangxf)
  - Remove inert 'Architecture' field in 'Create Image' dialog (#388) (stefw)
  - po: Update from Fedora Zanata (lars)
  - Remove ForEach to run two test cases but use two separate cases. If there's
    one case failed, I can find it according to case name. (henrywangxf)
  - Wait for delete menu action visable before click it. (henrywangxf)
  - test: Drop node installation from vm.install (mpitt)
  - Don't clean bots/ directory for VM preparation (mpitt)
  - Two improvements: (henrywangxf)
  - Go to view blueprint page by clicking blueprint name link instead of by URL.
    That helps improving case stability. (henrywangxf)
  - Move sed to test/vm.install from test/run because developers do not normally
    use test/run to trigger tests. (henrywangxf)
  - test: Only install node if it isn't already available (mpitt)
  - Makefile: bots is not a phony target (mpitt)


author: Brian C. Lane <bcl@redhat.com> - 0.1.7-1
changelog:
  - New version 0.1.7
    Resolves: rhbz#1640184
  - Capitalize OpenStack corrently in the image create dialog (anilsson)
  - Add AppStream metainfo (mpitt)
  - Make cockpit-composer the only package name (mpitt)
  - Lots of integration test improvements (henrywangxf)


author: Martin Pitt <mpitt@redhat.com> - 0.1.8-1
changelog:
  - New version 0.1.8
  - Provide visual indication when a blueprint component is a dependency
  - Enable Undo to retrieve changes after the Discard Changes action
  - Update how blueprint contents are depsolved when contents are added/removed
  - Display an error if a component is added that results in a depsolve failure
  - Show all versions available for a package
  - Provide ability to specify a wildcard version for a package rhbz#1673066


author: Martin Pitt <mpitt@redhat.com> - 0.3-1
changelog:
  - New version 0.3
  - Add/edit/remove sources
  - Remove new line in encrypted password rhbz#1655862
  - Resolve issues with changes saved to the workspace


author: Martin Pitt <mpitt@redhat.com> - 4-1
changelog:
  - Add additional blueprint name validation rhbz#1696415
  - Fix images not loading on refresh
  - Add notification for source repo deletion
  - Fix AppStream ID
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Show depsolve errors on the blueprints page
  - Add labels for additional output types (rhbz#1769154)
  - Expose Image Builder on /composer, not /welder
  - Define a URL for each tab on a blueprint page
  - Provide a link in the image creation notification to the Images tab on the blueprint page


author: Matej Marusak <mmarusak@redhat.com> - 12.1-1
changelog:
  - Fix integration tests, external test repository URL ceased to exist
  - Translation updates rhbz#1784453
  - Add documentation URL page help menu


author: Lars Karlitski <larskarlitski@redhat.com> - 21.1-1
changelog:
  - Support setting parameters (ref and parent) for ostree images
  - Loosen restrictions on password strength
  - Various UI refinements


author: Jacob Kozol <jkozol@redhat.com> - 22.1-1
changelog:
  - Patternfly imports are standardized to be consistent with cockpit
  - Cancel image build button bug fixed
  - Empty components state provides a help message
  - Wizard component has bug fixes and is refactored for future scalability
  - Test updates
  - ESLint upgraded to version 7 and the code style is improved
  - Translation files are updated from fedora weblate
  - Cockpit-composer's dependency on osbuild-composer  is more specific
  - Coverity scan is now supported to help improve code quality
  - Resolves: #1820539


author: Jacob Kozol <jkozol@redhat.com> - 27-1
changelog:
  - Sync with upstream release 27
  - Add additional form validation for the Create Image Wizard
  - Improve page size dropdown styling
  - Improve error state messages
  - Update pagination component for pf4
  - Add wildcards and support for multiple values to input filter
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 29-1
changelog:
  - Add ability to upload to VMWare
  - Add support for additional ostree parameters
  - Update NPM dependencies
  - Add and update translations
  - Minor test fixes


author: Jacob Kozol <jkozol@redhat.com> - 29.1-1
changelog:
  - Add RHEL for Edge Container and Installer image types
  - Update translations
  - Add tests for new image types
  - Improve test reliability


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 15-1
changelog:
  - Drop obsolete functionality for Fedora Atomic
  - Localize dates and times
  - Make tests non-destructive, to support gating
  - Fix crash on filtering anonymous images
  - Translation updates
  - Show historical logs


author: Jindrich Novy <jnovy@redhat.com> - 25-3
changelog:
  - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 25-4
changelog:
  - replace docker.io with quay.io for gating tests due do
    docker.io new pull rate limit requirements
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Justin Stephenson <jstephen@redhat.com> - 2-1
changelog:
  - Release 2
  - Optimize performance when playing back flooded output recordings.
  - Make Logs View optional rendered with a toggle button.
  - Make Logs component a child of Recording component.
  - Fix Recording page column sorting in Google Chrome.
  - CSS updates for Patternfly 4 compatibility.
  - Replace term.js with maintained xterm.js library.
  - Fix hostname and username filtering.


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correct path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6
  - Bump testlib to 229
  - Add binary recording test
  - Update UI to adopt PatternFly 4
  - Update dependencies
  - Use --all journalctl option
  - Fixed timezone issue by searching in client time
  - Bump cockpit test version from 199 to 219
  - Improve test coverage with more tests
  - Simplify and cleanup existing tests


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.2-1
changelog:
  - 1.8.2 stable release
  - http://ftp.gnome.org/pub/GNOME/sources/cogl/1.8/cogl-1.8.2.news
  - Enable gdk-pixbuf2 support - Fixes RHBZ # 738092


author: Adam Jackson <ajax@redhat.com> 1.8.2-4
changelog:
  - cogl-1.8.2-lp-no-framebuffer-blit.patch: Disable the subbuffer blit code
    when running on llvmpipe until it's unbroken.


author: Kalev Lember <kalevlember@gmail.com> - 1.17.4-1
changelog:
  - Update to 1.17.4, which includes soname bump
  - Build a temporary compat-libcogl19 subpackage to ease the rebuilds


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> - 1-7
changelog:
  - Add the user-writable system-wide per-machine ICC profile directory from
    the new version of the OpenIccDirectoryProposal.


author: Richard Hughes <richard@hughsie.com> 0.1.7-1
changelog:
  - New upstream version.
  - Create /var/lib/colord at buildtime not runtime for SELinux
  - Ensure profiles with embedded profile checksums are parsed correctly
  - Move the colorimeter rules to be run before 70-acl.rules
  - Stop watching the client when the sensor is finalized
  - Ensure the source is destroyed when we unref CdUsb to prevent a crash
  - Only enable the volume mount tracking when searching volumes


author: Richard Hughes <richard@hughsie.com> 0.1.8-1
changelog:
  - New upstream version
  - Add a webcam device kind
  - Add a timestamp when making profiles default
  - Add support for reading and writing ICC profile metadata
  - Allow the client to pass file descriptors out of band to CreateProfile
  - Prettify the device vendor and model names
  - Split out the sensors into runtime-loadable shared objects
  - Provide some GIO async variants for the methods in CdClient
  - Ensure GPhoto2 devices get added to the device list


author: Richard Hughes <richard@hughsie.com> 0.1.11-2
changelog:
  - Remove the sedding libtool's internals as it breaks
    generation of the GObject Introspection data.


author: Richard Hughes <richard@hughsie.com> 0.1.13-1
changelog:
  - New upstream version
  - Ensure uid 0 can always create devices and profiles
  - Reduce the CPU load of clients when assigning profiles


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream version
  - This release fixes an important security bug: CVE-2011-4349.
  - Do not crash the daemon if adding the device to the db failed
  - Fix a memory leak when getting properties from a device


author: Richard Hughes <richard@hughsie.com> 0.1.16-1
changelog:
  - New upstream version
  - Now runs as a colord user rather than as root.
  - Support more ICC metadata keys
  - Install a systemd service file
  - Support 2nd generation Huey hardware


author: Richard Hughes <richard@hughsie.com> 0.1.17-1
changelog:
  - New upstream version
  - Add an LED sample type
  - Add PrivateNetwork and PrivateTmp to the systemd service file
  - Fix InstallSystemWide() when running as the colord user


author: Richard Hughes <richard@hughsie.com> 0.1.18-1
changelog:
  - New upstream version
  - Add a Manager.CreateProfileWithFd() method for QtDBus
  - Split out the SANE support into it's own process
  - Fix a small leak when creating devices and profiles in clients
  - Fix cd-fix-profile to add and remove metadata entries
  - Install per-machine profiles in /var/lib/colord/icc


author: Richard Hughes <richard@hughsie.com> 0.1.20-1
changelog:
  - New upstream version
  - Add a sensor-set-options command to the colormgr tool
  - Add the concept of 'options' on each color sensor device
  - Enable gtk-doc in the default distro build


author: Richard Hughes <richard@hughsie.com> 0.1.21-1
changelog:
  - New upstream version
  - Do not install any parts of colord-sane if --disable-sane is specified
  - Fix InstallSystemWide() by not writing a private file
  - Save the CCMX and ITx files to be compatible with argyllcms
  - The ColorHug has a new VID and PID


author: Richard Hughes <richard@hughsie.com> 0.1.22-1
changelog:
  - New upstream version
  - Split out colord-gtk to a new sub-project to prevent a dep loop
  - Add many generic introspection type arguments
  - Check any files in /usr/share/color/icc have the content type
  - Do not create the same object paths if two sensors are plugged in
  - Fix the udev rules entry for the i1Display3


author: Richard Hughes <richard@hughsie.com> 0.1.24-1
changelog:
  - New upstream version
  - Fix a critical warning when user tries to dump a non-icc file
  - Remove libsane support and rely only on udev for scanner information
  - Set the seat for devices created in the session and from udev


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version
  - Add a create-standard-space sub-command to cd-create-profile
  - Add a profile metadata key of 'License'
  - Add a set-version command to the cd-fix-profile command line tool
  - Create linear vcgt tables when using create-x11-gamma
  - Fix GetStandardSpace so it can actually work
  - Move the named color examples to shared-color-profiles


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version
  - Add a session helper that can be used to calibrate the screen
  - Add some defines for the Spyder4 display colorimeter
  - Add support for reading and writing .cal files to CdIt8
  - Add the ability to 'disable' a device from a color POV
  - Create ICCv2 profiles when using cd-create-profile
  - Use enumerated error values in the client library
  - Use spotread when there is no native sensor driver


author: Richard Hughes <richard@hughsie.com> 0.1.27-1
changelog:
  - New upstream version
  - Add some more calibration attach images
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines


author: Kalev Lember <kalevlember@gmail.com> 0.1.27-2
changelog:
  - Split out libcolord to colord-libs subpackage, so that the daemon package
    doesn't get multilibbed


author: Richard Hughes <richard@hughsie.com> 0.1.27-4
changelog:
  - Add BR systemd-devel so the seat tracking stuff works
  - Build with full compiler output
  - Do not build the profiles in parallel, backported from upstream
  - Limit the memory allocation to 2GiB when building profiles
  - Do not attempt to build the print profiles on ARM or PPC hardware


author: Richard Hughes <richard@hughsie.com> 0.1.28-1
changelog:
  - New upstream version
  - Add some default GSetting schema values for the calibration helper
  - Add the sensor images as metadata on the D-Bus interface
  - Quit the session helper if the device or sensor was not found


author: Richard Hughes <richard@hughsie.com> 0.1.29-1
changelog:
  - New upstream version
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Allow profiles to have a 'score' which affects the standard space
  - Change the Adobe RGB description to be 'Compatible with Adobe RGB (1998)'
  - Detect profiles from adobe.com and color.org and add metadata
  - Do not auto-add profiles due to device-id metadata if they have been removed
  - Ensure profiles with MAPPING_device_id get auto-added to devices
  - Install various helper libraries for access to hardware
  - Set the additional 'OwnerCmdline' metadata on each device


author: Richard Hughes <richard@hughsie.com> 0.1.30-1
changelog:
  - New upstream version
  - Append -private to the driver libraries as they have no headers installed
  - Do not show duplicate profiles when icc-profiles-openicc is installed
  - Speed up the daemon loading and use less I/O at startup


author: Richard Hughes <richard@hughsie.com> 0.1.31-1
changelog:
  - New upstream version
  - Calculate the display calibration based on the Lab and target display gamma
  - Interpolate the gamma data to the VCGT size using Akima
  - Add some more display vendor names to the display fixup table
  - Fix the argyll sensor driver when using the ColorMunki Smile
  - Fix the gamut warning to check primaries wider than CIERGB and ProPhoto
  - Move the private sensor libraries out of the pure lib space


author: Richard Hughes <richard@hughsie.com> 0.1.32-1
changelog:
  - New upstream version
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles
  - Add translated descriptions to the ICC profiles


author: Richard Hughes <richard@hughsie.com> 0.1.33-1
changelog:
  - New upstream version
  - Add some translated profile descriptions for the CMYK profiles
  - Add the FOGRA45L and FOGRA47L CMYK and eciRGBv1 profiles
  - Check the generated CCMX matrix for invalid data
  - Do not print a warning if the DBus property does not exist
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'
  - Always write C-locale floating point values in IT8 files
  - Initialize the value of the CCMX matrix
  - Never promote localized v2 ICC profiles to v4
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.1.1-1
changelog:
  - New upstream version
  - This release bumps the soname of libcolord as long deprecated methods have
    finally been removed. Any programs that link against libcolord will have to
    be recompiled against this new version.
  - This unstable branch is full of new features and experimental code, and
    therefore this release will be restricted to rawhide.
  - Remove the now-unused /etc/colord.conf
  - Update the colormgr man page to reflect reality


author: Richard Hughes <richard@hughsie.com> 1.1.2-1
changelog:
  - New upstream version
  - Add a 'dump' colormgr command to aid debugging
  - Allow profiles to be added or removed when the device is not enabled
  - Always return soft-add calibration profiles before soft-add EDID profiles
  - Do not mix up device paths and device IDs in the documentation
  - Fix an error when building the print profiles
  - Fix the AdobeRGB and WideGamutRGB gamma values
  - Fix up various vendor quirks
  - Migrate from usb_id and usb_db to udev builtins usb_id and hwdb
  - Set 'GAMUT_coverage(srgb)' when generating standard space profiles
  - Show a warning for incorrect or extra command line arguments
  - Use %ghost to avoid removing databases on upgrades
  - Use the exact D50 whitepoint values


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream version
  - Never print incomplete 'colormgr dump' output
  - Restrict the length of key and values when setting metadata


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream version
  - Only syslog() profile additions when they're added via DBus
  - Reset the LCMS log handlers to default after use
  - Use the threadsafe versions of the LCMS functions
  - Resolves: #1016425


author: Richard Hughes <richard@hughsie.com> 1.1.5-1
changelog:
  - New upstream version
  - Do not crash when moving the sensor position during calibration
  - Do not crash with zero-sized ICC file
  - Do not create legacy locations
  - Ensure the ICC version is set when creating from the EDID
  - Ensure the parsed EDID strings are valid UTF-8
  - Fix crash when using cd_color_get_blackbody_rgb()
  - Never add USB hubs as scanner devices even if tagged
  - Never create color managed webcam devices


author: Richard Hughes <richard@hughsie.com> 1.1.5-2
changelog:
  - Add conflict on icc-profiles-openicc
  - The OpenICC profiles are not really compatible for a few reasons:
   * The profiles are duplicates of the ones shipped in the colord package
   * The don't contain the correct metadata so the standard spaces show up in the
     device profile chooser.
   * The profiles don't contain an embedded ID, so colord has to hash them all
     manually at startup, which makes colord look bad in bootchart
   * A duplicate mime rule is installed which matches shared-mime-info one


author: Ville Skyttä <ville.skytta@iki.fi> - 1.1.5-3
changelog:
  - Move ldconfig %post* scriptlets to -libs.
  - Run test suite during build.
  - Fix bogus date in %changelog.


author: Richard Hughes <richard@hughsie.com> 1.1.6-1
changelog:
  - New upstream version
  - Fix the tag 'size' when viewing a profile in cd-iccdump
  - Only include libudev in Requires.private on Linux
  - Use the corect sensor-kind values for GretagMacbeth sensors
  - Do not use G_GNUC_WARN_UNUSED_RESULT when uninhibiting
  - Handle failure to initialise GUsb in self-tests


author: Richard Hughes <richard@hughsie.com> 1.1.7-1
changelog:
  - New upstream version
  - Use the new cmsContext functionality in LCMS 2.6
  - Fix the GObject introspection for cd_device_get_profiles()
  - Load the profile defaults when using cd_icc_create_default()


author: Richard Hughes <richard@hughsie.com> 1.2.0-1
changelog:
  - New upstream version
  - Correctly convert all of the image when using CdTransform
  - EDID strings can be up to 13 bytes
  - Use the corect sensor-kind values for GretagMacbeth sensors
  - libcolord: Add a RGB32 pixel format for GdkPixbuf
  - libcolord: Add a utility function to calculate an XYZ value from a CMF
  - libcolord: Fix a potential crash when destroying a CdIt8 object
  - libcolord: Support CCSS data files
  - libcolord: Support SPECTRAL_NORM in it8 files


author: Richard Hughes <richard@hughsie.com> 1.2.1-1
changelog:
  - New upstream version
  - Allow users to rename session and system ICC profiles
  - Fix building the CMF spectra on sparc64
  - Fix the style of two colorimeter figures
  - Make colord polkit policy usable on servers


author: Richard Hughes <richard@hughsie.com> 1.2.2-1
changelog:
  - New upstream version
  - Actually parse the EDID for better duplicate detection
  - Actually write a file when using cd_icc_save_default()
  - Bump the lcms2 dep to 2.6
  - Do not try to return a CdIcc instance for virtual profiles
  - Use the ColorHug sensor driver for the ColorHug2 hardware


author: Richard Hughes <richard@hughsie.com> 1.2.3-1
changelog:
  - New upstream version
  - Add driver features required for ColorHug2
  - Fix the device path to allow uid or username to be omitted


author: Richard Hughes <richard@hughsie.com> 1.2.4-1
changelog:
  - New upstream version
  - Don't enable PIE support when --without-pic is specified
  - libcolord: Build with PIE enabled
  - libcolorhug: Retry the command if the response is incomplete


author: Richard Hughes <richard@hughsie.com> 1.2.6-1
changelog:
  - New upstream version
  - Add lots of new libcolord spectral API
  - Return correct values when no LUMINANCE_XYZ_CDM2 is specified


author: Richard Hughes <richard@hughsie.com> 1.2.8-1
changelog:
  - New upstream version
  - Do not use the deprecated GUsbDeviceList
  - Fix possible critical warning when using g_dbus_watch_name()


author: Richard Hughes <richard@hughsie.com> 1.2.9-1
changelog:
  - New upstream version
  - Add support for the ColorHug ALS device
  - Fix reporting of logind errors
  - Return the exact address on verification failure


author: Richard Hughes <richard@hughsie.com> 1.2.11-1
changelog:
  - New upstream version
  - Add defines and artwork for the Spyder5 device
  - Add defines for the OceanOptics Spark sensor
  - Fix two small leaks in libcolord
  - Handle low-level ColorHug commands when in Sensor HID mode
  - Only return devices created by the calling user when doing GetDevices


author: Richard Hughes <richard@hughsie.com> 1.2.12-1
changelog:
  - New upstream version
  - Allow creating devices with the same device ID from different users
  - ColorHug: Add ch_device_queue_read_firmware()
  - ColorHug: When converting HEX to BIN pad out the entire size


author: Richard Hughes <richard@hughsie.com> 1.3.1-1
changelog:
  - New upstream version
  - Add a systemd user service corresponding to the D-Bus session service
  - Add a tmpfiles.d snippet to fix stateless systems
  - Add g_autoptr() defines for cd_color*
  - Add get-spectral-reading command to colormgr
  - Allow returning spectral readings from the Spark sensor
  - Ignore the ColorHug+ in DFU mode
  - Reset the sensor back to idle after each action


author: Richard Hughes <richard@hughsie.com> 1.3.2-1
changelog:
  - New upstream version
  - Add initial support for the v2 protocol used by ColorHug+
  - Fix a crash then calibrating monitors with broken EDIDs
  - Fix a hard-to-reproduce bug when cancelling async operations


author: Richard Hughes <richard@hughsie.com> 1.3.3-1
changelog:
  - New upstream version
  - Fix an assert failure when connecting to sensors
  - Increase timeout to 60s for argyll spotread sampling
  - Use the USB path to match the ArgyllCMS port


author: Richard Hughes <richard@hughsie.com> 1.3.4-1
changelog:
  - New upstream version
  - Add cd_color_rgb_from_wavelength()
  - Add cd_spectrum_resample_to_size()
  - Fix a possible NULL dereference when talking to Spark devices
  - Fix compile with -Wformat-signedness
  - Fix possible division by zero if parsing /proc/cpuinfo fails
  - Install the libcolordcompat.so in the main -libs package
  - Support enabling the illuminants on the ColorHug+


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-11
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990397


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> - 4.8.5-36.1.0.1
changelog:
  - Modify the release information and add the bugzilla address of openanolis
  - Resolve doc build error


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-3
changelog:
  - add back -devel subpackage as a stop-gap measure for software
    that cannot be ported to new API easily


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.26-3
changelog:
  - fix "Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]"
  - Resolves: #1961682


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.0-1
changelog:
  - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a
  standalone package)
  - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.3-1
changelog:
  - Fix labeling on /usr/bin/runc.*
  - Add sandbox_net_domain access to container.te
  - Remove containers ability to look at /etc content


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.4-1
changelog:
  - Add typebounds statement for container_t from container_runtime_t
  - We should only label runc not runc*


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.10-1
changelog:
  - Update to the latest container-selinux patch from upstream
  - Label files under /usr/libexec/lxc as container_runtime_exec_t
  - Give container_t access to XFRM sockets
  - Allow spc_t to dbus chat with init system
  - Allow containers to read cgroup configuration mounted into a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2:2.19-1
changelog:
  - Fix mcs transition problem on stdin/stdout/stderr
  - Add labels for CRI-O
  - Allow containers to use tunnel sockets


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.27-1
changelog:
  -  Allow container runtimes to work with the netfilter sockets
  -  Allow container_file_t to be an entrypoint for VM's
  -  Allow spc_t domains to transition to svirt_t


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.31-1
changelog:
  - Allow the container runtime to dbus chat with dnsmasq
  - add dontaudit rules for container trying to write to /proc


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.37-1
changelog:
  - Allow containers to use inherited ttys
  - Allow ostree to handle labels under /var/lib/containers/ostree


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.39-1
changelog:
  - Allow container runtimes to use interited terminals.  This helps
  satisfy the bounds check of container_t versus container_runtime_t.


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.48-1
changelog:
  - Update policy to match master branch
  - Remove typebounds and replace with nnp_transition and nosuid_transition calls


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.49-1
changelog:
  - Add support for MLS running container runtimes
  - Add missing allow rules for running systemd in a container


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.55-1
changelog:
  Allow iptables to read container state
      Dontaudit attempts from containers to write to /proc/self
      Allow spc_t to change attributes on container_runtime_t fifo files


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.60-1
changelog:
  - Allow containers to list cgroup directories
  - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.134.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.134.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.135.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.135.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.137.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.137.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.138.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.138.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.139.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.139.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.142.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.142.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.143.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.143.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.144.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.144.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.160.2
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1999245


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.5.2-2
changelog:
  - upstream moved to github.com/containernetworking/plugins
  - built commit dcf7368
  - provides: containernetworking-plugins
  - use vendored deps because they're a lot less of a PITA
  - excludearch: s390x for now (rhbz#1466865)


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Nils Philippsen <nphilipp@redhat.com> - 1.10-3
changelog:
  - don't expect find output to be sorted, move "make test" to %check (#237687,
    patch by Giuseppe Bonacci)
  - change license tag to "GPLv2"


author: Nils Philippsen <nphilipp@redhat.com> - 1.12-1
changelog:
  - version 1.12
  - remove obsolete tests patch
  - don't run md5sum against MD5sums as it lists a non-existing .MD5sums file
    which causes md5sum to error out
  - change license tag to "GPLv2 or GPLv3"


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 2.0-1
changelog:
  - moved to new upstream at pagure.io
  - moved to newest release 2.0
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Steven Dake <sdake@redhat.com> - 0.91-2
changelog:
  - use /sbin/service instead of calling init script directly.
  - put corosync-objctl man page in the main package.
  - change all initrddir to initddir for fedora 10 guidelines.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-4.svn1707
changelog:
  - Update to svn trunk at revision 1707 from upstream.
  - Update spec file to include new lcrso services and include file.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-5.svn1709
changelog:
  - Update to svn trunk at revision 1709 from upstream.
  - Update spec file to include new include files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-6.svn1750
changelog:
  - Update to svn trunk at revision 1750 from upstream.
  - Include new quorum service in the packaging.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-7.svn1756
changelog:
  - Update to svn trunk at revision 1756 from upstream.
  - Add support pkgconfig to devel package.
  - Tidy up spec files by re-organazing sections according to packages.
  - Split libraries from corosync to corosynclib.
  - Rename corosync-devel to corosynclib-devel.
  - Comply with multiarch requirements (libraries).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-1
changelog:
  - New upstream release.
  - Drop alphatag from spec file.
  - Drop trunk patch.
  - Update Provides for corosynclib-devel.
  - Backport gcc-4.4 build fix from trunk.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-2
changelog:
  - Rename gcc-4.4 patch to match svn commit (r1767).
  - Backport patch from trunk (commit r1774) to fix quorum engine.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-1
changelog:
  - New upstream release.
  - Drop obsolete patches.
  - Add soname bump patch that was missing from upstream.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-2.svn1792
changelog:
  - Import fixes from upstream:
    * Fix uninitialized memory. Spotted by valgrind (1788)
    * Fix logsys_set_format by updating the right bits (1789)
    * logsys: re-add support for timestamp  (1790)
    * Fix cpg crash (1791)
    * Allow logsys_format_set to reset to default (1792)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-3.svn1794
changelog:
  - Import fixes from upstream:
    * Add reserve/release feature to totem message queue space (1793)
    * Fix CG shutdown (1794)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-4.svn1797
changelog:
  - Import fixes from upstream:
    * Cleanup logsys format init around to use default settings (1795)
    * logsys_format_set should use its own internal copy of format_buffer (1796)
    * Add logsys_format_get to logsys API (1797)
  - Cherry pick svn1807 to unbreak CPG.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.95-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop alpha tag
    * Drop local patches (no longer required)
    * Allow to build from svn trunk by supporting rpmbuild --with buildtrunk 
    * BuildRequires autoconf automake if building from trunk
    * Execute autogen.sh if building from trunk and if no configure is available
    * Switch to use rpm configure macro and set standard install paths
    * Build invokation now supports _smp_mflags
    * Remove install section for docs and use proper doc macro instead
    * Add tree fixup bits to drop static libs and html docs (only for now)
    * Add LICENSE file to all subpackages
    * libraries have moved to libdir. Drop ld.so.conf.d corosync file
    * Update BuildRoot usage to preferred versions/names


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.97-1.svn2232
changelog:
  - New upstream release
  - spec file updates:
    * Drop pkgconfig fix that's now upstream
    * Update to svn version 2232
    * Define buildtrunk if we are using svn snapshots
    * BuildRequires: nss-devel to enable nss crypto for network communication
    * Force autogen invokation if buildtrunk is defined
    * Whitespace cleanup
    * Stop shipping corosync.conf in favour of a generic example
    * Update file list


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.98-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop corosync-trunk patch and alpha tag.
    * Fix alphatag vs buildtrunk handling.
    * Drop requirement on ais user/group and stop creating them.
    * New config file locations from upstream: /etc/corosync/corosync.conf.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.0-1
changelog:
  - New upstream release
  - spec file updates:
    * enable IB support
    * explicitly define built-in features at configure time


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.0-1
changelog:
  - New upstream release
  - Use global instead of define
  - Update Source0 url
  - Use more name macro around
  - Cleanup install section. Init script is now installed by upstream
  - Cleanup whitespace
  - Don't deadlock between package upgrade and corosync condrestart
  - Ship service.d config directory
  - Fix Conflicts vs Requires
  - Ship new sam library and man pages


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Add upstream trunk revision 2770 to add cpg_model_initialize api.
  - Fix URL and Source0 entries.
  - Add workaround to broken 1.2.2 Makefile with make -j.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.3.0-1
changelog:
  - New upstream release
  - drop upstream patch revision-2770.patch now included in release
  - update spec file to ship corosync-blackbox


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.99.2-1
changelog:
  - New upstream release
  - Re-enable xmlconfig bits
  - Ship cmap man pages
  - Add workaround to usrmove breakage!!


author: Jan Friesse <jfriesse@redhat.com> 2.3.1-3
changelog:
  - Resolves: rhbz#998362

  - Fix scheduler pause-detection timeout (rhbz#998362)
  - merge upstream commit 2740cfd1eac60714601c74df2137fe588b607866 (rhbz#998362)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-3
changelog:
  - Resolves: rhbz#1602409

  - Remove libcgroup (rhbz#1602409)
  - merge upstream commit c9e5d6db13fa965d83e27a3b664477e9b5b26edf (rhbz#1602409)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-5
changelog:
  - Resolves: rhbz#1639211

  - config: Fix crash in reload if new interfaces are added (rhbz#1639211)
  - merge upstream commit 9f2d5a3a3faa8bd1021b505bcf3c5428b3435e39 (rhbz#1639211)


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-2
changelog:
  - Resolves: rhbz#1665211

  - totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4 (rhbz#1665211)
  - merge upstream commit 2ab4d4188670356dcb82a80f2fc4598f5145c77d (rhbz#1665211)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-4
changelog:
  - Resolves: rhbz#1745624
  - Resolves: rhbz#1745642
  - Resolves: rhbz#1749263
  - Resolves: rhbz#1765025

  - totem: fix check if all nodes have same number of links (rhbz#1749263)
  - merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
  - totem: Increase ring_id seq after load (rhbz#1745624)
  - merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
  - man: Fix link_mode priority description (rhbz#1745642)
  - merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1
changelog:
  - Update to latest upstream release
  - Additional fixes for gcc-4.6 -Werror compile failures for ARM architecture.


author: Dave Anderson <anderson@redhat.com> - 7.0.2-1
changelog:
  - Update to latest upstream release
  - Fix for ppc64 embedded gdb NULL pointer translation sigsegv
  - Fix for bt -F failure


author: Dave Anderson <anderson@redhat.com> - 7.0.2-2
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1015250
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1020469
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1020536


author: Dave Anderson <anderson@redhat.com> - 7.0.2-4
changelog:
  - Fixes for "kmem -S" command for CONFIG_SLUB.
  - Resolves: rhbz#1045591
  - Increase S390X NR_CPUS
  - Resolves: rhbz#1051156


author: Dave Anderson <anderson@redhat.com> - 7.0.2-5
changelog:
  - Fix for a missing kernel-mode exception frame dump by the x86_64 
    "bt" command if a page fault was generated by a bogus RIP.
  - Resolves: rhbz#1057353
  - Fix for the x86_64 "bt" command to prevent an unwarranted message
    indicating "WARNING: possibly bogus exception frame" generated
    from a blocked kernel thread that was in the process of exec'ing
    a user process via the call_usermodehelper() facility.
  - Resolves: rhbz#1057357


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Rebase to upstream version 7.0.8.
  - Resolves: rhbz#1110513
  - Fix to calculate the physical base address of dumpfiles created
    by a "virsh dump" of an OVMF guest.
  - Resolves: rhbz#1080698
  - Support for aarch64 architecture.
  - Resolves: rhbz#1110551
  - Fix to prevent crash from spinning endlessly on a corrupted/truncated
    dumpfile whose bitmap data is not wholly contained within the file.
  - Resolves: rhbz#1114088
  - Support for ppc64le architecture.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.8-2
changelog:
  - Fix ps performance patch regression on live systems.
  - Resolves: rhbz#1134177
  - Minor build-related fixes for ppc64le.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.9-2
changelog:
  - Use registers from QEMU-generated ELF and compressed kdump headers 
    for active task backtraces.
  - Resolves: rhbz#1169555


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a_to_e2efacdd.patch
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.7-2
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1738619
  - Support for KASLR on s390x
    Resolves: rhbz# 1753172


author: Dave Anderson <anderson@redhat.com> - 7.2.7-3
changelog:
  - Rebase to github commit 6c1c8ac6
    Resolves: rhbz#1738619
  - Fix "log -a" option
    Resolves: rhbz#1785537
  - Fix for ELF kdump vmcores form s390x KASLR kernels
    Resolves: rhbz#1786996


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-3
changelog:
  - Fix for reading compressed kdump dumpfiles from systems with physical memory
    Resolves: rhbz#1819606


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-6
changelog:
  - aarch64: Revert to reading CONFIG_ARM64_USER_VA_BITS_52 and CONFIG_ARM64_PA_BITS=52 for 52-bit VA/PA space.
    Resolves: rhbz#1861086


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-7
changelog:
  - crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
    Resolves: rhbz#1855527


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-8
changelog:
  - crash/arm64: Fix arm64 read error with 'idmap_ptrs_per_pgd' symbol with debug kernel
    Resolves: rhbz#1876039


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-1
changelog:
  - Rebase to upstream crash version 7.2.9
  - Also minimize the rhel-only patches to the bare minimum.
    Resolves: rhbz#1881854


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-2
changelog:
  - Fix the sources file to add gdb-7.6 tarball
    [The line was somehow removed when using rhpkg new-sources to
     update the crash tarball location]
    Resolves: rhbz#1881854


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Update to latest upstream release
  - Add ppc64le as supported architecture for crash package (BZ #1136050)


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to {ix86}
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.4-1
changelog:
  - New mergerepo params: --all, --noarch-repo and --method
  - Fix segfault when more than one --excludes param used


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.7-1
changelog:
  - SQLite support
  - Bash completion
  - createrepo_c support for --compress-type param
  - Improved logging
  - Subpackages -devel and -libsi
  - Relicensed to GPLv2
  - Doxygen documentation in devel package
  - README update


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.8-1
changelog:
  - New interface of repomd module
  - New cmd options: --repo --revision --distro --content --basedir
  - New createrepo_c specific cmd option --keep-all-metadata
  - Few bugfixes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.9-1
changelog:
  - Some changes in library interface
  - Memory usage optimalization
  - Fix a segfault and a race condition
  - New cmd options: --read-pkgs-list and --retain-old-md param
  - Few other bugfixes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.11-1
changelog:
  - Deterministic output! Packages in output repodata are now sorted
  by ASCII value
  - Support for Koji mergerepos behaviour in mergerepo_c
  (new --koji, --groupfile and --blocked params)
  - Better atomicity while finall move .repodata/ -> repodata/
  - Repomd module supports pkgorigins record
  - Some new functions in misc module
  - Small changes in library interface


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.15-1
changelog:
  - Fix bug in final move from .repodata/ -> repodata/
  - Fix warnings from RPM library. RPM library is thread-unsafe. This
  includes also reading headers. Use of empty keyring for rpm transaction
  should work around the problem.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.16-1
changelog:
  - Fix usage of rpm keyring (RhBug:918645)
  - More generic interface of repomd module
  - Code refactoring
  - Add some usage examples into the doxygen documentation and .h files
  - Rename version constants in version.h
  - New function cr_package_nevra (returns package nevra string)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.16-2
changelog:
  - Remove creation of own empty rpm keyring for a transaction set.
  This is not necessary since rpm-4.8.0-28 (rpm commit
  cad147070e5513312d851f44998012e8f0cdf1e3). Moreover, own rpm keyring
  causes a race condition in threads (causing double free()) which use
  rpmReadPackageFile() called from cr_package_from_rpm().


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.17-1
changelog:
  - Fix double free() when old metadata parsing failed. (related to RhBug: 920795)
  - Convert all strings to UTF-8 while dumping XML. (related RhBug: 920795)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.1.17-3
changelog:
  - mergerepo_c: Add --simple-md-filenames and --unique-md-filenames
  options. (RhBug: 950994)
  - mergerepo_c: Always include noarch while mimic koji
  mergerepos. (RhBug: 950991)
  - Rename cr_package_parser_shutdown to cr_package_parser_cleanup()
  - cr_db_info_update is now safe from sqlinjection.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.2.0-1
changelog:
  - Speedup (More parallelization)
  - Changed C API
  - Add python bindings
  - A lot of bugfixes
  - Add new make targets: tests (make tests - builds c tests) and test
    (make test - runs c and python test suits).
  - Changed interface of most of C modules - Better error reporting
    (Add GError ** param).
  - Experimental Python bindings (Beware: The interface is not final yet!).
  - package: Add cr_package_copy method.
  - sqlite: Do not recreate tables and triggers while opening existing db.
  - mergerepo_c: Implicitly use --all with --koji.
  - Man page update.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.2.1-2
changelog:
  - More effort to avoid residual .repodata/ directory on error
  - Add deltarepo and python-deltarepo subpackages
  - Add modifyrepo_c
  - Add documentation for python bindings
  - Refactored code & a lot of little bug fixes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.2.2-1
changelog:
  - Temporary remove deltarepo subpackages
  - cmake: Do not install deltarepo stuff yet
  - helper: Removed cr_remove_metadata() and cr_get_list_of_md_locations()
  - Add module helpers
  - Sanitize strings before writting them to XML or sqlitedb (ISSUE #3)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.3.0-1
changelog:
  - Relevant only for developers using createrepo_c library: New approach for
    metadata loading in case of internal high-level parser functions (see commit
    messages for more information: d6ed327595, 0b0e75203e, ad1e8450f5)
  - Support for changelog limit value == -1 (include all changelogs)
  - Update debug compilation flags
  - Update man pages (Add synompsis with usage)
  - Update usage examples in help


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.4.0-1
changelog:
  - Change default behavior of repodata files handling. (RhBug: 1094539)
    See: https://github.com/Tojaj/createrepo_c/wiki/New-File-Handling
    By default, createrepo leaves old groupfiles (comps files)
    in the repodata/ directory during update.
    Createrepo_c did the same thing but the version 0.4.0 changes this behaviour.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.4.1-1
changelog:
  - Initialize threads correctly on old versions of GLib2 (RhBug: 1108787)
  - Do not print log domain (get rid off C_CREATEREPOLIB prefix in log messages)
  - Implements support for --cachedir
  - New option --retain-old-md-by-age
  - Few small API changes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.7.0-1
changelog:
  - deltarpms: Update module to work with current version of drpm
  - mergerepo_c: Add --omit-baseurl option
  - craterepo_c: Gen empty repo if empty pkglist is used
  - Docs: Output python docs to separate directory
  - Several small fixes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.7.3-1
changelog:
  - xml_parser: Add file path into error messages
  - Refactor: Replace g_error() with g_critical() (RhBug: 1162102)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.7.4-1
changelog:
  - createrepo_c, mergerepo_c: Follow redirs by default while downloading remote repos
  - mergerepo_c: Fix segfault when a package without sourcerpm is part of metadata and --koji option is used


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.7.5-1
changelog:
  - Python repomd: Support for iteration and indexing by type - e.g. record = repomd['primary']
  - Show warning if an XML parser probably parsed a bad type of medata (New XML parser warning type CR_XML_WARNING_BADMDTYPE)
  - drpm library: Explicitly try to locate libdrpm.so.0
  - deltarpms: Don't show options for delta rpms if support is not available


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.7.7-1
changelog:
  - Proper directory for temporary files when --local-sqlite is used (Issue #12)
  - Bring bash completion install dir and filenames up to date with current bash-completion


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.8.0-1
changelog:
  - New tool Sqliterepo_c - It generates sqlite databases into repos
    where the sqlite is missing.
  - Internal refactoring and code cleanup


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.8.2-1
changelog:
  - doc: Add man pages for sqliterepo and update manpages for other tools
  - mergerepo: Work only with noarch packages if --koji is used and
    no archlist is specified
  - mergerepo: Use file:// protocol in local baseurl
  - mergerepo: Do not include baseurl for first repo if --koji is specified (RhBug: 1220082)
  - mergerepo_c: Support multilib arch for --koji repos
  - mergerepo_c: Refactoring
  - Print debug message with version in each tool when --verbose is used
  - modifyrepo: Don't override file with itself (RhBug: 1215229)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.0-1
changelog:
  - mergerepo_c: Prepend protocol (file://) for URLs in pkgorigins (if --koji is used)
  - Update bash completion
  - doc: Update manpages
  - mergerepo: Fix NVR merging method
  - mergerepo: Fix behavior of --all param
  - createrepo: Add --cut-dirs and --location-prefix options
  - misc: Add cr_cut_dirs()
  - mergerepo: Use better version comparison algorithm
  - utils: Port cr_cmp_version_str() to rpm's algorithm (rpmvercmp)
  - misc: Rename elements in cr_Version structure
  - mergerepo: Fix version-release comparison for packages when --all is used
  - mergerepo: Show warnings if some groupfile cannot be automatically used
  - mergerepo: Exit with error code when a groupfile cannot be copied


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.1-1
changelog:
  - Fix double free during parsing broken XML metadata (Issue #33)
  - Tests: Add acceptance test for --general-compress-type option
  - Fix 'CR_CW_UNKNOWN_COMPRESSION cannot be used' error
  - Refactoring: Fix compiler warnings
  - Add --general-compress-type option (RhBug 1253850)
  - Enable drpm support when drpm library is detected on system (RhBug: 1261031) (Issue #37)
  - fix traceback on non-complete datetime information (Jarek Polok)
  - parsehdr: Skip broken dependency with bad (non-numerical) epoch and print warning about that
    (https://lists.fedoraproject.org/pipermail/devel/2015-August/213882.html)
  - misc: cr_str_to_evr(): Return NULL instead of "0" for bad (non-numerical) epoch
  - updateinfo: Fix a typo in the package release attribute (Luke Macken)
  - CMake: Don't require CXX compiler
  - Tests for different checksum type for RPMs and repodata files (#31)
  - Support different checksum type for RPMs and repodata files (#31)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.10.0-1
changelog:
  - Python 3 support (made by Ralph Bean)
  - Modify gen_rst.py to indicate --sqliterepo is an option too (Neal Gompa)
  - Do not compress manpages at generation time (Neal Gompa)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.10.0-4
changelog:
  - Don't own python3_sitearch dir in python3 subpkg
  - Use %license macro
  - Follow modern packaging guidelines
  - Cleanups in spec file
  - Follow packaging guidelines about SourceURL
  - Fix license


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-2
changelog:
  - Consistently produce valid URLs by prepending protocol. (RhBug:1632121)
  - modifyrepo_c: Prevent doubling of compression (test.gz.gz) (RhBug:1639287)
  - Correct pkg count in headers if there were invalid pkgs (RhBug:1596211)
  - Add support for modular errata (RhBug:1656584)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-3
changelog:
  - Backport patch to switch off timestamps on documentation in order to remove
    file conflicts (RhBug:1738788)


author: Ales Matej <amatej@redhat.com> - 0.15.1-1
changelog:
  - Update to 0.15.1
  - Allow pip to see installation of python3-createrepo_c
  - Imporove documentation
  - Remove dependency on deltarpm in favour of drpm
  - Obsolete createrepo on all Fedoras again (RhBug:1702771)
  - Fix issue with createrepo_c hanging at the end (RhBug:1714666)
  - Don't include packages with forbidden control chars in repodata
  - Depend on the appropriate minimum version of libmodulemd
  - Add --pkgorigins mode for Koji
  - Prevent exiting with 0 if errors occur while finalizing repodata.
  - Add support for reading and merging module metadata
  - Update --keep-all-metadata to keep all additional metadata, not just updateinfo and groupfile (RhBug:1639287)
  - mergerepo_c: Add support for --koji simple mode
  - Fix generating corrupted sqlite files (RhBug: 1696808)
  - Do not obsolete createrepo on Fedora < 31
  - mergerepo_c: check if nevra is NULL and warn user about src.rpm naming
  - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past
  - Enhance support of zchunk
  - Support of zchunk
  - [spec] Fix ldconfig for rhel <= 7
  - Fix "CR_DELTA_RPM_SUPPORT" redefined warnings
  - Set to build against Python 3 by default
  - Update README
  - Add mergerepo_c --repo-prefix-search and --repo-prefix-replace.
  - Fix missing packages in mergerepo_c in case multiple VR exists for single pkg in repo.


author: Ales Matej <amatej@redhat.com> - 0.15.1-2
changelog:
  - Add reboot_suggested to UpdateRecord (RhBug:1772466)
  - Explicitly output boolean values for updateinfo.xml (RhBug:1772466)
  - Fix modifyrepo_c with modules.yaml as a symbolic link (RhBug:1776399)


author: Ales Matej <amatej@redhat.com> - 0.15.10-1
changelog:
  - Update to 0.15.10
  - New option --recycle-pkglist for --update mode
  - Add restart_suggested field to updatecollectionpackage in updateinfo.xml
  - Add relogin_suggested field to updatecollectionpackage in updateinfo.xml (Rhbug:1779751)
  - Export all changelog entries to other.xml in compatibility mode
  - Enhance error handling when locating repositories (RhBug:1762697)
  - Clean up temporary .repodata on sigint
  - Support issued date in epoch format set by Python API (RhBug:1779751)
  - Allow parsing of xml repodata from string via new API functions (RhBug:1804308)
  - Fix a bug when setting updateCollectionModule (RhBug:1821781)


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added upstream ocs fix
  - Added feature to find symbol assignments
  - Changed default SYSDIR directory to /var/lib/cs
  - Incoproated M. Schwendt's fix for ocs -s


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added cscope-indexer helper and xcscope lisp addon
  - Added man page for xcscope
  - Added triggers to add xcscope.el pkg to (x)emacs
  - Thanks to Ville, Michael and Jens for thier help :)


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Pravin Satpute <psatpute@redhat.com> - 0.105-1
changelog:
  - Upstream new release.
  - Miriam Mono family is now OpenType and has diacritics support developed by Yoram Gnat.


author: Pravin Satpute <psatpute@redhat.com> - 0.120-1
changelog:
  - Upstream new release.
  - Added new families Hadasim CLM, Keter YG, Simple CLM, Stam Ashkenaz CLM, Stam Sefarad CLM


author: Parag Nemade <pnemade AT redhat DOT com> - 0.130-6
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove owneship of %{_fontdir} in -common
  - Remove group tag


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-6
changelog:
  - Set cost for text filters to 200 so that the paps filter gets
    preference for the time being (bug #988909).


author: Tim Waugh <twaugh@redhat.com> - 1.0.36-3
changelog:
  - Upstream patch to re-work filter costs (bug #998977). No longer need
    text filter costs patch as paps gets used by default now if
    installed.


author: Tim Waugh <twaugh@redhat.com> - 1.0.41-4
changelog:
  - Adjust filter costs so application/vnd.adobe-read-postscript input
    doesn't go via pstotiff (bug #1008166).


author: Tim Waugh <twaugh@redhat.com> - 1.0.54-2
changelog:
  - Fix build issue (bug #1106101).
  - Don't use grep's -P switch in pstopdf as it needs execmem (bug #1079534).
  - Return work-around patch for bug #768811.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-3
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Marek Kasik <mkasik@redhat.com> 0.0.3-2
changelog:
  - Add handling of file:/ protocol
  - Change order of checked policies so the PolicyKit asks only for
    "printer-enable" policy when enabling/disabling a printer
  - Change order of checked policies so the PolicyKit asks only for
    "printer-set-default" policy when setting default printer


author: Marek Kasik <mkasik@redhat.com> 0.0.3-4
changelog:
  - Add ability to reconnect to CUPS server after its reload
    (caused by cupsAdminSetServerSettings() or cupsPutFile())


author: Marek Kasik <mkasik@redhat.com> - 0.0.3-6
changelog:
  - Replace job-cancel, job-restart and job-set-hold-until with job-edit
  - Replace job-cancel-another-owner, job-restart-another-owner
    and job-set-hold-until-another-owner with job-not-owned-edit
  - Add cph_cups_job_get_status() function + some minor changes


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-8
changelog:
  - Fix adding of printers without specification of device-uri.
  - Patch by Tim Waugh.
  - Resolves: #526442


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-10
changelog:
  - Fix adding of printers without specification of ppd-name.
  - Patch by Tim Waugh.
  - Resolves: #545452


author: Marek Kasik <mkasik@redhat.com> - 0.0.4-12
changelog:
  - Avoid timeout on job-related methods for invalid jobs
  - Make sure to return an error via dbus in case of failure
  - Remove a small leak
  - Resolves: #548790


author: Marek Kasik <mkasik@redhat.com> - 0.1.3-2
changelog:
  - Make ppd-name parameter optional
  - Readd patch for allowing authentication for any and inactive users
  - Readd patch for check of result of polkit authorization check
  - Resolves: #724959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Change URL of cups-pk-helper project
  - Use tarballs with configure
  - Fix changelog's dates


author: Christian Heimes <cheimes@redhat.com> - 0.2.0-4
changelog:
  - Add missing runtime requirement on python[23]-systemd.
  - Drop unnecesary build dependency on python%{python3_pkgversion}-configparser.
  - Fix tests, don't try to download dnspython3.


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Run tests with global site packages
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-2
changelog:
  - Run Custodia daemon with Python 3
  - Resolves: Bug 1426737 - custodia: Provide a Python 3 subpackage


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-2
changelog:
  - Skip etcd store on PPC64
  - Add missing pre/post install hooks for systemd service
  - Custodia 0.5 is compatible with FreeIPA 4.4.5 and newer
  - Drop custodia user from tmpfiles.d conf


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.5.10-1
changelog:
  - Initial update to the 2.5 series.
  - Significant spec cleanups.
  - Add sscg dep and follow
    https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup for initial
    cert generation.
  - Change default conf to use the system crypto policy.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-1
changelog:
  - Initial attempt at importing 3.0.  Many new dependencies.
  - Use a stock sample imapd.conf file instead of a Fedora-provided one.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-2
changelog:
  - Add patch to fix up some endianness issues.
  - Enable both test suites on all architectures.
  - Add arch-specific excludes for a few Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-3
changelog:
  - Remove clamav from build requirements.
  - Add --cleanup to Cassandane call to hopefully reduce build disk usage.
  - Disable maxforkrate test on s390x; our builders are too slow to run it.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-5
changelog:
  - Use proper path to ctl_mboxlist in cron file.
  - Add patch to increase individual test timeout.  Sometimes armv7hl can't
    complete a single test in 20 seconds.
  - Disable the Metronome tests; upstream says that they just won't reliably on
    shared hardware.
  - Don't bother running Cassandane on s390x for now.  The machines are simply
    too slow.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-6
changelog:
  - Rename two commands: quota -> cyr_quota, restore -> cyr_restore.
  - Fix Cassandane to handle those renames.
  - Fix location of cyr_fetchnews.
  - Fix Perl 5.26-related module linking issue which caused a test failure.
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1461669


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-7
changelog:
  - Add old /usr/lib/cyrus-imapd directory to the utils package and add a symlink
    there to the deliver binary.  This should help a bit with migrations.
  - Add upstream patch to fix reconstruct failures on 32-bit architectures.
    Re-enable those five Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-2
changelog:
  - Exclude one more test from 32-bit arches.  Looks like this failure crept in
    with the Cassandane update.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-3
changelog:
  - Patch the provided imapd.conf and cyrus.conf to more closely match previous
    Fedora defaults and directories included in this package and to enable
    features which are supported by the Fedora build.
  - Add tmpfiles.d configuration file for directories in /run.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-5
changelog:
  - Add two patches from upstream which fix JMAPCalendars issues on 32-bit and
    big-endian architectures.
  - Clean up test invocation and exclusion list.  More tests pass now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.3-1
changelog:
  - Update to 3.0.3, which contains an important security fix.  The fix is not
    embargoed but no CVE has been assigned yet.
  - Drop patches merged upstream.
  - An update of imaptest has resulted in three additional cassandane failures,
    reported upstream as https://github.com/cyrusimap/cyrus-imapd/issues/2087.
    In order to get the security fix out without delay, those three tests have been
    disabled.


author: Pavel Zhukov <landgraf@fedoraproject.org> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Patched cassandane for new behaviour. It should be updated idealy.
  - Disable ImapTest.urlauth2 test; it seems to fail randomly regardless of
    architecture.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.4-3
changelog:
  - Rebuild for new libical.
  - Add patch to fix compilation error with new libical.
  - Disable two tests which fail due to the new libical.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-3
changelog:
  - Re-enable clamav and mariadb support as those are now built with openssl 1.1.
  - But no clamav on ppc64 because of
    https://bugzilla.redhat.com/show_bug.cgi?id=1534071


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-5
changelog:
  - Add patch to fix segfaults in squatter.
  - Exclude one test on all releases instead of just F28+.
  - Remove --cleanup from cassandane invocation.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-6
changelog:
  - Update cassandane checkout.
  - Add two new build dependencies.
  - Remove all JMAP-related tests from the exclusion lists, since cassandane no
    longer runs any JMAP tests on cyrus 3.0.
  - Collapse unused test skip lists.
  - Add ten additional skipped tests, after consultation with upstream.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-10
changelog:
  - Update cassandane checkout to fix a test that was broken by DST.
  - Add patch to fix sieve scripts for usernames containing a dot.
  - Disable imaptest in cassandane until
    https://bugzilla.redhat.com/show_bug.cgi?id=1562970 is fixed.
  - Re-enable tests on s390; it seems to be better now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-11
changelog:
  - Re-enable imaptest on >= F29.
  - F29's imaptest fixes several bugs, allowing all tests to be run there.
  - Relocate cassandane base port to hopefully work better in koji.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-12
changelog:
  - Update list of excluded tests.
  - Update Cassandane snapshot; use new base_port config setting.  No need to
    patch that in now.
  - Add four new expected-to-fail tests from new Cassandane snapshot.
  - Add patch to collect extra Cassandane logging in case we hit some of those
    sporadic failures again.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.6-1
changelog:
  - Update to 3.0.6.
  - Remove upstreamed patches and renumber the rest.
  - Disable one new failing test:
    https://github.com/cyrusimap/cyrus-imapd/issues/2332


author: Richard Hughes <rhughes@redhat.com> 0.3.2-0.1.20100608
changelog:
  - Update to a git snapshot so that users do not get a segfault in every
    application using GSettings.


author: Marek Kasik <mkasik@redhat.com> - 0.14.0-3
changelog:
  - Update License field
  - Update Source URL
  - Add link of corresponding bug for the memory leak patch


author: Rex Dieter <rdieter@fedoraproject.org> - 0.15.2-2
changelog:
  - -devel: drop Requires: glib2-devel, already gets pulled in via pkgconfig deps
  - -editor: add icon scriptlets
  - tighten subpkg deps via %{_isa}


author: Kalev Lember <kalevlember@gmail.com> - 0.15.3-1
changelog:
  - Update to 0.15.3
  - Install the HighContrast icons and update the icon cache scriptlets to take
    this into account


author: Parag Nemade <paragn AT fedoraproject DOT org> - 0.17.0-3
changelog:
  - Fix bogus date in %changelog
  - Compilation should be more verbose, add V=1
  - Upstream does not install dconf-editor ui files


author: Kalev Lember <kalevlember@gmail.com> - 0.23.1-1
changelog:
  - Update to 0.23.1
  - This drops the -editor subpackage which now lives in a separate
    dconf-editor SRPM.
  - Use the %license macro for the COPYING file


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Nils Philippsen <nils@redhat.com> - 9.20-2
changelog:
  - new upstream tarball with unchanged version number (RCS id 1.461 instead of
    1.458), obsoletes lcms2 patch


author: Nils Philippsen <nils@redhat.com> - 9.25.0-1
changelog:
  - version 9.25.0
  - remove unnecessary check from CVE-2013-1438 patch
  - avoid writing past array boundaries when reading certain raw formats
    (CVE-2015-3885)


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 0.2.92 cvs snap with --remove-key and checking for OnlyShowIn
    and missing trailing semicolons on string lists


author: Dan Williams <dcbw@redhat.com> 0.4-2
changelog:
  - Fix RH #117201, initial comment fails validation
  - Add in, but do not use, Frederic Crozat's freedesktop.org
      menu-spec 0.8 patch


author: Ray Strode <rstrode@redhat.com> 0.8-5
changelog:
  - Swap if and else in egg_desktop_entries_get_locale_country
    to prevent allocating massive amounts of unneeded ram.


author: Ray Strode <rstrode@redhat.com> 0.8-6
changelog:
  - Swap if and else in egg_desktop_entries_get_locale_encoding
    to prevent allocating massive amounts of unneeded ram.


author: Ray Strode <rstrode@redhat.com> - 0.10-6
changelog:
  - call update-desktop-database in %preun (bug 180898)
  - don't fail if update-desktop-database fails
  - don't use %makeinstall


author: Ray Strode <rstrode@redhat.com> - 0.11-2
changelog:
  - make desktop file validation non-fatal until we
    add support for categories beginning with X- and clean up
    our menu system to not require invalid categories
    (bug 212048)


author: Richard Hughes <rhughes@redhat.com> - 0.15-3
changelog:
  - Add desktop-mime-type.prov so that we can automatically
    generate mimetype provides for packages at build time.
    This lets us do some cool things with PackageKit in the future.


author: Richard Hughes <rhughes@redhat.com> - 0.15-4
changelog:
  - Rename desktop-mime-type.prov to desktop_mime_type.prov and add the tiny
    macros.desktop_mime_type file so that we can trivially patch rpm to enable
    this new functionality.


author: Richard Hughes <rhughes@redhat.com> - 0.15-5
changelog:
  - Panu merged the rpm bits for this feature, but we've got a new provides
    filename. Respin this package with the new name.


author: Richard Hughes <rhughes@redhat.com> - 0.15-6
changelog:
  - Panu seems to be shipping the prov file in rpmbuild. Remove it here until we
    work out where it belongs.


author: Mark McLoughlin <markmc@redhat.com> 0.9-1
changelog:
  - Update to 0.9
  - Install the schemas correctly
  - Package /usr/bin/devhelp-bin
  - Update requires/buildrequires
  - Only build on platforms where mozilla is available


author: Colin Walters <walters@redhat.com> 0.9-2
changelog:
  - Apply patch from George Karabin <gkarabin@pobox.com> to
    export LD_LIBRARY_PATH (closes bug 120220).


author: Christopher Aillon <caillon@redhat.com> 0.9.1-4
changelog:
  - Rebuilt to pick up new mozilla changes
  - Drop ppc from the build since mozilla doesn't build there anymore.


author: Matthew Barnes <mbarnes@redhat.com> - 0.13-1.fc7
changelog:
  - Update to 0.13
  - Clean up the spec file.
  - Remove devhelp-0.12-transparent.patch (fixed upstream).


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-3
changelog:
  - Fix displaying web pages, WebKit doesn't like local filenames as URIs
  - Add missing Gconf2-devel BR


author: Kalev Lember <kalev@smartlink.ee> - 2.90.5-6
changelog:
  - Carry epoch over from F14 branch to preserve upgrade path
  - Backported upstream patches to fix build with latest gtk3


author: Kalev Lember <kalevlember@gmail.com> - 1:3.6.1-1
changelog:
  - Update to 3.6.1
  - Drop manual requires from -devel package; these are all picked up
    automatically with recent rpmbuild


author: Mathieu Bridon <bochecha@daitauha.fr> - 1:3.20.0-2
changelog:
  - Split the libs into their own subpackages, so that installing a dependent
    application (e.g Builder) does not bring in the Devhelp app.


author: Harald Hoyer <harald@redhat.com> - 1.1-1.20070227svn
changelog:
  - version 1.1-20070227
  - added devel subpackage
  - specfile fixes (bug#225693)
  - Resolves: rhbz#225693


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1-3.20071028
changelog:
  - update to 1.1-20071028
  - fix multilib conflicts (#341001)
  - use shared library, drop static
  - merge review fixes (#225693)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Ngo Than <than@redhat.de>
changelog:
  - rebuild for 7.0
  - put man page in /usr/share/man/*
  - use %configure
  - fix makefile.in
  - cleanup specfile


author: Tim Waugh <twaugh@redhat.com> 1.43-2
changelog:
  - Fixed buildroot (bug #225695).
  - Build should not require gzip or bzip2 as these are exceptions (bug #225695).
  - Added SMP make flags (bug #225695).
  - Avoid makeinstall macro (bug #225695).
  - Better defattr (bug #225695).
  - Fixed summary (bug #225695).
  - Avoid macros in changelog (bug #225695).


author: Debarshi Ray <rishi@fedoraproject.org> - 0.1.0-2
changelog:
  - Use %global instead of %define.
  - Own %{_libdir}/dleyna-%{api} and %{_libdir}/dleyna-%{api}/connectors.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.4.0-2
changelog:
  - Mention the full commit hash corresponding to the release as per
    https://fedoraproject.org/wiki/Packaging:SourceURL#Github


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
changelog:
  - move initscript from patch to a plain text file
  - drop (dnsmasq-configuration.patch) and use sed instead
  - enable /etc/dnsmasq.d fix bz 526703
  - change requires to package name instead of file
  - new version 2.51


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
changelog:
  - New Version 2.52
  - fix condrestart() in initscript bz 547605
  - fix sed to enable DBUS(the '*' need some escaping) bz 553161


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Tomas Hozza <thozza@redhat.com> - 2.66-5
changelog:
  - dnsmasq unit file cleanup
    - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
    - drop After syslog.target as this is by default


author: Nils Philippsen <nils@redhat.com> - 2.72-3
changelog:
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
  - package is dual-licensed GPL v2 or v3
  - drop %triggerun, we're not supposed to automatically migrate from SysV to
    systemd anyway


author: Petr Menšík <pemensik@redhat.com> - 2.77-8
changelog:
  - Security fix, CVE-2017-14491, DNS heap buffer overflow
  - Security fix, CVE-2017-14492, DHCPv6 RA heap overflow
  - Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow
  - Security fix, CVE-2017-14494, Infoleak handling DHCPv6
  - Security fix, CVE-2017-14496, Integer underflow in DNS response creation
  - Security fix, CVE-2017-14495, OOM in DNS response creation
  - Misc code cleanups arising from Google analysis
  - Do not include stdio.h before dnsmasq.h


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.78-4
changelog:
  - add gcc into buildrequires
  - deliver an extra sysusers.d file to create dnsmasq user/group
  - set CHUSER and CHGRP to dnsmasq in src/config.h


author: Petr Menšík <pemensik@redhat.com> - 2.79-1
changelog:
  - Rebase to 2.79
  - Stop using nettle_hashes directly, use access function (#1548060)
  - Do not break on cname with spaces (#1498667)
  - Require nettle 3.4+
  - Do not own sysusers.d directory, already depends on systemd providing it


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Paul Wouters <pwouters@redhat.com> - 0.9-3
changelog:
  - Convert from SysV to systemd for initial Fedora release
  - Moved configs and pem files to /etc/dnssec-trigger/
  - No more /var/run/dnssec-triggerd/
  - Fix Build-requires
  - Added commented tls443 port80 entries of pwouters resolvers
  - On uninstall ensure there is no immutable bit on /etc/resolv.conf


author: Paul Wouters <pwouters@redhat.com> - 0.10-3
changelog:
  - Fix the systemd startup to require unbound
  - dnssec-triggerd no longer forks, giving systemd more control
  - Fire NM dispatcher in ExecStartPost of dnssec-triggerd.service
  - Fix tcp80 entries in dnssec-triggerd.conf
  - symlink dnssec-trigger-panel to dnssec-trigger to supress the
    "-panel" in the applet name shown in gnome3


author: Paul Wouters <pwouters@redhat.com> - 0.11-1
changelog:
  - Updated to 0.11
  - http Hotspot detection via fedoraproject.org/static/hotspot.html
  - http Hotspot Login page via uses hotspot-nocache.fedoraproject.org


author: Paul Wouters <pwouters@redhat.com> - 0.11-6
changelog:
  - Patched daemon to remove immutable attr (rhbz#842455) as the
    systemd ExecStopPost= target does not seem to work


author: Tomas Hozza <thozza@redhat.com> - 0.11-13
changelog:
  - Use improved NM dispatcher script from upstream
  - Added tmpfiles.d config due to improved NM dispatcher script


author: Tomas Hozza <thozza@redhat.com> - 0.11-18
changelog:
  - Use systemd macros instead of directly calling systemctl
  - simplify the systemd unit file for generating keys


author: Tomas Hozza <thozza@redhat.com> - 0.11-20
changelog:
  - Restart NM on dnssec-trigger shutdown (let NM handle the resolv.conf content)
  - HN-hook: Handle situation when connection does not have a device


author: Paul Wouters <pwouters@redhat.com> - 0.11-21
changelog:
  - Enable full hardening (includig PIE)
  - Resolves: rhbz#1045689 dnssec-trigger creates long-time RSA key with inappropriate size


author: Tomas Hozza <thozza@redhat.com> - 0.12-1
changelog:
  - Update to 0.12 version
  - Drop merged patches
  - Drop downstream files (systemd, dispatcher scripts)


author: Tomas Hozza <thozza@redhat.com> - 0.12-20
changelog:
  - Fix issue when installing private address range zone without global forwarders (#1205864)
  - Fix configuration of private address range zones (#1128310#c20)


author: Tomas Hozza <thozza@redhat.com> - 0.13-0.1.20150714svn
changelog:
  - split dnssec-trigger panel into separate subpackage (#1236363)
  - SPEC file cleanup based on rpmlint and fedora-review issues
  - implement some suggestions (#1236363)
  - rebase to the latest svn trunk snapshot 0.13_20150714
  - Script is not searching local user directories any more (#1213062)
  - Script now doesn't restart NM if version is >= 1.0.3, but sends just signal
  - Script now specifies the NMClient version for GI (#1242430)
  - Script now sets negative-cache-ttl in unbound to 5 seconds (#1229596)


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Use %{_tmppath}.
  - Correct typo.
  - rm before install
  - openjade not jade.
  - Build requires unzip.
  - Require install-catalog for post and postun.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't play so many macro games.
  - Don't use 'rpm' in post scripts.
  - Be sure to own xml-dtd-4.1 directory.


author: Chris Runge <crunge@pobox.com>
changelog:
  - created a 4.1.2 version
  - update required a change to OTHERCAT in postun
  - update required a change to the Makefile patch (no dbgenent.ent any more,
    apparently)


author: Chris Runge <crunge@pobox.com>
changelog:
  - Provides: docbook-dtd-xml (not docbook-dtd-sgml)
  - undo catalog patch and dbcentx patch (this resulted in an effectively
    broken DTD when the document was processed with XSL stylesheets); added a
    symbolic link to retain docbook.cat -> catalog; added ent
  - added ChangeLog to doc


author: Tim Waugh <twaugh@redhat.com> 1.0-7
changelog:
  - Use xmlcatalog (libxml2) instead of install-catalog (sgml-common) in
    scriptlets.
  - Conflict with install-catalog if it can't handle quotes in catalogs.
  - Use release number in centralized catalog name, so that the scriptlets
    work properly.


author: Tim Waugh <twaugh@redhat.com> 1.0-1
changelog:
  - Merged all the DTD packages into one (bug #58448).
  - Use /usr/share/sgml exclusively.
  - Prevent catalog files from disappearing on upgrade (bug #58463).


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-34
changelog:
  - corrected most of rpmlint issues
  - (PreReq, tab/spaces , wrong permissions on some files,
  -  wrong file end encoding of txt files, non config files
  -  in /etc, some requires issues, versioned provides and
  -  obsoletes, fixed license tag)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-39
changelog:
  - rebuild with F9 spec file to fix some heavy-weight black
    magic causing failures of sgml documents


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-40
changelog:
  - Fix wrong filenames for xml-dtd-4.4 and xml-dtd-4.5
    iso entities(#461206)
  - /ent/iso-cyr1.ent now correctly registered in xml catalog
    (there was /ent/iso-cyrl.ent typo)
  - fixed broken unregistration of xml-dtds from catalog
    (missing CAT_DIR variable)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0.44
changelog:
  - fix ISO entities for 4.5 SGML, use XML at the end of
    public identificators of XML 4.1.2 ISO entities


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Chris Runge <crunge@pobox.com>
changelog:
  - Initial RPM (based on docbook-style-dsssl RPM)
  - note: no catalog right now (I don't know how to do it; and not sure why
    it is necessary)


author: Chris Runge <crunge@pobox.com>
changelog:
  - added extensions and additional doc
  - bin added to doc; the Perl files are for Win32 Perl and so need some
    conversion first


author: Tim Waugh <twaugh@redhat.com> 1.62.4-1
changelog:
  - 1.62.4.
  - No longer need hyphens patch.
  - Avoid expressions in margin-left attributes, since passivetex does not
    understand them.


author: Tim Waugh <twaugh@redhat.com> 1.64.1-6
changelog:
  - Fix last margin-left fix (bug #113456).
  - Reduce instances of itemized/ordered lists having misalignments.


author: Tim Waugh <twaugh@redhat.com> 1.69.1-2
changelog:
  - Patches from W. Michael Petullo:
    - Fix lists blocking (bug #161371).
    - Avoid proportional-column-width for passivetex (bug #176766).


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-5
changelog:
  - convert all html files in doc to UTF-8 in prep
    (latest rpmlint gives warnings)
  - no longer using release in style-xsl dir(#389231)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-6
changelog:
  - fixed docbook-xsl-pagesetup.patch to follow Norman Walsh's
    documentation for nonpassivetex processing(#307001)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-7
changelog:
  - change a few non-constant expressions to constant that
    could now be handled by passivetex(#366441)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-8
changelog:
  - remove entries from xmlcatalog only on removal of package
    (required because of the change with droping release
     -caused drop of catalog entries during update)


author: Ondrej Vasik <ovasik@redhat.com> 1.74.2-2
changelog:
  - updated Makefile: do ship .svg images(#486849), xsl
    stylesheets for website, xhtml-1_1, docbook -> epub
    convertor


author: Assim Deodia<assim.deodia@gmail.com> 1.0.13-2
changelog:
  - Inclusion of pkgconfig
  - Removal of INSTALL file
  - Proper placement of Library files
  - Creating devel sub-package
  - Chaning source URL


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.0.13-7
changelog:
  - Override config.{sub,guess} explicitly due to redhat-rpm-build-config
    behavior change on F-10+, otherwise build fails on ppc64


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.3-8
changelog:
  - Fix duplicate documentation (#1001258) by using only %doc magic
  - pkgconfig dep is automatic
  - Use %?_isa in -devel base package dep


author: Omair Majid <omajid@redhat.com> - 2.1.504-1
changelog:
  - Update to .NET Core Runtime 2.1.8 and SDK 2.1.504
  - Sync with Fedora copr spec file
  - Resolves: RHBZ#1646713


author: Omair Majid <omajid@redhat.com> - 2.1.516-1
changelog:
  - Update to .NET Core SDK 2.1.516 and Runtime 2.1.20
  - Resolves: RHBZ#1851971
  - Resolves: RHBZ#1856937


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-1
changelog:
  - Fixed debuginfo going to separate package (Patch1)
  - Added F25/F26 RIL and fixed the version info (Patch2)
  - Added F25/F26 RIL in Microsoft.NETCore.App suported runtime graph (Patch3)
  - SPEC file cleanup


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-2
changelog:
  - SPEC cleanup
  - git removal (using all tarballs for reproducible builds)
  - more reasonable versioning


author: Omair Majid <omajid@redhat.com> - 2.0.0-2
changelog:
  - Move libicu/libcurl/libunwind requires to runtime package
  - Make sdk depend on the exact version of the runtime package


author: Omair Majid <omajid@redhat.com> - 2.0.3-4
changelog:
  - Add a test script to sanity check debug and symbol info.
  - Build with clang 5.0
  - Make main package real instead of using a virtual provides (see RHBZ 1519325)


author: Omair Majid <omajid@redhat.com> - 2.1.403-2
changelog:
  - Disable telemetry by default
  - Users have to manually export DOTNET_CLI_TELEMETRY_OPTOUT=0 to enable


author: Omair Majid <omajid@redhat.com> - 3.0.0-0.6.preview6
changelog:
  - Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
  - Set dotnet installation location in /etc/dotnet/install_location
  - Update targetting packs
  - Install managed symbols
  - Completely conditionalize libunwind bundling


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.16.preview9
changelog:
  - Fix files duplicated between dotnet-apphost-pack-3.0 and dotnet-targeting-pack-3.0
  - Fix dependencies between .NET SDK and the targeting packs


author: Omair Majid <omajid@redhat.com> - 3.1.100-0.4.preview3
changelog:
  - Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK 3.1.100-preview3-014645
  - Resolves: RHBZ#1711405


author: Omair Majid <omajid@redhat.com> - 3.1.106-1
changelog:
  - Update to .NET Core SDK 3.1.106 and Runtime 3.1.6
  - Resolves: RHBZ#1853772
  - Resolves: RHBZ#1856939


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core SDK 3.1.107 and Runtime 3.1.7
  - Resolves: RHBZ#1862590
  - Resolves: RHBZ#1861114


author: Omair Majid <omajid@redhat.com> - 3.1.108-1
changelog:
  - Update to .NET Core SDK 3.1.108 and Runtime 3.1.8
  - Resolves: RHBZ#1874503
  - Resolves: RHBZ#1873454


author: Omair Majid <omajid@redhat.com> - 3.0.0-0.6.preview6
changelog:
  - Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
  - Set dotnet installation location in /etc/dotnet/install_location
  - Update targeting packs
  - Install managed symbols
  - Completely conditionalize libunwind bundling


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: - John W. Linville <linville@redhat.com> - 1.7.0-2
changelog:
  - Use EXTRA_CFLAGS to include standard Fedora compiler flags in build
  - Set CONFIG_RTE_MACHINE=default to build for least-common-denominator machines
  - Turn-off build of librte_acl, since it does not build on default machines
  - Turn-off build of physical device PMDs that require kernel support
  - Clean-up the install rules to match current packaging
  - Correct changelog versions 1.0.7 -> 1.7.0
  - Remove ix86 from ExclusiveArch -- it does not build with above changes


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-4
changelog:
  - Copy the headers instead of broken symlinks into -devel package
  - Force sane mode on the headers
  - Avoid unnecessary %exclude by not copying unpackaged content to buildroot
  - Clean up summaries and descriptions
  - Drop unnecessary kernel-devel BR, we are not building kernel modules


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-5
changelog:
  - Avoid unnecessary use of %global, lazy expansion is normally better
  - Drop unused destdir macro while at it
  - Arrange for RTE_SDK environment + directory layout expected by DPDK apps
  - Drop config from main package, it shouldn't be needed at runtime


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-6
changelog:
  - Avoid variable expansion in the spec here-documents during build
  - Drop now unnecessary debug flags patch
  - Add a spec option to build a combined library


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-7
changelog:
  - Policy compliance: move static libraries to -devel, provide dpdk-static
  - Add a spec option to build as shared libraries


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-2
changelog:
  - Enable librte_vhost, which buildrequires fuse-devel
  - Enable physical NIC drivers that build (e1000, ixgbe) for VFIO use


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-3
changelog:
  - Fix -Wformat clash preventing i40e driver build, enable it
  - Fix -Wall clash preventing enic driver build, enable it


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-5
changelog:
  - Add DT_NEEDED for external dependencies (pcap, fuse, dl, pthread)
  - Enable combined library creation, needed for OVS
  - Enable shared library creation, needed for sanity


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-10
changelog:
  - Drop symbol versioning patches, always do library version for shared
  - Add comment on the combined library thing


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1695.gitc2ce3924.1
changelog:
  - Add spec magic to easily switch between stable and snapshot versions
  - Add tarball snapshot script for reference
  - Update to pre-2.0 git snapshot


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.2
changelog:
  - Move config changes from spec after "make config" to simplify things
  - Move config changes from dpdk-config patch to the spec


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.3
changelog:
  - Add spec option to build kernel modules too
  - Build eventfd-link module too if kernel modules enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1906.git00c68563.1
changelog:
  - New snapshot
  - Remove bogus devname module alias from eventfd-link module
  - Whack evenfd-link to honor RTE_KERNELDIR too


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1911.gitffc468ff.1
changelog:
  - New snapshot
  - Disable kernel module build by default
  - Add patch to fix missing defines/includes for external applications


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2049.git2f95a470.1
changelog:
  - New snapshot
  - Add spec option for enabling vhost-user instead of vhost-cuse
  - Build requires fuse-devel only with vhost-cuse
  - Add virtual provide for vhost user/cuse tracking


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2086.git263333bb.2
changelog:
  - Switch (back) to vhost-user, thus disabling vhost-cuse support
  - Build requires fuse-devel for now even when fuse is unused


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-2
changelog:
  - Remove the broken kmod stuff
  - Add a new dkms-based eventfd_link subpackage if vhost-cuse is enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-3
changelog:
  - Dont depend on fuse when built for vhost-user support
  - Drop version from testpmd binary, we wont be parallel-installing that


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-4
changelog:
  - Drop unused pre-2.0 era patches
  - Handle vhost-user/cuse selection automatically based on the copr repo name


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-7
changelog:
  - Drop pointless build conditional, the linker script is here to stay
  - Drop vhost-cuse build conditional, vhost-user is here to stay
  - Cleanup comments a bit
  - Enable parallel build again
  - Dont build examples by default


author: Panu Matilainen <pmatilai@redhat.com> - 2.1.0-1
changelog:
  - Update to dpdk 2.1.0 final
    - Disable ABI_NEXT
    - Rebase patches as necessary
    - Fix build of ip_pipeline example
    - Drop no longer needed -Wno-error=array-bounds
    - Rename libintel_dpdk to libdpdk


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-1
changelog:
  - Update DPDK to 2.2.0 final
  - Add README and MAINTAINERS docs
  - Adopt new upstream standard installation layout, including
    dpdk_nic_bind.py renamed to dpdk_nic_bind
  - Move the unversioned pmd symlinks from libdir -devel
  - Establish a driver directory for automatic driver loading
  - Disable CONFIG_RTE_SCHED_VECTOR, it conflicts with CONFIG_RTE_MACHINE default
  - Disable experimental cryptodev library
  - More complete dtneeded patch
  - Make option matching stricter in spec setconf
  - Update driverctl to 0.59


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-2
changelog:
  - Use a different quoting method to avoid messing up vim syntax highlighting
  - A string is expected as CONFIG_RTE_MACHINE value, quote it too
  - Enable librte_vhost NUMA-awareness


author: Panu Matilainen <pmatilai@redhat.com> - 16.07-1
changelog:
  - Update to DPDK 16.07 (#1383195)
  - Disable unstable bnx2x driver (#1330589)
  - Enable librte_vhost NUMA support again (#1279525)
  - Enable librte_cryptodev, its no longer considered experimental
  - Change example prefix to dpdk- for consistency with other utilities
  - Update driverctl to 0.89


author: John W. Linville <linville@redhat.com> - 16.11.2-3
changelog:
  - Enable i40e driver in PowerPC along with its altivec intrinsic support
  - Add PCI probing support for vfio-pci devices in Power8


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Jens Freimann <jfreimann@redhat.com> - 18.11.2-3
changelog:
  - Add fix for wrong pointer calculation to fix Covscan issue
  - https://cov01.lab.eng.brq.redhat.com/covscanhub/task/135452/log/added.html


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Matej Chalk <mchalk@redhat.com> 0.3.0-3
changelog:
  - Now contains makedeltarpm and applydeltarpm functionality
  - Added lzlib-devel dependency for OpenSUSE


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Andy Polyakov <appro@fy.chalmers.se>
changelog:
  - Initial packaging. Package version is derived from growisofs,
    dvd+rw-format and dvd+rw-booktype version. 4.0.3.0.3 means
    growisofs 4.0, dvd+rw-format 3.0 dvd+rw-booktype 3.


author: Harald Hoyer <harald@redhat.com> - 7.0-0.3
changelog:
  - use _SC_PHYS_PAGES instead of _SC_AVPHYS_PAGES to determine available memory
  - Resolves: rhbz#216794


author: Harald Hoyer <harald@redhat.com> - 7.0-4
changelog:
  - fixed exit status (#243036)
  - Allow session to cross 4GB boundary regardless of medium type.
    Add a -F option (used instead of -M or -Z), which displays 
    next_session offset and capacity. (#237967)


author: Matthias Saou <http://freshrpms.net/> 7.0-7
changelog:
  - Minor spec file cleanups (tabs vs. spaces, etc.).
  - Use install instead of cp for the html file to avoid umask differences.


author: Honza Horak <hhorak@redhat.com> - 7.1-9
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16, 
    even in case of DAO writing (replaces the previous fix)
    Resolves: #810483


author: Honza Horak <hhorak@redhat.com> - 7.1-11
changelog:
  - Spec file cleanup
  - Print error in case we want to write already written DVD-RW in Sequential
    Recording mode (bug #810838)
  - Add man page for dvd+rw-format


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-13
changelog:
  - when formating blu-ray as srm+pow, handle it later correctly as srm+pow, not srm
  (credits Thomas Schmitt)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-17
changelog:
  - added dvd+rw-tools-7.1-bluray_pow_freespace.patch,
    based on https://bugzilla.redhat.com/show_bug.cgi?id=1082360
    count nwa (next writeable address) even in pow (pseudo overwrite) mode


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: William Cohen <wcohen@redhat.com> - 7.99-0.12
changelog:
  - Fix static library and header file permissions.
  - Use sources from the dyninst git repositories.
  - Fix 32-bit library versioning for libdyninstAPI_RT_m32.so.


author: William Cohen <wcohen@redhat.com> - 7.99-0.18
changelog:
  - Rebase on newer git tree the has a number of merges into it.
  - Adjust spec file to allow direct use of git patches
  - Fix to eliminate unused varables.
  - Proper delete for array.


author: Josh Stone <jistone@redhat.com> - 7.99-0.21
changelog:
  - Rebase on newer git tree
  - Update context in dyninst-git.patch
  - Drop dyninst-delete_array.patch
  - Drop dyninst-common-makefile.patch


author: Josh Stone <jistone@redhat.com> 7.99-0.23
changelog:
  - Rebase on newer git tree.
  - Update license files with upstream additions.
  - Split documentation into -doc subpackage.
  - Claim ownership of {_libdir}/dyninst.


author: Josh Stone <jistone@redhat.com> 7.99.1-0.25
changelog:
  - Rebase on newer git tree.
  - Bump the fake version to 7.99.1 to account for ABI differences.
  - Enforce the minimum libdwarf version.
  - Drop the upstreamed R_PPC_NUM patch.


author: Josh Stone <jistone@redhat.com> 7.99.1-0.27
changelog:
  - Rebase to git dd8f40b7b4742ad97098613876efeef46d3d9e65
  - Use _smp_mflags to enable building in parallel.


author: Josh Stone <jistone@redhat.com> 8.0-1
changelog:
  - Update to release 8.0.
  - Updated "files doc" to reflect renames.
  - Drop the unused BuildRequires libxml2-devel.
  - Drop the 7.99.x version-munging patch.


author: Josh Stone <jistone@redhat.com>
changelog:
  - Tweak the configure/make commands
  - Disable the testsuite via configure.
  - Set the private includedir and libdir via configure.
  - Set VERBOSE_COMPILATION for make.
  - Use DESTDIR for make install.


author: Josh Stone <jistone@redhat.com> 8.0-5
changelog:
  - Add a dyninst-testsuite package.
  - Patch test2_4 to protect against running as root.
  - Make dyninst-static require dyninst-devel.


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.1
changelog:
  - Update to Oxygen I-build
  - Don't build unsupported GTK2 backend for SWT
  - Move installation to a multilib agnostic location /usr/lib


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.3
changelog:
  - Simplify test installation and move machinery out of javadir now
    that java stuff is installed in its own place
  - Enable bootstrap mode


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.5
changelog:
  - Update to latest I-build
  - Update generated ant bundle to 1.10.1
  - Fix missing launcher bundle on s390, rhbz#1445162
  - Add missing BR on libsecret


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.10
changelog:
  - Rebuild for new ECF
  - Obsolete core NLS package
  - Fix cycle introduced between tests and contributor-tools


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.0-0.14
changelog:
  - Update to latest release candidate build
  - Rebuild for latest EMF and ECF
  - Drop nashorn extension mechanism


author: Mat Booth <mat.booth@redhat.com> - 1:4.7.1-5
changelog:
  - Drop workaround for metainfo problem
  - Add patch for javascript/webkit2 bug ebz#525340
  - Add missing mocking deps for contributor-tools


author: Mat Booth <mat.booth@redhat.com> - 1:4.8.0-0.1
changelog:
  - Update to Photon I-build
  - Remove conditional for webkit2 (always use it now)
  - Bump requirement on lucene


author: Mat Booth <mat.booth@redhat.com> - 1:4.8.0-0.2
changelog:
  - Update to latest I-build and fix build on 32bit intel platform
  - Tighten deps on batik to prevent runtime bundle resolution errors


author: Mat Booth <mat.booth@redhat.com> - 1:4.10.0-0.3
changelog:
  - Update to latest I-build
  - Build against latest jetty, mockito packages
  - Update requirements on EMF and ECF


author: Mat Booth <mat.booth@redhat.com> - 1:4.11-3
changelog:
  - Pre-strip debuginfo from the launcher binary to avoid conflicts with other RCP
    applications, which will use identical launcher binaries


author: Mat Booth <mat.booth@redhat.com> - 1:4.15-3
changelog:
  - Don't build and ship the test framework. We are not shipping any actual tests
    anyway and this allows to drop the dependency on mockito and friends.


author: Krzysztof Daniel <kdaniel@redhat.com> 3.5.6-3
changelog:
  - Don't duplicate org.apache* plugins
  - Use context qualifier to avoid constant feature version changes.


author: Mat Booth <fedora@matbooth.co.uk> - 3.8.0-1
changelog:
  - Update to latest upstream.
  - Now necessary to explicitly build more fine-grained features.
  - Drop unneeded dep on jakarta-commons-httpclient.
  - Fixed mixed use of tabs and spaces.
  - Switch core package to R: java-headless, rhbz #1068037


author: Mat Booth <mat.booth@redhat.com> - 3.9.0-3
changelog:
  - Make core package archful so it can be installed into libdir
    where eclipse-platform expects it to be


author: Mat Booth <mat.booth@redhat.com> - 3.10.1-1
changelog:
  - Update to latest upstream version
  - Use XZ compressed tarball
  - Make symlink generation more dynamic


author: Mat Booth <mat.booth@redhat.com> - 3.12.2-2
changelog:
  - Avoid embedding versions of external deps in features. This avoids the need to
    rebuild when a dependency changes version.


author: Mat Booth <mat.booth@redhat.com> - 3.13.2-1
changelog:
  - Update to latest release
  - Set qualifiers to source-modification-time instead of build-time, to
    eliminate descrepancies between architectures
  - Add SDK package for sources


author: Mat Booth <fedora@matbooth.co.uk> 2.4.1-1
changelog:
  - Initial release, based on eclipse-gef spec file, but with disabled AOT
    compiled bits because of RHBZ #477707.


author: Mat Booth <fedora@matbooth.co.uk> 2.4.1-2
changelog:
  - Build example installer plugins using the source from the tarball instead of
    trying to get the examples from source control a second time.


author: Mat Booth <fedora@matbooth.co.uk> 2.5.0-1
changelog:
  - Update to 2.5.0 final release (Galileo).
  - Build the features seperately to allow for a saner %files section.


author: Roland Grunberg <rgrunber@redhat.com> 2.7.0-1
changelog:
  - Update to 2.7.0.
  - Re-apply necessary patches, content-handler error fixed upstream.
  - licenses now exist in org.eclipse.{emf,xsd}.license-feature only.


author: Krzysztof Daniel <kdaniel@redhat.com> 2.8.0-0.1.postM6
changelog:
  - Update to latest upstream version.
  - Package eclipse-emf-core created for the need of Eclipse 4.2. 
  - Removed usage of Eclipse reconciler script.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.2-1
changelog:
  - Update to latest upstream, Kepler SR2
  - Drop requires on java, rhbz #1068039
  - Remove unused patch
  - Update project URL


author: Mat Booth <mat.booth@redhat.com> - 2.10.0-1
changelog:
  - Update to latest upstream release
  - Fix obsoletes on emf-core package, rhbz #1095431
  - Move edit plugin from core to main package


author: Mat Booth <mat.booth@redhat.com> - 2.10.1-2
changelog:
  - Make core package archful so it can be installed into libdir
    where eclipse-platform expects it to be
  - Move eclipse-emf -> eclipse-emf-runtime, this is because we can have
    noarch sub-packages of an archful package, but cannot have archful
    sub-packages of a noarch package
  - Fix some minor rpmlint errors


author: Mat Booth <mat.booth@redhat.com> - 2.12.0-2
changelog:
  - Set qualifiers to source-modification-time instead of build-time, to eliminate
    descrepancies between architectures
  - Temporarily remove dep on XSD


author: Mat Booth <mat.booth@redhat.com> - 2.12.0-5
changelog:
  - Make package noarch now that Eclipse is in the same location on all arches
  - Drop old obsoletes/provides


author: Mat Booth <mat.booth@redhat.com> - 2.14.0-1
changelog:
  - Update to Photon release
  - Add XSD sub-package (in line with upstream's new combined tycho build)
  - Run tests during maven build, no longer any need to package them
  - Also drop examples sub-package


author: Laszlo Ersek <lersek@redhat.com> - 20140723-1.git3facc08.el7
changelog:
  - rebase from upstream a618eaa to 3facc08
  - update to openssl-0.9.8za
  - drop downstream-only split varstore patch, rely on upstream's


author: Laszlo Ersek <lersek@redhat.com> - 20140822-1.git9ece15a.el7
changelog:
  - rebase from upstream 3facc08 to 9ece15a
  - update to openssl-0.9.8zb
  - update to FatPkg SVN r86 (git 2355ea2c)
  - the following patches of Paolo Bonzini have been merged in upstream; drop the
    downstream-only copies:
    7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH
    d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2
            checkout
    1c023eb BuildEnv: remove useless check before setting $WORKSPACE
  - include the following patches that have been pending review on the upstream
    list for a long time:
    [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369
    [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515
  - nasm is a build-time dependency now because upstream BuildTools has started
    to call it directly


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-2.git9ece15a
changelog:
  - ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784]
  - ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784]
  - ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784]
  - ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592]
  - ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592]
  - ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592]
  - ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296]
  - ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296]
  - ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294]
  - ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294]
  - Resolves: bz#1145784
    (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce)
  - Resolves: bz#1147592
    (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary)
  - Resolves: bz#1148294
    (drop OvmfPkg's stale fork of SecureBootConfigDxe)
  - Resolves: bz#1148296
    (provide a non-interactive way to auto-enroll important SecureBoot certificates)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-3.git9ece15a.el7
changelog:
  - ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927]
  - ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927]
  - ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927]
  - Resolves: bz#1153927
    (set NEXTBOOT to uefi setting failed from Windows Recovery console)


author: Laszlo Ersek <lersek@redhat.com> - AAVMF-20141113-1.git77d5dac
changelog:
  - rebased to upstream 77d5dac
    <https://bugzilla.redhat.com/show_bug.cgi?id=1162314#c1>
  - patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION"
    is now upstream (SVN r16219, git edb5073)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-4.git9ece15a.el7
changelog:
  - ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314]
  - ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314]
  - Resolves: bz#1162314
   (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-6.git9ece15a.el7
changelog:
  - ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027]
  - Resolves: bz#1166027
    (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit")


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-7.git9ece15a.el7
changelog:
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971]
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971]
  - Resolves: bz#1166971
    (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20151104-1.gitb9ffeab.el7
changelog:
  - rebase to upstream b9ffeab
  - Resolves: bz#1207554
    ([AAVMF] AArch64: populate SMBIOS)
  - Resolves: bz#1270279
    (AAVMF: output improvements)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160202-1.gitd7c0dfa.el7
changelog:
  - rebase to upstream d7c0dfa
  - update OpenSSL to 1.0.2e (upstream)
  - update FatPkg to SVN r97 (upstream)
  - drive NVMe devices (upstream)
  - resize xterm on serial console mode change, when requested with
    -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y
    (downstream)
  - Resolves: bz#1259395
    (revert / roll back AAVMF fix for BZ 1188054)
  - Resolves: bz#1202819
    (OVMF: secure boot limitations)
  - Resolves: bz#1182495
    (OVMF rejects iPXE oprom when Secure Boot is enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160202-2.gitd7c0dfa.el7
changelog:
  - ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678]
  - ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678]
  - ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678]
  - ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678]
  - ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


